Privacy Policy

Trust In Care Limited · Last reviewed: 2 September 2026 · Next review due: September 2027

1. Who we are

Trust In Care Limited (“Trust In Care”, “we”, “us”) provides domiciliary care and support services across Sandwell, Dudley, Birmingham and Leicestershire. We are registered in England and Wales (company number 11476060). Our registered office is 339 High Street, West Bromwich, West Midlands, B70 9QG. We are regulated by the Care Quality Commission.

For the purposes of data protection law, Trust In Care Limited is the data controller of your personal information. This policy explains what we collect, why, who we share it with, and your rights. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Questions or concerns?
Data Protection Officer: dpo@trustin-care.co.uk
Phone: 0121 439 1171
Post: Data Protection Officer, Trust In Care Limited, 339 High Street, West Bromwich, B70 9QG
Trust In Care Limited is registered with the Information Commissioner’s Office (ICO) as a data controller.

2. Who this policy covers

People who use our care services, and their families and representatives
People who enquire about care — by phone, email, WhatsApp or our website forms
People who apply to work with us
Visitors to our website, www.trustin-care.co.uk

3. What information we collect

If you use our care services

Name, address, date of birth and contact details
Next of kin, family and emergency contacts
Health and care information — your needs, conditions, medication, care plans, visit records and communications with health professionals. This is “special category” data and receives extra protection in law
Billing and payment information, including council or NHS funding arrangements

If you enquire about care

The details you give us — typically your name, contact details, the area you live in, and a description of the help needed

If you apply to work with us

Your name, contact details, CV, work history, right-to-work evidence, references, and the results of Disclosure and Barring Service (DBS) checks

If you visit our website

Information you submit through our forms, and limited technical data (such as cookies) — see our Cookies page

4. Why we use your information, and our lawful bases

We only use personal information where the law allows us to. We do not need your consent for most of what we do — instead we rely on these legal grounds:

What we do	Our lawful basis
Providing your care and support under our agreement with you or your council/NHS	Performance of a contract; provision of health and social care (UK GDPR Article 9(2)(h), with the Data Protection Act 2018)
Meeting our legal and regulatory duties — CQC registration, safeguarding, health and safety, accounting	Legal obligation
Acting in an emergency to protect life	Vital interests
Responding to enquiries, running and improving our service, handling recruitment	Legitimate interests
Anything where we ask your permission first — for example using a photograph of you, or sending marketing	Consent — which you can withdraw at any time

We do not sell your information, and we do not share it with advertisers or advertising networks.

5. Who we share information with

Only where necessary for your care, or where the law requires it:

Your GP, district nurses, hospitals and other health professionals involved in your care
Local authorities and NHS bodies that commission or fund care — for example Sandwell, Dudley, Birmingham, Leicester City or Leicestershire County councils
The Care Quality Commission and other regulators, and safeguarding authorities where there is a concern
Trusted suppliers who support our business — such as payroll, IT and care-planning systems — under contracts that require them to protect your data

We do not transfer your personal information outside the UK. If that ever changed, we would only do so with proper legal safeguards in place.

6. How long we keep information

Care records — kept in line with health and social care record-keeping requirements, and securely destroyed when no longer needed
Enquiries that do not become care packages — kept no longer than 12 months, then deleted
Unsuccessful job applications — kept no longer than 6 months after the process ends, then deleted
Financial records — kept for the periods required by HMRC

Our full retention schedule is available on request from the Data Protection Officer.

7. How we protect your information

We use appropriate technical and organisational measures: secure systems with access limited to staff who need it, staff training and confidentiality obligations, and secure disposal of records. Paper records are stored securely at our office.

8. Your rights

Under UK GDPR you have the right to:

Access — ask for a copy of the information we hold about you
Rectification — have inaccurate information corrected
Erasure — ask us to delete information, where the law allows
Restriction — ask us to limit how we use your information
Objection — object to uses based on legitimate interests, and to any direct marketing
Portability — receive certain information in a reusable format
Withdraw consent — at any time, where consent is what we rely on

To exercise any of these rights, contact our Data Protection Officer (details in section 1). We will respond within one month. Exercising your rights is free.

Right to complain. If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk · 0303 123 1113.

9. Our website

Information you send through our website forms is delivered by email to our office team and handled as described in this policy. Our website uses cookies — see our Cookies page for details. Our site may contain links to other websites; we are not responsible for their privacy practices.

10. Changes to this policy

We review this policy at least once a year and whenever the law or our services change. The date of the latest review appears at the top of this page.