Legal
Privacy Notice
How we handle your personal information in line with the UK GDPR and the Data Protection Act 2018.
Last updated: 9 July 2026
Who we are
Generations Care Agency Ltd (“we”, “us”, “our”) is a company registered in England & Wales under Companies House number 06198845, with its registered office at Units 29-31 Clock Tower Business Centre, Works Road Hollingwood, Chesterfield, Derbyshire, S43 2PE. We are a domiciliary care provider regulated by the Care Quality Commission (CQC) and are the data controller for the personal information described in this notice.
Contact: Info@care4generations.co.uk · 01246 471991
Information we collect
Depending on your relationship with us, we may collect:
- Contact details (name, address, phone, email)
- Health, care and support needs, medication and GP details (clients)
- Next of kin and emergency contact information
- Employment, right-to-work, DBS and reference information (applicants and staff)
- Website usage data such as IP address, device and pages visited
Lawful bases
We rely on the following lawful bases under UK GDPR Article 6, and where relevant Article 9 for special category data:
- Contract — to deliver care services you have engaged us for
- Legal obligation — CQC, safeguarding, employment and tax law
- Vital interests — to protect life in an emergency
- Legitimate interests — to run and improve our service
- Consent — for optional communications and non-essential cookies (Article 9(2)(a) for health data where required)
How we use your data
To assess needs and deliver safe, personalised care; to keep care records; to recruit and manage staff; to meet regulatory duties (CQC, Local Authority, HMRC); to respond to enquiries; and to improve our website and services.
Sharing your information
We share information only where necessary, including with: GPs, district nurses and hospitals involved in your care; local authority commissioners; the CQC and safeguarding teams; DBS and referencing providers; our IT, payroll and professional advisers acting as processors under written agreement. We never sell your data.
How long we keep it
Care records are retained for 8 years after the end of service (or 25 years after a child’s 18th birthday where applicable), in line with NHS and CQC guidance. Employment records are kept for 6 years after leaving. Website enquiry data is deleted within 24 months.
Security
We store records in access-controlled systems, encrypt data in transit, and follow Cyber Essentials aligned controls. Staff receive data protection training as part of induction and annually.
Your rights
You have the right to access your data, request correction or erasure, object to or restrict processing, withdraw consent, and data portability. To exercise any right email Info@care4generations.co.uk.
You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.
Cookies
See our Cookie Policy for details of the cookies used on this site and how to manage them.