Privacy Policy

Primrose Ever Care (“we”, “us”, “our”) is a domiciliary home care provider operating in North Kent, England. We are the data controller for the personal information we collect about you.

Contact: enquires@primroseevercare.co.uk | 07852 559816

We use your personal information to:

• Provide and manage home care services
• Communicate with you about your care or enquiry
• Maintain care records and care plans
• Comply with legal and regulatory obligations (including CQC requirements)
• Respond to complaints or concerns
• Improve our website and services

We process your personal data on the following legal bases:

• Contract: to fulfil our service agreement with you
• Legal obligation: to comply with care regulations and safeguarding law
• Legitimate interests: to manage and improve our service
• Consent: where you have given explicit consent (e.g. marketing communications)
• Vital interests: to protect the health and safety of a service user

Where we process special category data (such as health information), we rely on Article 9(2)(h) of the UK GDPR, processing necessary for the provision of social care.

We do not sell, rent or trade your personal information. We may share it with:

• Healthcare professionals involved in your care (GPs, hospitals, district nurses)
• Local authority social services where relevant to your care funding or safeguarding
• The Care Quality Commission (CQC) for regulatory purposes
• Our staff and carers, on a need-to-know basis
• IT service providers who help us operate our systems (under data processing agreements)

We will only share the minimum information necessary and always in accordance with this policy.

We retain personal data for as long as necessary to provide our services and comply with our legal obligations. For care records, this is generally:

• Adult care records: minimum 8 years after the last entry
• Financial records: 7 years for tax purposes
• Enquiry and contact data: up to 2 years if no service commenced

After these periods, data is securely deleted or anonymised.

Under UK GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate information
• Erasure: request deletion of your data (subject to legal obligations)
• Restriction: ask us to limit how we use your data
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent

To exercise any of these rights, please contact us at enquires@primroseevercare.co.uk. We will respond within one month.

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse. All staff are trained in data protection and confidentiality as part of their induction.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date. We encourage you to review this policy periodically.