Privacy Policy - Data Protection & GDPR

HomeCare Direct Limited (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, the lawful bases we rely on, and your rights under UK data protection law. We are registered with the Information Commissioner’s Office (ICO) as a Data Controller in the United Kingdom. This policy applies to users of www.homecaredirect.co.uk, individuals making referrals, clients and prospective clients, job applicants, and anyone who interacts with our organisation.

1. Information We Collect

We may collect and process the following types of personal data:

1.1 Information you provide directly

This includes information submitted via:

Contact forms
Referral forms
Client enquiries
Job applications
Email or telephone correspondence

The information may include your name, address, email, telephone number, and any other details relevant to your enquiry or application.

1.2 Information relating to care

Where a referral is made for care or support services, we may collect personal and special category data (e.g., health and medical information) required to:

Assess the referral
Determine suitability for services
Deliver safe, effective, personalised care

This may include information provided by: - Healthcare professionals - Local authorities - Case managers - Family members or representatives

1.3 Technical information

When you visit our website, we may automatically collect:

IP address
Browser type
Device information
Pages visited and length of visit
Cookie preferences and consent status

Non-essential cookies (e.g., analytics) are only used with your explicit consent via our cookie banner.

2. How We Use Your Information

We use your personal data for the following purposes:

2.1 To provide services you request

Including responding to enquiries, assessing referrals, and delivering care and support services.

2.2 To assess and process job applications

Including verifying identity, qualifications, and suitability for roles.

2.3 To ensure safe, effective, and personalised care

This includes clinical governance, care planning, risk assessments, and communication with healthcare professionals.

2.4 To improve our website and user experience

Where consent is given for analytics cookies, we use aggregated data to improve site performance and content.

2.5 For internal administration and security

Including troubleshooting, system monitoring, and ensuring the security and integrity of our website and systems.

3. Lawful Bases for Processing

Under the UK GDPR, we rely on one or more of the following lawful bases:

Consent – where you actively agree to the use of your data (e.g., analytics cookies, marketing preferences).
Legitimate interests – for example, improving website performance or responding to general enquiries.
Performance of a contract – where processing is necessary to provide care and support services, or to progress an employment contract.
Legal obligation – where we are required to process certain data (e.g., safeguarding, employment, or regulatory obligations).
Vital interests – where processing is necessary to protect someone’s life.
Provision of health or social care (Article 9(2)(h) UK GDPR) – for processing special category data relating to care and support.

4. Your Rights

Under UK data protection law, you have the following rights:

Right of access – to request copies of your personal data.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your personal data in certain circumstances.
Right to restrict processing – to limit how your data is used in certain circumstances.
Right to object – to object to processing based on legitimate interests.
Right to data portability – to request transfer of your data to another organisation or to you (where applicable).

To exercise any of these rights, you can submit an online request at https://www.homecaredirect.co.uk/en/data-request or contact our Data Protection Officer using the details in Section 6 below.

5. Cookies

Our website uses cookies to improve your experience and help us understand how the site is used. Essential cookies are necessary for site functionality and do not require consent. Non-essential cookies, such as Google Analytics, are only used if you give explicit consent through our cookie banner. For more details, please refer to our full Cookies Policy.

6. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact our Data Protection Officer (DPO): Email: dpo@homecaredirect.co.uk Address: HomeCare Direct Limited, Riverside House, Hady Hill, Chesterfield, Derbyshire, S41 0DT, United Kingdom.

7. Complaints

You have the right to make a complaint to the Information Commissioner’s Office (ICO) at any time: www.ico.org.uk We would appreciate the opportunity to respond to your concerns directly before you contact the ICO.