Privacy Policy

Introduction

Zebo Healthcare ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect personal information when you visit our website, make an enquiry about our services, or apply to work with us. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Zebo Healthcare is a company registered in England and Wales (Company Number: 17338840), with its registered office at [Registered Office Address]. We are the data controller responsible for your personal data.

Information we collect

We may collect and process the following information about you:

• Contact details you provide via our enquiry forms (name, email address, phone number, address).
• Information about the care needs of yourself or a person you are enquiring on behalf of, where voluntarily provided (this may include health information, which is special category data under UK GDPR).
• Information you provide if you apply to work with us (CV, employment history, right-to-work documents, references, DBS certificate details).
• Technical data such as IP address, browser type and usage data collected via cookies (see our Cookie Policy).

How we use your information

We use your information to:

• Respond to enquiries about our care services and provide you with relevant information.
• Assess and process job or work applications.
• Carry out our contractual obligations where we provide services to you or a family member.
• Comply with our legal and regulatory obligations, including safeguarding duties.
• Improve our website and services, with your consent where required (e.g. analytics cookies).

Our lawful basis for processing

We rely on one or more of the following lawful bases, depending on the circumstances: your consent, the performance of a contract with you, our legal obligations, and our legitimate interests in running and improving our business. Where we process special category data (such as health information), we do so with your explicit consent, or where necessary for the provision of health or social care, in line with UK GDPR Article 9.

Sharing your information

We do not sell your personal data. We may share information with:

• Care staff directly involved in delivering your care.
• Local authorities, NHS bodies, or other professionals involved in your care, where appropriate and necessary.
• Regulatory bodies, where we are required to report information by law.
• Trusted third-party service providers who support our operations (e.g. IT hosting, payroll), under data processing agreements.

How long we keep your information

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including to satisfy legal, accounting or reporting requirements. Care records are retained in line with relevant care sector retention guidance; recruitment records for unsuccessful applicants are typically retained for [X months] unless you ask us to delete them sooner.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data, in certain circumstances.
• Object to or restrict certain processing.
• Request data portability, where applicable.
• Withdraw consent at any time, where processing is based on consent.

Exercising your rights

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

Children's information

Where we provide children's services, we may process personal data relating to children, provided by a parent, guardian or referring professional. We take particular care to ensure such data is processed lawfully, kept secure, and only shared with those directly involved in the child's care.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown below.

Contact us

If you have any questions about this policy or how we handle your data, please contact us at info@zebohealthcare.co.uk or write to us at [Registered Office Address].