Last updated
July 2026
Alvaran Care Ltd takes your privacy seriously. This policy explains in plain terms what personal information we collect, why we collect it, how we use it, and the rights you have under UK data protection law. We have written it to be clear and easy to understand, not just to satisfy a legal requirement.
Who this policy applies to
This policy applies to anyone who visits our website, contacts us about care services, receives care from us, or applies for a job with us. Alvaran Care Ltd is the data controller responsible for your personal information.
The law that protects you
Your personal information is protected by:
- ✓ UK General Data Protection Regulation (UK GDPR) which sets out your rights and our obligations as a data controller
- ✓ Data Protection Act 2018 which supplements the UK GDPR and governs how personal data must be handled in the United Kingdom
- ✓ Health and Social Care Act 2008 and associated regulations which govern our obligations as a CQC-registered provider
- ✓ Privacy and Electronic Communications Regulations (PECR) which governs how we use cookies and electronic communications
What information we collect and why
Care enquiries and assessments
When you contact us about care services we collect your name, contact details, and information about your care needs. We use this to respond to your enquiry, conduct a home assessment, and build a care plan. Our legal basis is the performance of a contract and our legitimate interests in providing care services.
Health and care records
Once care begins we hold detailed records about your health, medication, daily needs, and care plan. This is special category data under UK GDPR. We process it under Article 9(2)(h) UK GDPR for the provision of health and social care, and under the Health and Social Care Act 2008. We share this with GPs, nurses, and other healthcare professionals involved in your care only where necessary.
Job applications
When you apply for a role we collect your name, contact details, employment history, right to work status, and DBS information. We use this to assess your application and carry out legally required pre-employment checks. Our legal basis is the performance of a contract (pre-contractual steps) and compliance with legal obligations. Unsuccessful applications are deleted within 6 months.
Website usage
Our website collects basic technical data such as your IP address and browser type to keep the site secure and functioning. We use essential cookies only. We do not use advertising, tracking, or analytics cookies that monitor your behaviour across the internet.
How long we keep your information
We do not keep your information for longer than necessary. Our retention periods are:
- ✓ Care records: minimum 8 years after care ends, in line with NHS and social care guidance
- ✓ Unsuccessful job applications: deleted within 6 months of the decision
- ✓ Website enquiries: 12 months unless a care relationship begins, in which case care record retention applies
- ✓ Financial and contractual records: 7 years in line with HMRC requirements
Who we share your information with
We do not sell your personal information. We only share it where necessary and lawful:
- ✓Healthcare professionals such as your GP, district nurse, or hospital team involved in your care
- ✓The Care Quality Commission (CQC) and other regulators where we are legally required to provide information
- ✓Local authorities where care is funded through a Direct Payment or local authority contract
- ✓The Disclosure and Barring Service (DBS) when carrying out pre-employment checks on care workers
- ✓Our website hosting provider for the purposes of running and securing this website
Your rights under UK GDPR
Under UK data protection law you have the following rights. You can exercise any of these by contacting us using the details below.
Right of access
You can request a copy of the personal data we hold about you at any time.
Right to rectification
You can ask us to correct any inaccurate or incomplete information we hold.
Right to erasure
You can ask us to delete your data where there is no lawful reason to keep it.
Right to restrict processing
You can ask us to pause processing your data in certain circumstances.
Right to object
You can object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent
Where we rely on consent you can withdraw it at any time without affecting past processing.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection. You can do this at ico.org.uk or by calling 0303 123 1113.
Cookies
We use essential cookies only. These are strictly necessary for our website to function and cannot be switched off. They do not track you or collect any information that could identify you personally. We do not use advertising, analytics, or social media tracking cookies. Under PECR, essential cookies do not require your consent.
Contact us about your data
To exercise any of your rights, ask a question about this policy, or raise a concern about how we handle your data, please contact us:
Alvaran Care Ltd
We aim to respond to all data requests within one calendar month as required by UK GDPR.
This privacy policy was last reviewed in July 2026. We may update it from time to time to reflect changes in our services or in data protection law. Any significant changes will be communicated through this page.