1. Who we are

Buxton Healthcare Ltd
Registered in England and Wales

• Phone: 01603 336010
• Email: info@buxtonhealthcare.co.uk
• Website: buxtonhealthcare.com

For the purposes of UK data protection law, Buxton Healthcare Ltd is the data controller.

2. What personal data we collect

Depending on how you interact with us, we may collect the following types of personal data:

General enquiries and service enquiries

• Full name
• Phone number
• Email address
• Information you choose to share about care needs or enquiries

Referral forms

• Personal details of the individual being referred
• Contact information
• Information relating to care needs, support requirements, communication needs, and wellbeing
• Relevant contextual or background information provided by the referrer

Recruitment enquiries and applications

• Name and contact details
• Address and employment history
• Education, qualifications, and training
• Referee details
• Declarations required for safeguarding and employment compliance

We only collect information that is relevant and necessary for the purpose for which it is provided.

3. How we collect personal data

We may collect personal data when you:

• Complete a form on our website
• Submit a referral through our referral form
• Respond to our online advertisements or lead forms
• Contact us by phone, email, or social media
• Apply for a role with Buxton Healthcare Ltd

4. How we use your personal data

We use personal data to:

• Respond to enquiries about domiciliary care or supported living services
• Assess care needs and respond to referrals
• Contact individuals or representatives to discuss services or arrange assessments
• Manage recruitment enquiries and applications
• Meet safeguarding, regulatory, and legal obligations
• Maintain appropriate operational and service records

Personal data is used only for purposes that are relevant, lawful, and proportionate.

5. Referral form data (care and support referrals)

When referrals are submitted via our referral forms (including referrals made by individuals, families, professionals, or organisations), we may process personal data relating to the individual being referred that is necessary to assess care needs and respond appropriately.

This may include information about support needs, health considerations, communication requirements, and other relevant details.

Lawful basis for processing:
We process referral data under lawful bases permitted by UK GDPR, including legitimate interests and consent where provided, for the purpose of assessing, planning, and coordinating care services.

Referral information is not used for marketing purposes.

6. Recruitment enquiries and applications

If you contact us regarding employment opportunities or submit a recruitment application, we may use your personal data to:

• Respond to your enquiry
• Assess your suitability for potential roles
• Carry out recruitment, safeguarding, and compliance checks

If you choose to proceed with an application, additional personal data will be collected as part of our formal recruitment and onboarding process. At that stage, you will be provided with further information and consent documentation before any statutory or sensitive checks are undertaken.

7. Sensitive personal data

Some information collected through referral forms or recruitment applications may constitute special category data under UK GDPR, such as health-related information or criminal conviction declarations.

Such data is processed only where necessary, lawfully, and with appropriate safeguards in place, and only for purposes directly related to care provision, safeguarding, recruitment, or legal compliance.

8. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

• Consent – where you voluntarily provide information and agree to be contacted
• Legitimate interests – to respond to enquiries, assess referrals, manage recruitment, and operate our services
• Legal obligations – where processing is required to meet regulatory or safeguarding requirements

You may withdraw consent at any time by contacting us.

9. How we store and protect your data

We take appropriate technical and organisational measures to protect personal data, including:

• Secure electronic systems and platforms
• Restricted access to authorised staff only
• Measures to prevent unauthorised access, loss, or misuse

Personal data is handled confidentially and in accordance with applicable data protection laws.

10. Sharing your information

We do not sell, rent, or trade personal data.

Personal information may be shared only where necessary and lawful, including:

• With professionals involved in delivering or assessing care
• With regulators or authorities where required by law
• For safeguarding, auditing, or compliance purposes

Any third parties we work with are required to keep personal data secure and confidential.

11. How long we keep your data

We retain personal data only for as long as necessary to:

• Respond to enquiries or referrals
• Provide services
• Manage recruitment processes
• Meet legal, regulatory, and safeguarding requirements

When data is no longer required, it is securely deleted.

12. Your data protection rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing in certain circumstances
• Withdraw consent at any time

To exercise your rights, please contact us using the details below.

13. Contacting us and complaints

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

Buxton Healthcare Ltd
Phone: 01603 336010
Email: info@buxtonhealthcare.co.uk

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any updates will be published on this page.