Legal
This policy explains what personal information GotoHealthcare collects, why we collect it, how we protect it, and the rights you have over it. We have written it in plain English, because a policy you cannot understand is not really a policy at all.
GotoHealthcare Ltd provides supported accommodation, supported living, domiciliary care and live-in care. For the purposes of data protection law we are a data controller, which means we decide what personal information is collected and how it is used.
We only collect what we actually need. The information we hold depends on your relationship with us.
If your application progresses, we will collect further information as part of our safer recruitment duties, including right to work documents, references and a DBS check. We will explain this separately at the time.
We hold considerably more detailed records, including care plans, risk assessments, medication records and daily notes. These records are governed by our internal care records policy as well as this notice.
Some of the information we hold is what the law calls special category data — information about your health, disability, ethnicity, religion or care needs. This category carries stronger legal protection, and we treat it accordingly.
We only process this information where we have both a lawful basis and an additional condition under Article 9 of the UK GDPR. In our case that is usually the provision of health or social care under Article 9(2)(h), or your explicit consent where you have volunteered health information in an enquiry.
Please do not include detailed medical information in the website enquiry form. Tell us briefly that you would like to talk, and we will arrange a secure conversation instead.
We do not sell your information. We do not use it for advertising, and we will not add you to a marketing list because you made an enquiry.
Data protection law requires us to have a specific lawful reason for using your information. Depending on the situation, we rely on:
We share information only where there is a clear reason to do so. This may include:
Website enquiries are processed by Netlify, our hosting provider, which may involve storage on servers outside the UK. Where information is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Addendum.
There are circumstances in which we may share information without your consent — most importantly where we believe a child or adult is at risk of harm. Safeguarding always takes precedence over confidentiality, and we would tell you wherever it is safe and appropriate to do so.
When information is no longer needed, we delete or securely destroy it.
We use access controls so staff only see the records they need, encryption for information sent over our website, secure storage for paper records, and regular staff training on confidentiality and data protection. If a data breach occurred that posed a risk to your rights, we would report it to the ICO within 72 hours and tell you where required.
Under UK data protection law you have the right to:
To exercise any of these rights, email info@gotohealthcare.co.uk. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Our website uses Google Analytics to understand how visitors use our pages, so we can improve them. This places cookies on your device and collects information such as which pages you visited and roughly where in the country you are.
Before publishing: UK law requires consent before non-essential analytics cookies are set. A cookie banner is needed on the site, or Google Analytics should be removed. This section should then be updated to match whichever route is taken.
You can block or delete cookies through your browser settings at any time. Doing so will not affect your ability to use the site.
We support young people in supported accommodation, and we take particular care with their information. Where a young person is able to understand what they are agreeing to, we seek their views directly rather than only asking an adult on their behalf. Records relating to children are retained until their 25th birthday in line with statutory guidance.
Our website is not intended for use by children to arrange their own care.
We review this policy at least once a year and whenever our practices change. The date at the top of the page shows when it was last updated. Significant changes affecting people who receive care will be communicated directly.
For anything relating to your personal information, or to raise a concern:
General enquiries
info@gotohealthcare.co.ukData protection & records
info@gotohealthcare.co.ukThis policy is provided for transparency and does not constitute legal advice. It should be reviewed by a qualified data protection professional before being relied upon.
