Privacy Policy

Purpose of this Privacy Policy

This privacy policy aims to give you information on how Calibre Quality Care collects and processes your personal data, including any data you may provide through this website or when registering for our introductory care services.

Controller

Calibre Quality Care is the data controller and is responsible for your personal data (collectively referred to as "we", "us" or "our" in this privacy policy).

Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact us at:

• Email address: hello@calibrequalitycare.org.uk
• Postal address: Unit 3, Edison Business Centre, 52 Edison Rd, Aylesbury HP19 8TE
• Telephone number: 01296 255 255

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

• Identity Data: First name, last name, title, and date of birth.
• Contact Data: Billing address, service address, email address, and telephone numbers.
• Financial & Transaction Data: Bank account and payment details, and details about payments to and from you for introductory services.
• Care & Health Data (Special Category Data): Information regarding your health, medical history, care requirements, and mobility needs, which is necessary to match you with an appropriate independent Personal Assistant.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, and operating system when you use our website.

We use different methods to collect data from and about you, including through:

• Direct interactions: You or your next of kin may give us your Identity, Contact, Health, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or through our custom management portal.
• Automated technologies: As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions, and patterns using cookies and similar technologies.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of a Contract: To register you as a new client, process your referrals, and introduce you to independent Personal Assistants.
• Legitimate Interests: To manage our relationship with you, improve our website, and ensure our services are running smoothly.
• Legal Obligation: To comply with a legal or regulatory obligation, such as retaining financial records.

Special Category Data

Because we process health and care data, we rely on the following additional legal basis:

• Processing is necessary for the purposes of the provision of health or social care or treatment, or the management of health or social care systems.
• Explicit consent (where applicable).

To provide our introductory care services, we may need to share your personal data with the parties set out below:

• Independent Personal Assistants (PAs): We share your care needs, location, and contact details with the independent self-employed PAs we introduce to you, so they can provide the requested care services.
• Service Providers: Third parties who provide IT, software, and system administration services to support our referral tracking, compliance oversight, and billing (e.g., our accounting and invoicing software).
• Professional Advisers: Including lawyers, bankers, auditors, and insurers.
• Authorities: The CQC (if applicable), HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to those employees, agents, contractors, and PAs who have a business need to know.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax and legal purposes.

Under the UK GDPR, you have rights including:

• Request access to your personal data (a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us.