Privacy Policy

ShieldsCare Limited is the data controller for the personal data described in this notice. Registered office: [INSERT REGISTERED OFFICE ADDRESS]. Company registration number: [INSERT COMPANY REGISTRATION NUMBER].

Data protection contact: admin@shieldscare.co.uk.

• Contact details such as name, address, email and telephone number.
• Referral and assessment information, including health and care needs.
• Support plans, daily records and review notes.
• Recruitment information, including CVs, references and eligibility checks.
• Website enquiry details submitted through our forms.
• Documents you choose to upload with a referral, application or job application.

Care information often includes health data and may include other special category data. We process it where necessary for the provision of health or social care, for safeguarding, or where another lawful condition applies.

• Contract — to deliver the care and support we have agreed.
• Legal obligation — to meet regulatory, safeguarding and employment duties.
• Legitimate interests — to run and improve our services and respond to enquiries.
• Consent — where you have given it, for example when submitting a website form.
• Vital interests — in an emergency where someone's life is at risk.

• To assess, plan, deliver and review care and support.
• To respond to enquiries, referrals and applications.
• To recruit and employ staff.
• To meet regulatory, safeguarding, contractual and legal requirements.
• To monitor quality and improve our services.

We may share information with local authorities, NHS and health professionals, safeguarding bodies, regulators, funders and, where appropriate, family members or advocates. We share only what is necessary and only where there is a lawful basis to do so. We do not sell personal data.

Information submitted through this website is stored in secure, access-controlled systems. Uploaded documents are held in private storage accessible only to authorised staff. Access is limited to those who need it for their role, and activity is subject to internal controls.

We retain records for the periods required by law, regulation and contract. Care records, employment records and enquiry records each have their own retention period. [INSERT RETENTION SCHEDULE DETAILS]

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to erase data where the law allows.
• Restrict or object to certain processing.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact admin@shieldscare.co.uk.

If you are unhappy with how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We review this notice regularly and will publish any updates on this page.