Privacy Policy

Editable template. This policy has been prepared as a starting point and must be reviewed by the business owner, and ideally a qualified adviser, before the website goes live. Replace all placeholders in Admin → Settings.

Who we are

Regulated Care Consultancy Ltd (trading as Regulated Care Consultancy) is the controller of the personal data described in this policy. We are a company registered in England and Wales with company number [Company number to be confirmed]. Our registered office is [Registered office address to be confirmed]. Our ICO registration number is [ICO registration number to be confirmed].

You can contact us about this policy or your personal data at [Confirmed email address] or by telephone on [Business telephone].

Personal data we collect

When you submit a quote request or contact form, we collect:

• your name, organisation, job title, email address and telephone number
• details about the services you are interested in and your project, such as the type of service, registration status, location, timeframe and optional budget range
• the content of your message
• the date and time of your submission and your acknowledgement of this privacy notice

To protect our forms from abuse, we also record a one way, non reversible hash of your IP address and your browser's user agent. We do not store your IP address itself.

If you accept analytics cookies, we collect information about how you use our website. See our Cookie Policy.

Please do not send us information about patients, service users or any special category data through our forms. Our forms are designed for general business enquiries only.

How we use your personal data

Purpose	Lawful basis
Responding to your enquiry and preparing a proposal	Legitimate interests, or steps prior to entering into a contract at your request
Sending an automatic acknowledgement of your enquiry	Legitimate interests
Managing our client relationship and delivering services	Performance of a contract
Protecting our website from spam and abuse	Legitimate interests
Understanding how our website is used (analytics)	Consent
Meeting legal, tax and accounting obligations	Legal obligation

We will not send you marketing emails unless you have asked us to or we are otherwise permitted to by law, and you can opt out at any time.

Who we share your data with

We use trusted service providers to operate our website and business, including website hosting, database hosting, email delivery and, if you consent, analytics. These providers act on our instructions and are bound by appropriate contractual terms.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

We do not sell your personal data.

How long we keep your data

• Enquiries that do not lead to an engagement: up to 24 months from our last contact, then deleted
• Client records: for the duration of the engagement and up to 6 years afterwards for legal and accounting purposes
• Analytics data: according to the retention settings of our analytics provider, normally 14 months

Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability and to withdraw consent at any time where we rely on consent.

To exercise your rights, contact us at [Confirmed email address]. We will respond within one month.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Security

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections, access controls and restricted administrative access.

Changes to this policy

We may update this policy from time to time. The date of the latest update is shown on this page.