Concept Care Solutions Privacy Policy

We are Concept Care Solutions, which comprises Concept Care Community Services and Concept Care Recruitment, dedicated to delivering high-quality homecare services and healthcare recruitment solutions across the UK.
 
We are a registered company in England and Wales with company registration number 04335280. Our registered office address is 58 High Street, Watford, Hertfordshire, England, WD17 2BS.
 
Concept Care Solutions operates under different divisions, including Concept Care Community Services (providing homecare services) and Concept Care Recruitment (providing healthcare recruitment solutions). Throughout this Privacy Notice, where we refer to “we”, “us”, or “our”, we mean Concept Care Solutions and its operational divisions.
 
This Privacy Notice explains how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (“Data Protection Legislation”).

Our Commitment to You

We understand that your privacy is important. We are committed to handling your personal data fairly, lawfully, and transparently.
 
We will only collect and use personal data where we have a clear and lawful basis to do so. We ensure that your data is:
  • Used for specified, explicit, and legitimate purposes
  • Adequate, relevant, and limited to what is necessary
  • Accurate and kept up to date
  • Retained only for as long as necessary
  • Kept secure at all times
We will not use your personal data for purposes that are incompatible with those outlined in this notice.

How to Contact Us

We have appointed a Data Protection Lead responsible for overseeing data protection matters.
If you have any questions about this Privacy Notice or how your data is handled, you can contact us at:
Email: [email protected]
Address: Concept Care Solutions, 58 High Street, Watford, Hertfordshire, WD17 2BS
You may also use the Contact Us form on our website.
The Information We Collect and How We Use It
The type of information we collect depends on your relationship with us.
General Enquiries
If you contact us regarding our services, we may collect:
  • Name
  • Contact details (email, phone number, address)
  • Relationship to the person receiving care
  • Basic information about care needs
Legal basis: Legitimate interests (to respond to enquiries and provide information about our services)

Clients and Families

When providing homecare services, we may collect and process:
  • Personal details (name, contact details)
  • Health and care information
  • Care plans and risk assessments
  • Next of kin and family details
Legal basis:
  • Article 6: Contract / Legal obligation
  • Article 9: Health or social care provision
This information enables us to safely assess, plan, and deliver care and meet regulatory requirements.
We may share this data with healthcare professionals, local authorities, or other relevant organisations where necessary and lawful.

Recruitment Candidates

When you apply for work through Concept Care Recruitment, we may collect:
  • Name and contact details
  • CV and employment history
  • Qualifications and training records
  • References
  • Right to work documentation
  • Disclosure and Barring Service (DBS) information where required
Legal basis:
  • Article 6: Contract / Legitimate interests
  • Article 9: Employment and social protection law
  • Schedule 1 Data Protection Act 2018 (for criminal offence data such as DBS checks)
This information is used to assess suitability for roles, manage recruitment processes, and meet legal obligations.

Our Legal Grounds for Using Your Data

We process personal data under the following lawful bases:
  • Contract – where processing is necessary to provide services or progress recruitment
  • Legal obligation – to comply with laws and regulatory requirements
  • Legitimate interests – to operate and improve our services
  • Consent – where required, particularly for marketing or optional services
Where we rely on consent, you have the right to withdraw it at any time.
Special Category Data
We process special category data (such as health information) only where necessary and permitted by law, including:
  • Provision of health and social care
  • Safeguarding of individuals
  • Compliance with employment law obligations
We ensure appropriate safeguards are in place to protect this data.

Sharing Your Information

We only share personal data where necessary and lawful. This may include:
  • Healthcare professionals and social care services
  • Local authorities and safeguarding teams
  • Regulatory bodies and law enforcement agencies
  • Disclosure and Barring Service (DBS)
  • Prospective employers (for recruitment purposes)
  • Trusted third-party service providers (e.g. IT, payroll, CRM systems)
All third parties are required to respect the security of your data and process it in accordance with the law.
We do not sell your personal data.
International Data Transfers
Some of our service providers (such as IT systems, analytics providers, or cloud-based platforms) may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
  • UK adequacy regulations
  • Standard Contractual Clauses (SCCs)
  • Other lawful transfer mechanisms

Cookies and Website Analytics

We use cookies and similar technologies to improve your browsing experience and understand how our website is used.
Cookies may include:
  • Essential cookies – required for website functionality
  • Analytics cookies – to monitor website usage (e.g. Google Analytics)
  • Marketing cookies – to support advertising and campaign effectiveness
  • Social media cookies – for embedded content and sharing tools
We use third-party services including:
  • Google Analytics, Google Tag Manager, and Google Search Console
  • CRM and marketing tools
  • Social media platforms (e.g. Facebook, LinkedIn, Instagram, TikTok, YouTube)
We will request your consent before placing non-essential cookies. You can manage your preferences through your browser settings or our cookie banner.
For more information, please see our separate Cookie Policy.

Our website uses cookies to improve your browsing experience and to help us understand how visitors interact with our site. We use essential cookies to enable core functionality and analytics cookies (such as Google Analytics) to measure site usage. Before using any non-essential cookies, we will ask for your consent. You can manage your cookie preferences via your browser settings or through our cookie control tools.

How We Keep Your Data Safe

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it.
These include:
  • Secure storage of paper records
  • Password protection and access controls
  • Encryption and secure IT systems
  • Staff training in data protection
  • Regular system monitoring and backups
We are proud to hold ISO 27001 certification, demonstrating our commitment to information security.

How Long We Keep Your Information

We retain personal data only for as long as necessary, including:
  • Care records: typically 7 years after the end of service
  • Recruitment data (unsuccessful applicants): up to 2 years
  • Employee records: up to 6 years after employment ends
Data is securely deleted or destroyed when no longer required.

Your Rights

Under data protection law, you have the right to:
  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Restrict processing
  • Object to processing
  • Request data portability
To exercise your rights, please contact our Data Protection Lead using the details above.

Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office:
Website: https://ico.org.uk/concerns
Telephone: 0303 123 1113