Privacy Policy
Last updated: July 2026
Reddy Care Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Reddy Care Ltd is a Supported Living and Personal Care provider. We are registered in England and Wales. For the purposes of data protection law, we are the data controller of personal data we process about you.
What personal data we collect
We may collect the following types of personal data:
- Enquiry data: name, email address, phone number, and any information you share when you contact us by phone, email, or via our website.
- Service user data: care-related personal and special category data collected and processed in the course of providing care and support services. This is managed under separate care records procedures and is not collected through this website.
- Staff and recruitment data: employment-related personal data processed in the course of recruitment and employment. This is managed under separate HR procedures.
- Website usage data: this website does not use cookies, analytics, or tracking technologies. We do not collect information about how you use our website.
How we use your data
We use personal data only for the following purposes:
- To respond to enquiries from prospective service users, families, commissioners, and professionals.
- To deliver and manage the care and support services we provide.
- To comply with our legal and regulatory obligations, including those set by the Care Quality Commission (CQC).
- To manage employment and recruitment processes.
Legal basis for processing
We process personal data on the following lawful bases under UK GDPR:
- Consent: where you have given clear consent for us to process your personal data for a specific purpose (for example, when you contact us with an enquiry).
- Contract: where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal obligation: where processing is necessary for us to comply with the law (for example, CQC regulations, safeguarding obligations, employment law).
- Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, and your interests and fundamental rights do not override those interests.
- Vital interests: where processing is necessary to protect someone's life (for example, in a medical emergency).
Data sharing
We do not sell, trade, or rent personal data to third parties. We may share personal data only where necessary:
- With health and social care professionals involved in a person's care, with appropriate consent or legal basis.
- With commissioners and local authorities, as required for care funding and commissioning arrangements.
- With regulatory bodies such as the CQC, as required by law.
- With our professional advisers (such as accountants and solicitors), where necessary and subject to confidentiality obligations.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Care records are retained in line with statutory retention periods.
Data security
We have put in place appropriate technical and organisational measures to safeguard personal data against unauthorised access, alteration, disclosure, or destruction. Access to personal data is limited to staff who have a legitimate need to access it in the course of their duties.
Your rights
Under UK data protection law, you have the right to:
- Be informed about how your personal data is used.
- Access the personal data we hold about you (a subject access request).
- Request correction of inaccurate personal data.
- Request erasure of your personal data in certain circumstances.
- Restrict or object to processing of your personal data.
- Request transfer of your personal data to another organisation.
- Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us using the details below. We will respond within one month of receipt of your request. There is no fee for making a request unless it is manifestly unfounded or excessive.
Complaints
If you have concerns about how we handle your personal data, please contact us in the first instance so we can address them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this privacy policy from time to time. The latest version will always be available on this page. We encourage you to review it periodically.
Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Data Protection Officer / Responsible Person
Reddy Care Ltd
Building 220, Wharfdale Road
Winnersh, Reading, RG41 5TP
0118 391 3656
contact@reddycare.co.uk