Privacy and Cookie Policy

GN Wellsprings Care Services Ltd

Last updated: 5 August 2025

1. Introduction

GN Wellsprings Care Services Ltd (“we”, “our”, or “us”) is committed to protecting the privacy and personal data of our service users, employees, partners, and visitors to our website. This Privacy and Cookie Policy outlines how we collect, use, store, and share your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

GN Wellsprings Care Services Ltd
Company Number: [Insert Company Number]
Registered Address: [Insert Registered Address]
Email: [Insert Contact Email]
Telephone: [Insert Contact Number]
Data Protection Officer: [Insert DPO name or role, if applicable]

3. What Personal Data We Collect

We may collect the following categories of personal data:

Service Users

Name, address, date of birth, contact details
Health and medical information
Care needs and risk assessments
Emergency contacts
Safeguarding and incident reports

Employees and Job Applicants

Name, address, date of birth, contact details
Employment history, references, DBS information
Right to work documentation
Bank details and National Insurance number
Training and development records

Website Visitors

IP address and browser type
Pages visited and actions taken
Cookie identifiers (see Cookie section below)

4. How We Use Your Personal Data

We use your personal data to:

Provide and manage care services
Recruit and manage staff
Monitor quality and compliance
Communicate with you and respond to enquiries
Meet our legal, regulatory, and contractual obligations
Improve our website and digital services

5. Legal Bases for Processing

We rely on one or more of the following legal bases:

Consent (where required)
Performance of a contract
Legal obligation
Vital interests
Legitimate interests (e.g., service improvement, safeguarding)

6. Sharing Your Information

We may share your information with:

Healthcare professionals and emergency services
Regulatory bodies (e.g., CQC, ICO)
Local authorities and funding bodies
Payroll and HR service providers
IT and software support providers (under data processing agreements)
Law enforcement, where legally required

We ensure all third parties comply with data protection laws and handle data securely.

7. Data Retention

We retain personal data in line with our Data Retention Policy and relevant legal requirements. For example:

Care records: 8 years after the last contact
Employment records: 6 years after employment ends

8. Your Rights

You have the following rights under the UK GDPR:

Right to access your data
Right to rectification
Right to erasure (in certain cases)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent (where applicable)

To exercise any of these rights, please contact us using the details in Section 2.

9. Data Security

We take appropriate technical and organisational measures to protect your data, including:

Encrypted systems and devices
Access controls and user authentication
Staff training on data protection
Regular audits and compliance checks

10. Cookies

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us understand how users interact with our site and improve your browsing experience.

Types of Cookies We Use

Type of Cookie	Purpose
Necessary	Enable core functionality such as security and accessibility.
Analytics	Help us understand how visitors use the site (e.g., Google Analytics).
Preference	Remember your settings and choices.

Managing Cookies

You can manage your cookie preferences through your browser settings or by using the cookie banner on our website. Please note that disabling certain cookies may affect site functionality.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of such sites and encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time. The latest version will always be available on our website with the date of the most recent update.

13. Contact Us

If you have questions or concerns about this policy or how we handle your personal data, please contact:

GN Wellsprings Care Services Ltd
Email: [Insert Contact Email]
Telephone: [Insert Contact Number]
Address: [Insert Address]

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Helpline: 0303 123 1113