Privacy Policy

Kind Healthcare is a CQC-registered domiciliary care agency providing home care services across Nottingham and the surrounding areas.

Data controller: Kind Healthcare Address: Castle Cavendish Enterprise Centre, St. Peters Street, Nottingham, NG7 3EN Email: [email protected] Telephone: 0115 786 0785

If you have any questions about how we handle your personal data, please contact us using the details above.

We may collect and process the following categories of personal data:

• Contact information — name, telephone number, email address and postal address • Care-related information — details about care needs, health conditions and preferences provided during enquiries or assessments • Employment information — CVs, references and right-to-work documents submitted via our Join Our Team page • Website usage data — IP address, browser type, pages visited and time spent on our site (collected via analytics tools) • Communication records — emails, telephone call notes and enquiry form submissions

We only collect data that is necessary for the purposes described in this policy.

We use your personal data for the following purposes:

• To respond to enquiries and arrange free care assessments • To provide and manage home care services • To process job applications and manage employment relationships • To comply with our legal and regulatory obligations as a CQC-registered provider • To improve our website and services • To send service-related communications (we do not send unsolicited marketing)

We will not use your data for automated decision-making or profiling.

We process your personal data on the following lawful bases under UK GDPR:

• Legitimate interests — to respond to enquiries and improve our services • Contract performance — to deliver care services you have engaged us to provide • Legal obligation — to comply with CQC registration requirements, safeguarding duties and employment law • Consent — where you have explicitly agreed to a specific use of your data (you may withdraw consent at any time)

Where we process special category data (such as health information), we do so under Article 9(2)(h) UK GDPR — for the purposes of providing health or social care.

We do not sell your personal data. We may share it with:

• Regulatory bodies — the Care Quality Commission (CQC) and local authorities where required by law • Healthcare professionals — GPs, district nurses and other professionals involved in your care, with your knowledge • Our staff — only those who need access to deliver your care or process your enquiry • IT and software providers — who process data on our behalf under data processing agreements • Legal and professional advisers — where necessary to protect our legal rights

All third parties are required to handle your data securely and in accordance with UK GDPR.

We retain personal data only for as long as necessary:

• Enquiry and contact form data — up to 12 months if no care service is arranged • Care records — a minimum of 8 years after the end of care, in line with NHS and CQC guidance • Employment records — up to 6 years after employment ends • Website analytics data — as configured by our analytics provider (typically 26 months)

After the applicable retention period, data is securely deleted or anonymised.

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you • Right to rectification — to ask us to correct inaccurate or incomplete data • Right to erasure — to request deletion of your data in certain circumstances • Right to restrict processing — to ask us to limit how we use your data • Right to data portability — to receive your data in a structured, machine-readable format • Right to object — to processing based on legitimate interests • Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our website uses cookies and similar technologies to help us understand how visitors use the site. This may include analytics tools that collect anonymised data about page views, session duration and traffic sources.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of our website.

We do not use cookies to track you across other websites or for advertising purposes.

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Our staff receive data protection training and access to personal data is restricted on a need-to-know basis.

If you believe your data has been compromised, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last revised. We encourage you to review this policy periodically.