Privacy Policy

 ThereToCare Ltd Privacy Policy Registered Office: Block E, Ringstones Industrial Estate, Bridgemont, Whaley Bridge, SK23 7PD Telephone: 07583 135839 Last Updated: 18 September 2026 1. Introduction THERETOCARE LTD (“ThereToCare”, “we”, “us” or “our”) is committed to protecting the privacy and security of personal information entrusted to us. 

This Privacy Policy explains how we collect, use, store and protect personal information when you:

visit our website; 

contact us about our home-care services; 

make an enquiry about care for yourself or another person; 

submit information through our website contact form; 

apply for employment with us; 

communicate with us by telephone, email or other means; or 

otherwise interact with ThereToCare. 

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. 

2. Who is responsible for your information? The data controller responsible for your personal information is: THERETOCARE LTD Block E, Ringstones Industrial Estate Bridgemont Whaley Bridge SK23 7PD Telephone: 07583 135839 If you have any questions about how we process your personal information, please contact us using the details above.

3. Information we may collect Depending on how you interact with us, we may collect some or all of the following information. Website and enquiry information When you contact us through our website, we may collect:

 • your name; 

• email address; 

• telephone number;

 • information contained within your enquiry; 

• documents or files you choose to upload; 

• information about the person requiring care; and 

• any other information you voluntarily provide. ThereToCare Ltd – Privacy Policy | Page 1 Our website contact form may allow visitors to submit their name, email address, telephone number and attachments.

Care-related information When you enquire about or receive care services from ThereToCare, we may need to collect information necessary to assess, arrange and provide appropriate care. This may include: 

• medical and health information; 

• information about disabilities or care needs; 

• medication information; 

• mobility and communication needs; 

• information about risks and safeguarding; 

• information about family members, representatives or next of kin; 

• emergency contact information; 

• information relating to care assessments and care plans; and 

• information necessary to safely provide and monitor care. Health information is considered special category personal data under UK GDPR and is subject to additional legal safeguards. 

4. Information relating to employees and job applicants If you apply for a position with ThereToCare, we may collect information such as: 

• your name and contact details; 

• employment history; 

• qualifications and training; 

• references; 

• right-to-work information; 

• DBS and other suitability information where legally required; 

• information relating to health where necessary for employment purposes; and 

• other information reasonably required as part of recruitment and employment. Further information may be provided to applicants and employees through our relevant staff privacy documentation. 

5. How we use personal information We may use personal information to: 

• respond to enquiries; 

• arrange assessments; 

• provide and manage care services; 

• communicate with clients, families and representatives; 

• develop and review care plans; 

• ensure the safety and wellbeing of clients; 

• administer medication and care records where applicable; 

• manage safeguarding and risk; 

• communicate with healthcare and other professionals where appropriate and lawful; 

• manage our business and administration; 

• process payments and invoices; 

• recruit and manage employees;  

• meet our legal and regulatory obligations; 

• investigate complaints, incidents and concerns; 

• maintain records required by law or regulation; 

• protect our systems, staff, clients and visitors; 

• prevent and detect fraud or unlawful activity; and 

• improve our services. 

6. Our lawful bases for processing 

We will only process personal information where we have a lawful basis to do so. 

Contract 

We may process information where it is necessary to enter into or perform a contract with you, including information required to arrange and provide care services. 

Legal obligation 

We may process information where necessary to comply with a legal or regulatory obligation, including obligations relating to health and social care, employment, taxation, safeguarding, record keeping and regulatory requirements. 

Legitimate interests 

We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. Examples may include managing our business, maintaining appropriate records, responding to enquiries and protecting our systems. 

Consent

 Where appropriate, we may ask for your consent before processing your information. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn. 

Vital interests 

In limited circumstances, personal information may be processed where necessary to protect someone's vital interests, for example in an emergency. 

7. Special category information Some information processed by a home-care provider may be considered special category data, particularly information concerning health. We will only process special category information where the requirements of UK GDPR and the Data Protection Act 2018 are satisfied. Where we process health information for the provision of health or social care, we will apply the appropriate legal conditions and safeguards. We will only collect information that is necessary, relevant and proportionate for the purpose for which it is being processed. 

8. Sharing personal information We will only share personal information where there is a lawful reason to do so.  Depending on the circumstances, information may be shared with: 

• healthcare professionals; 

• GPs and other medical professionals; 

• hospitals or other healthcare organisations; 

• social services and local authorities; 

• safeguarding authorities; 

• emergency services; 

• family members, representatives or attorneys where appropriate and authorised; 

• the Care Quality Commission (CQC) and other regulatory or statutory bodies where required; 

• professional advisers; 

 • payment and accounting providers; 

• IT and software providers who provide services to us; 

• recruitment and employment-related providers; and 

• other organisations where necessary to provide services or comply with legal obligations. We do not sell personal information to third parties. Where we use third-party service providers to process personal information on our behalf, we take appropriate steps to ensure that they provide appropriate security and comply with applicable data protection requirements. 

9. Website contact forms If you use the contact form on our website, the information you submit may be used to respond to your enquiry. Please do not provide unnecessary sensitive or medical information through a general website contact form. If you are enquiring about care, we may subsequently request additional information through a more appropriate and secure process. 

10. Google reCAPTCHA Our website may use Google reCAPTCHA to help protect our website forms from spam and abuse. Google may collect information in connection with the operation of reCAPTCHA. Google's own privacy and terms provisions apply to its processing. 

11. Cookies and website technologies Our website may use cookies and similar technologies. Cookies may be used to: 

• enable the website to function; 

• remember preferences; 

• understand how visitors use the website; 

• improve website performance; and 

• protect website forms against spam and abuse. 

Where applicable, non-essential cookies will only be used in accordance with applicable UK privacy and electronic communications requirements. You can control or restrict cookies through your browser settings and, where provided, our website cookie controls.

 12. Website analytics We may use website analytics or similar technologies to understand how visitors use our website and to improve our online services. Where analytics or other third-party technologies are used, the relevant provider may process technical information such as: 

• IP address; 

• browser type; 

• device information; 

• pages visited; 

• approximate location; 

• referral information; and 

• information about how you interact with the website. We will ensure that any such processing is carried out in accordance with applicable data protection and cookie requirements. 

13. How we protect your information We take appropriate technical and organisational measures to protect personal information against: 

• unauthorised access; 

• accidental loss; 

• destruction; 

• alteration; 

• disclosure; and 

• other unlawful or unauthorised processing. Our measures may include access controls, secure passwords, staff confidentiality requirements, secure IT systems, staff training, information governance policies and procedures, appropriate physical security, and regular review of our information security arrangements. However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. 

14. How long we keep information We retain personal information only for as long as necessary for the purposes for which it was collected, including where we need to retain information to comply with legal, regulatory, accounting, safeguarding or reporting requirements. Retention periods will depend on the type of information and the reason it is being processed. We maintain appropriate retention and disposal arrangements and will securely delete, destroy or anonymise information when it is no longer required, subject to any legal or regulatory requirements to retain it. 

15. International transfers Some of the third-party technology or service providers we use may process information outside the United Kingdom. Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable UK data protection legislation.

16. Your data protection rights Depending on the circumstances, you have rights under UK data protection law, including the right to: 

• request access to your personal information; 

• request correction of inaccurate or incomplete information; 

• request deletion of personal information in certain circumstances; 

• request restriction of processing in certain circumstances; 

• object to certain processing; 

• request transfer of certain information to another organisation where the right to data portability applies; and 

• withdraw consent where processing is based on consent. These rights are subject to certain legal exemptions and limitations. To exercise a right or ask a question about your personal information, please contact ThereToCare using the contact details provided in this Privacy Policy. We may need to request appropriate information to verify your identity before fulfilling certain requests. 

17. Right to complain If you have concerns about the way we have handled your personal information, please contact us first so that we can investigate and attempt to resolve your concerns. You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent data protection regulator. Further information about the ICO and how to make a complaint can be found on the ICO website. 

18. Third-party websites Our website may contain links to other websites. We are not responsible for the privacy practices, security or content of third-party websites. You should review the privacy policy of any external website you visit. 

19. Changes to this Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data protection practices. The latest version will be published on our website. 

Last reviewed: 18 September 2026 

20. Contact us If you have any questions about this Privacy Policy or how ThereToCare handles personal information, please contact us: THERETOCARE LTD Block E, Ringstones Industrial Estate Bridgemont Whaley Bridge SK23 7PD Telephone: 07583 135839 Website: www.theretocare.co.uk ThereToCare Ltd – Privacy Policy