Privacy Policy

1. Introduction

At Lighthouse Care, we are committed to protecting and respecting the privacy of all service users, staff, and any other person whose data we process.

This Policy explains when and why we collect personal and special categories of information (data) about people who use our services, work for, or with us.

Personal information is not collected if you use our website; however, some statistical information is collected about website users through the use of ‘cookies’. Please see section 10 for full details about this.

Any questions regarding this Policy and our privacy practices should be sent by email to admin@lighthousecare.uk. Alternatively, you can contact us by phone on 07568512232.

2. Who are we?

Lighthouse Care provides support, care, and education to vulnerable individuals within our society. We offer services for vulnerable adults and children, ensuring they can live safely with support in the community. We are a national organisation operating multiple services and working in partnership with local authorities and specialist agencies.

3. Collecting Personally Identifiable Information

We obtain personal information (data) and special categories of data (e.g., health information) about our service users at the point of referral. This is necessary to meet legal obligations outlined in relevant regulations, to enter into contracts with local authorities, and to protect the vital interests of the service user. If a referral does not result in a placement, the data is permanently deleted.

If a placement is made, we continue processing this information for the reasons identified above and to provide health and social care services. The legal justification for this is compliant with Articles 6 and 9 of the GDPR. This information is retained for periods as specified by applicable regulations.

We collect personal and special categories of information (data) for our staff at the point of employment application and continue throughout employment. This is necessary for fulfilling employment contracts, legal obligations (e.g., HMRC), exercising rights in employment law, and assessing working capacity. This is also compliant with Articles 6 and 9 of GDPR.

We may utilise data for research purposes, remaining the data controller throughout any research activities.

Visitors to our services will have a brief record of their visit kept, as required by law.

4. Privacy Notices

Whenever we collect information, we provide a privacy notice at the time of collection, including:

• Who we are and contact details;
• Contact details of the Data Protection Officer;
• The purpose and legal basis for processing;
• Recipients or categories of recipients of personal data;
• Retention periods and access to our Retention and Disposal Schedule;
• Rights to access, rectify, erase, restrict or object to processing, and rights to data portability;
• Right to withdraw consent at any time;
• Right to lodge a complaint with the Information Commissioner’s Office;
• Whether information provision is statutory or contractual and consequences of not providing information;
• Information on automated decision-making (we do not use automated decision-making).

5. Security Precautions to Protect Your Information

We take steps to ensure that personal information is treated securely. Sensitive information is encrypted and protected. We have dedicated policies and training programs on data security. To request more details, please contact us.

6. How Long We Keep Information

We retain personal information only as long as necessary:

• Service users: Information is typically returned to placing authorities upon discharge. Basic information is archived for 15 years post-discharge to meet legal requirements.
• Staff: Personal data is held during employment and for defined periods after employment ends, as outlined in our Retention and Disposal Schedule.

Retention beyond employment only occurs if:

1. You consent;
2. It’s necessary for contract purposes;
3. It’s legally required;
4. It protects someone's life;
5. It’s necessary for public interest tasks;
6. It’s based on legitimate interests.

For full details, our Retention and Disposal Schedule is available by contacting Lighthouse Care’s Data Protection Officer.

7. Who Has Access to Your Information?

Only individuals who need the information will have access to it. We will not sell or rent your information or share it with third parties for marketing purposes.

Service Providers: We may pass information to service providers (e.g., IT, payroll) under contracts that require them to maintain confidentiality and security.

We will only disclose information when legally required (e.g., court order, fraud prevention).

8. How to Access and Update Your Information

We aim to keep your information accurate. Staff should inform the homes manager of any changes. This is outlined in our staff handbook and privacy notices.

9. Your Rights

You have the following rights under GDPR:

• Right to be informed;
• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restrict processing;
• Right to data portability;
• Right to object;
• Rights regarding automated decision-making (not applicable at Lighthouse Care).

10. Use of ‘Cookies’

We use cookies on our website to distinguish users and improve user experience. Types of cookies:

• Session Cookies: Ensure functionality and expire after closing the website.
• Analytical Cookies: Track site usage to help improve functionality.

Preventing cookie use may affect website performance. You can change cookie settings through your browser. More information: www.allaboutcookies.org.

We use Google's Universal Analytics, which can collect data without browser cookies. To opt out: Google Opt-Out.

11. Links to Other Websites

Our website may contain links to external sites. This policy only applies to Lighthouse Care’s website. We encourage you to read the privacy policies of external sites.

12. Transferring Your Information Outside of Europe

We do not transfer your personal data outside of the European Economic Area (EEA).

Review of this Policy

We review this Policy regularly. - This Policy was last updated in April 2025.