Last Updated: 6 August 2026
1. Introduction
JJR Care Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us in any way.
We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide to Us
- Contact Information: Name, email address, phone number, postal address
- Enquiry Details: Information you provide when contacting us via our website, email, or phone
- Recruitment Information: CV, employment history, qualifications, right to work documentation, and references when you apply for a position
- Care Service Information: Details about care needs, medical information, and preferences when you or a family member use our services
- Communication: Records of correspondence with us
2.2 Information We Collect Automatically
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on pages, click patterns, and referring URLs
- Cookies: We use cookies to enhance your experience. See our Cookie Policy for more details.
3. How We Use Your Information
We use your personal data for the following purposes:
- To provide and manage our care services
- To process recruitment applications and manage staff
- To respond to enquiries and communicate with you
- To comply with legal and regulatory obligations (including CQC requirements)
- To improve our website and services
- To send you relevant information about our services (only with your consent)
- To safeguard the wellbeing of our service users and staff
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contractual Necessity: To fulfil our contractual obligations to you
- Legal Obligation: To comply with legal and regulatory requirements (including CQC and ICO requirements)
- Legitimate Interests: For our legitimate business interests, provided they do not override your rights
- Consent: Where you have given explicit consent (e.g., for marketing communications)
- Vital Interests: To protect someone's life or wellbeing (e.g., in emergency situations)
5. How We Share Your Information
We do not sell, trade, or rent your personal data to third parties. We may share your information with:
- Our Staff: Care coordinators, carers, and management who need access to provide our services
- Healthcare Professionals: GPs, nurses, social workers, and other professionals involved in your care (with your consent)
- Regulatory Bodies: CQC, ICO, and other regulators as required by law
- Service Providers: IT providers, legal advisors, and other contractors who support our operations
- Law Enforcement: If required by law or to protect the rights, property, or safety of ourselves or others
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
- Care Service Records: Retained for 7 years following the end of care (as per CQC guidance)
- Recruitment Applications: Retained for 6 months for unsuccessful applicants, and for the duration of employment for successful candidates
- Enquiry Data: Retained for 2 years from the date of last contact
- Marketing Data: Retained until you withdraw consent
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Complain: Lodge a complaint with the ICO
To exercise any of these rights, contact us at admin@jjrltd.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- Secure server infrastructure
- Encrypted data storage and transmission
- Access controls and staff training
- Regular security reviews
- Compliance with ICO standards
9. Cookies
Our website uses cookies to improve your experience. For more information, please see our Cookie Policy.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
You also have the right to contact the Information Commissioner's Office directly if you have concerns about how we handle your data.