Privacy policy

The data controller for personal data processed through this website and our care services is:

We may collect the following categories of personal data:

• Identity data: name, date of birth, gender, next of kin details
• Contact data: address, telephone number, email address
• Health data: medical history, diagnoses, medications, care needs, assessment information
• Financial data: payment information for private-funded care
• Employment data: if you apply for a role with us (DBS information, references, qualifications)
• Enquiry data: information you provide when contacting us via our website forms
• Technical data: IP address, browser type, and pages visited (via analytics)

We process personal data under the following lawful bases:

• Consent - for website enquiry forms and marketing communications
• Contractual necessity - to fulfil our care service obligations
• Legitimate interests - for business administration and service improvement
• Legal obligation - for regulatory compliance (CQC, HMRC, employment law)
• Vital interests - to protect the health and safety of a person at risk

For special category health data (including clinical and care records), the primary lawful basis is Article 9(2)(h) of the UK GDPR - processing necessary for the provision of health or social care or treatment or the management of health or social care systems and services. This is supplemented by Schedule 1, paragraph 2 of the Data Protection Act 2018 (health and social care purposes) and is subject to the common law duty of professional confidentiality. Where Article 9(2)(h) does not apply (for example, where we process health data for a purpose outside direct care), we will rely on explicit consent (Article 9(2)(a)) or another applicable ground and will inform you at the time of collection.

You have the following rights regarding your personal data:

• Right of access - request a copy of the personal data we hold about you
• Right to rectification - request correction of inaccurate data
• Right to erasure - request deletion of data where processing is no longer necessary
• Right to restrict processing - request that we limit how we use your data
• Right to data portability - receive your data in a portable format
• Right to object - object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making - we do not use automated decision-making

To exercise any of these rights, please contact us at homecare@cascadiaqualityhomecare.com or in writing to our registered office. We will respond within one calendar month.

If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We may share your data with:

• NHS partners - GPs, community nurses, hospital discharge teams (for care coordination)
• Local authority commissioners - as required to fulfil commissioned care contracts
• Secure email hosting (cPanel/Namecheap) - enquiry and referral form data is transmitted directly to our mailboxes and is not stored by any third-party processor
• Regulatory bodies - CQC and ICO where we are required to report
• HMRC - for payroll and tax compliance

We do not sell personal data to third parties.