Privacy Policy

Effective Date: [Insert Date]
Last Updated: [Insert Date]

1. Introduction

At Lan Care Ltd (“Company,” “we,” “our,” or “us”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or interact with us in any other way. We adhere to the highest data protection standards, complying with the UK Data Protection Act 2018, General Data Protection Regulation (GDPR), and other relevant global privacy laws.

By using our services or providing us with your personal data, you agree to the terms outlined in this policy.

2. Who We Are

Lan Care Ltd
[Insert Company Address]
[Insert Company Registration Number]
[Insert Contact Email]
[Insert Phone Number]

3. Scope of This Privacy Policy

This policy applies to all personal data collected from:

Clients and service users
Employees, contractors, and job applicants
Visitors to our website
Suppliers and business partners

4. Data We Collect

We collect and process different types of personal data depending on your relationship with us:

A. Personal Data We Collect from Clients and Service Users:

Full name, date of birth, and contact details (email, phone, address)
Health and medical information (as required for care services)
Emergency contact details
Payment and billing information
Feedback and communication records

B. Personal Data We Collect from Employees and Job Applicants:

Full name, date of birth, and contact details
Employment history, qualifications, and references
National insurance number and tax details
Bank details for salary processing
Health information (for workplace safety and compliance)
Criminal record checks (Enhanced DBS checks)

C. Personal Data We Collect from Website Visitors:

IP address and browser type
Cookies and usage data
Information submitted via contact forms

5. How We Use Your Personal Data

We process your personal data for the following purposes:

A. For Clients and Service Users:

To deliver and manage care services tailored to your needs
To comply with healthcare regulations and legal obligations
To communicate with you regarding services, appointments, and feedback
For billing and payment processing

B. For Employees and Job Applicants:

To process job applications and manage recruitment
To manage employment relationships, including payroll, benefits, and training
To ensure compliance with legal and regulatory requirements (e.g., DBS checks)
For internal record-keeping and performance management

C. For Website Visitors:

To improve website functionality and user experience
To respond to inquiries submitted via our contact forms
To analyze website usage for marketing and service improvement

6. Legal Basis for Processing Personal Data

We rely on the following legal bases for processing your data:

Consent: When you have given clear consent for us to process your personal data for a specific purpose.
Contractual Obligations: When processing is necessary for the performance of a contract with you.
Legal Obligations: When we are required to process data to comply with legal or regulatory obligations.
Legitimate Interests: When processing is necessary for our legitimate interests, provided that your rights do not override those interests.
Vital Interests: In cases where processing is necessary to protect someone’s life (e.g., medical emergencies).

7. Data Sharing and Disclosure

We do not sell your personal data. However, we may share your data with:

Healthcare professionals and third-party care providers involved in your care.
Government authorities and regulatory bodies to comply with legal obligations.
Service providers and contractors who perform services on our behalf (e.g., IT support, payment processors).
Legal advisors or law enforcement when required by law or in response to legal proceedings.

All third parties with whom we share data are required to comply with data protection laws and are only allowed to process your data for specified purposes.

8. International Data Transfers

We primarily store and process data within the United Kingdom and the European Economic Area (EEA). If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions, to protect your personal data.

9. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal, accounting, or regulatory requirements.

Client and service user data: Retained for the duration of the care relationship and for up to 7 years after the termination of services, in line with healthcare regulations.
Employee and job applicant data: Retained for the duration of employment and up to 6 years after termination. Unsuccessful job applicants’ data is retained for 12 months unless consent is given for longer retention.
Website visitor data: Retained for up to 2 years unless otherwise required.

10. Your Data Protection Rights

You have the following rights under data protection laws:

Right to Access: You can request a copy of your personal data that we hold.
Right to Rectification: You can request corrections to inaccurate or incomplete data.
Right to Erasure: You can request the deletion of your personal data where it is no longer necessary for processing.
Right to Restrict Processing: You can request the restriction of data processing under certain conditions.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
Right to Object: You can object to data processing where we rely on legitimate interests or direct marketing.
Right to Withdraw Consent: You can withdraw your consent at any time when processing is based on consent.

To exercise these rights, please contact us at [Insert Contact Email]. We may require verification of your identity before fulfilling your request.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of sensitive data
Secure servers and firewalls
Regular security audits and updates
Access controls and staff training on data protection

12. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve user experience and analyze website performance. You can manage your cookie preferences through your browser settings.

For more information, please refer to our [Cookie Policy].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our data practices, or our services. We will notify you of any significant changes through our website or direct communication. The updated policy will be effective from the date posted.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact us at:

Lan Care Ltd
[Insert Company Address]
Email: [Insert Contact Email]
Phone: [Insert Phone Number]