Privacy Policy

Introduction

CE Healthcare is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting our website or using our services, you accept and consent to the practices described in this policy.

For the purpose of applicable data protection legislation (including the UK General Data Protection Regulation / UK GDPR and the Data Protection Act 2018), CE Healthcare acts as the data controller.

Information We Collect

We may collect and process various types of personal information depending on how you interact with us. This includes:

Your full name, title, date of birth, gender, and contact details (email address, telephone number, and residential address).

Information related to care requirements, medical history, physical and mental health conditions, support needs, and emergency contact details provided during inquiries or assessments.

Records of correspondence when you contact us via email, telephone, online forms, or postal mail, including inquiries, feedback, or complaints.

IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform collected automatically when you browse our website.

How We Use Your Information

We use the information we collect about you for the following purposes:

• To process care inquiries and assess suitability for our support services.
• To develop, implement, and update personalized care plans.
• To deliver high-quality, safe, and effective care and support.
• To communicate with service users, family members, and authorized representatives.
• To fulfill regulatory and statutory reporting obligations in healthcare.
• To process employment applications and manage staff recruitment.
• To improve our website functionality and user experience.

We will only process your personal data when the law allows us to. Most commonly, we process data to fulfill contractual obligations, comply with legal requirements, or serve legitimate interests.

Legal Basis for Processing

Under data protection laws, we rely on specific legal grounds to process your personal information:

Consent: Where you have provided clear, explicit consent for us to process your personal data for a specific purpose.

Contractual Necessity: Where processing is necessary to perform a contract with you or take steps at your request prior to entering a contract.

Legal Obligation: Where processing is necessary to comply with regulatory standards or legal requirements in the social care sector.

Vital Interests: Where processing is necessary to protect someone’s life, physical safety, or urgent medical wellbeing.

Legitimate Interests: Where processing is necessary for our legitimate business operational needs, provided your rights do not override those interests.

Cookies & Website Analytics

Our website uses cookies and similar tracking technologies to distinguish you from other users. This helps us provide you with a good experience when you browse our website and allows us to improve our site.

We use essential cookies to ensure basic site functionality, alongside analytical cookies to understand visitor traffic patterns and optimize page layout.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable cookies, some parts of this website may become inaccessible or not function properly.

Sharing Your Information

We do not sell or trade your personal information. We may share your information with trusted third parties only under the following circumstances:

• Healthcare professionals, doctors, hospitals, or social care authorities involved in delivering care.
• Regulatory bodies such as the Care Quality Commission (CQC) where required by law.
• Third-party service providers (IT support, secure cloud storage, software platforms) operating under strict data confidentiality agreements.

All third-party service providers are required to take appropriate security measures to protect your personal data in line with our policies.

Data Security

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.

In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Your GDPR Rights

Under data protection laws, you have several statutory rights regarding your personal information:

Request Access: Right to obtain a copy of the personal data we hold about you.

Request Correction: Right to request correction of inaccurate or incomplete data.

Request Erasure: Right to request the deletion of personal data where there is no good reason for us continuing to process it.

Object to Processing: Right to object to processing based on legitimate interests.

Request Restriction: Right to request suspension of processing under specific scenarios.

If you wish to exercise any of these rights, please contact us using the details provided below.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements.

Care records are retained in compliance with statutory healthcare retention schedules and regulatory guidance.

Contacting Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our team:

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.