Privacy Policy

Carerose Care
Last updated: August 2025

Carerose Care (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following personal information:

Personal details: name, address, date of birth, phone number, email address
Health information: medical history, care needs, medications, and other relevant health data
Employment information: if you apply to work with us, we may collect your CV, references, and background check information
Financial information: payment details and invoicing information
Communication records: emails, phone calls, and other correspondence with us

2. How We Use Your Information

We use your personal data for purposes including:

Providing and managing your care services
Communicating with you about your care or enquiries
Meeting our legal and regulatory obligations
Processing job applications and managing employment records
Managing payments, invoicing, and accounting
Improving our services and ensuring safety and quality

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

Consent: where you have given clear permission for us to process your data
Contract: to provide you with care services or employment
Legal obligation: to comply with laws and regulations
Legitimate interests: for the effective running of our business, provided it does not override your rights

4. Sharing Your Information

We may share your personal data with:

Healthcare professionals involved in your care
Regulatory bodies where legally required
Service providers and contractors who support our operations (e.g., payroll, IT support)
Emergency services if necessary to protect your health or safety

We will never sell your personal data to third parties.

5. Data Storage and Security

We store personal data securely in paper and electronic form, with appropriate technical and organisational measures in place to protect against unauthorised access, alteration, or loss.

6. Data Retention

We will keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. After this period, data will be securely deleted or anonymised.

7. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data
Request correction of inaccurate information
Request deletion of your data (where applicable)
Restrict processing of your data
Object to processing based on legitimate interests
Request a copy of your data in a portable format
Withdraw consent at any time (where consent is the lawful basis)

To exercise your rights, please contact us using the details below.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

📞 0345 257 2019 | 07469 870 518
📧 Email: enquiry@crcares.co.uk
🏢 Address: Suite 12, Harris House, The Pinnacles, Harlow, CM19 5AN

9. Right to Complain

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.