1. Who we are
Carebridge Home Care Ltd ("we", "us", "our") provides home support services across Leicestershire. We are a company registered in England and Wales, company number 16141662, with our registered office at Unit 29, Loughborough Technology Centre, Epinal Way, Loughborough LE11 3GE.
We are the data controller responsible for the personal data we collect through this website (www.carebridgehomecare.co.uk) and during our work with you and the people we care for.
Questions about your data? Call us on 0330 133 0303 or use the contact form.
2. What we collect
When you contact us or submit an enquiry form:
- Your name, email, phone number and postcode
- Information about the care needs of you or your loved one that you share with us during conversations and consultations
- Anything else you choose to tell us in a form, email or call
Automatically when you visit this site:
- Your IP address, browser, device type and rough location
- Pages you look at, what you click, how long you stay, and where you came from
- Cookies and similar technologies (see section 5)
If you become a client:
- Care plan information relevant to the support we deliver, and emergency contacts
- Records of visits, observations and any incidents, kept securely
- Billing details (we do not store full card numbers; the payment provider does)
3. What we do with it
UK GDPR requires us to tell you the "lawful basis" we rely on to use your data:
- To reply to your enquiry and arrange consultations. Basis: we are taking steps at your request before entering into a contract.
- To deliver and manage care services safely. Basis: contract. For health-related information, we also rely on the provision of health and social care (Article 9 UK GDPR).
- To improve the website and our services. Basis: legitimate interest in running our business. You can ask us to stop at any time.
- To keep records and meet our legal and tax obligations. Basis: legal obligation.
We do not sell your data. Ever.
4. Who we share it with
We use a small set of trusted suppliers to run the business. They only handle data on our instructions, under written agreements:
- Netlify hosts this site and handles contact forms
- PostHog counts visits to this site, on servers in the EU
- Google for Google Ads, where we are advertising. Google's tag runs on this site with storage switched off, so it saves nothing on your device. When an advert brings you here and you enquire, it tells Google that an enquiry happened. We do not send Google your name, email address, phone number or anything you wrote.
- Accounting, scheduling and care-records software we use to run rotas, invoicing and care notes
- Healthcare professionals (GPs, district nurses, pharmacies, social workers) where this is needed to deliver safe care and with appropriate consent
- Regulators and authorities where we are required to share information by law
We share only what is needed for the task. We may also have to share data to comply with the law, to protect a person at risk, or to defend a legal claim.
5. Cookies and tracking
This site sets no cookies for advertising or for measuring visits, which is why you were not asked about any. Cookies are small files your browser stores, and there is nothing here to store.
Our own visit counting, PostHog, stores nothing on your device: no cookie, and nothing in your browser's storage. It counts a visit using a code worked out on the server from your IP address and browser, which changes every day and cannot be traced back to you or followed from one day to the next.
Our advertising works the same way. Google's tag runs with storage switched off, so it saves nothing on your device.
The map on the contact page is the one exception, because it comes from Google Maps and would set its own cookies. It does not load until you tap it.
6. Where your data goes
Most of our suppliers process data inside the UK or EEA. Where a supplier processes data outside these areas, we ensure transfers use safeguards the UK government accepts (such as the UK addendum to the EU standard contractual clauses, or a country with an "adequacy" decision).
7. How long we keep it
- Enquiries that do not turn into care: up to 12 months, then deleted. Sooner if you ask.
- Care records: retained for the period required by health and social care record-keeping standards (typically at least 8 years after the care ends).
- Invoices and accounting records: 6 years, as UK tax law requires.
- Website analytics: kept as counts and trends. The daily code behind them is thrown away each day, so there is nothing left to link a visit to you.
8. Your rights
Under UK GDPR, you can ask us to:
- Show you what we hold about you
- Correct anything that is wrong
- Delete data, where we are not legally required to keep it
- Restrict or object to how we use it
- Hand it over in a portable file
- Withdraw consent, where consent was the basis
Call 0330 133 0303 or use the contact form and we will come back to you within a month.
If you are unhappy with how we have handled your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk. We would much rather you let us fix it first.
9. Keeping your data safe
We protect your information with HTTPS encryption, password-protected accounts, role-based access for staff, and trusted suppliers. No online system is ever 100% secure, but we treat the data of the people we care for, and of their families, with the seriousness it deserves.
10. Changes to this policy
We may update this policy from time to time. The date below shows the latest version.
Last updated: 15 May 2026