Privacy Policy
Last updated: April 2025
1. Who We Are
GEG Care(“we”, “our”, “us”) is a registered home care provider operating in [LOCATION] and surrounding areas. We are committed to protecting your personal information and being transparent about how we use it.
Our registered address is: [INSERT ADDRESS]
If you have any questions about this policy, please contact us at [INSERT EMAIL ADDRESS] or call us on [INSERT PHONE NUMBER].
2. Information We Collect
We may collect the following types of personal information:
- Your name, address, telephone number and email address
- Information about the person requiring care and their health needs
- Details you provide when completing enquiry or assessment forms
- Records of communications between you and our team
- Technical data when you visit our website (such as your IP address, browser type and pages visited)
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and arrange care assessments
- Provide, manage and improve our home care services
- Comply with our legal and regulatory obligations as a CQC-registered provider
- Maintain accurate care records for the individuals we support
- Contact you with information relevant to your care needs (where you have consented)
- Improve the performance and usability of our website
We will never sell your personal information to third parties, and we will not use it for any purpose incompatible with the reason it was provided.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent — where you have given us clear permission to contact you
- Contract — where processing is necessary to provide the care services you have agreed to
- Legal obligation — where we are required to process data to comply with the law
- Legitimate interests — where we have a legitimate business reason to process data, provided it does not override your rights
5. Who We Share Your Information With
We do not sell or rent your personal data. We may share information with:
- Members of our care team directly involved in delivering your care
- NHS teams, GPs, hospices or other healthcare professionals where required for coordinated care
- Regulatory bodies such as the Care Quality Commission (CQC) where legally required
- Trusted technology partners who help us operate our website and communications (subject to data processing agreements)
All third parties we work with are required to handle your data securely and in accordance with UK data protection law.
6. How Long We Keep Your Information
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Care records are typically retained for a minimum of 8 years in line with health and social care regulatory guidance. Website enquiry data is retained for no longer than 3 years unless a care relationship is established.
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your data where there is no lawful reason for us to keep it
- Restriction — ask us to limit how we use your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at [INSERT EMAIL ADDRESS]. We will respond within 30 days.
8. Cookies and Website Data
Our website may use cookies and similar technologies to improve your browsing experience and understand how visitors use the site. You can control cookie preferences through your browser settings. We do not use cookies to collect personally identifiable information without your explicit consent.
9. Data Security
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your information against unauthorised access, loss or disclosure. All staff who handle personal data are trained on data protection and confidentiality obligations.
10. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent body for data protection:
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO. Please contact us first at [INSERT EMAIL ADDRESS].
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.