1. Governance
1.1. This is the Website Privacy Statement for The Good Place Home Care Services Limited.
1.2. The Good Place Home Care Services Limited will be referred to in this document as "The Good Place Home Care Services Limited","The Good Place","We","Us", or "Our".
1.3. Our registered address is: 186 Wetmore Road, Burton-on-Trent, Staffordshire, DE14 1QZ.
1.4. We can be contacted by:-
- a. Telephone: 01283 296 337
- b. Email: [protected:ahello][protected:athegoodplace.care]
- c. Post: The Good Place, 186 Wetmore Road, Burton-on-Trent, Staffordshire, DE14 1QZ
1.5. Words importing one gender include all genders, and words in the singular include the plural and vice versa, unless the context requires otherwise.
1.6. Document control sheet:-
| Metadata | Value |
|---|---|
| Document fingerprint | IG-2165-V2 |
| Document owner | Dean Hill (Nominated Individual) |
| Document version | 2 |
| Document status | Approved following a scheduled review on 08/07/2026 by Dean Hill (Nominated Individual) |
| Document review cycle | Annually or sooner if legislation or guidance changes. Next review planned for July 2027 |
| Summary of changes | Following an internal governance review we have rewritten this policy so that it aligns with our Confidentiality and Data Protection (UK GDPR) Policy and Procedure. |
2. Purpose
2.1. To explain clearly how we collect, use, store and share personal information when you use our website, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2.2. To support us to meet, and be able to evidence compliance with, the following CQC Single Assessment Framework quality statements:-
| Safe | |
|---|---|
Safe systems, pathways and transitions | We work with people and our partners to establish and maintain safe systems of care, in which safety is managed, monitored and assured. We ensure continuity of care, including when people move between different services. |
Safeguarding | We work with people to understand what being safe means to them as well as with our partners on the best way to achieve this. We concentrate on improving people’s lives while protecting their right to live in safety, free from bullying, harassment, abuse, discrimination, avoidable harm and neglect. We make sure we share concerns quickly and appropriately. |
| Effective | |
Consent to care and treatment | We tell people about their rights around consent and respect these when we deliver person-centred care and treatment. |
| Caring | |
Independence, choice and control | We promote people’s independence, so they know their rights and have choice and control over their own care, treatment and wellbeing. |
| Responsive | |
Providing information | We provide appropriate, accurate and up-to-date information in formats that we tailor to individual needs. |
| Well-led | |
Freedom to speak up | We foster a positive culture where people feel that they can speak up and that their voice will be heard. |
Governance, management and sustainability | We have clear responsibilities, roles, systems of accountability and good governance. We use these to manage and deliver good quality, sustainable care, treatment and support. We act on the best information about risk, performance and outcomes, and we share this securely with others when appropriate. |
3. Scope
3.1. This Website Privacy Statement applies to any person who uses or interacts with our website www.thegoodplace.care (and sub domains), including people who use our services, their relatives or representatives, members of the public, professionals, commissioners, and people applying for employment.
3.2. It covers personal information collected via the website only. Information We hold as part of providing regulated domiciliary care services (for example, care plans and care records) is covered by our Confidentiality and Data Protection (UK GDPR) Policy and Procedure and other information governance policies.
3.3. Where information collected via the website is added to a care record or used in connection with CQC‑regulated care (for example, enquiry or referral forms), it will then also be processed in line with those policies.
4. Policy Statement
4.1. This Website Privacy Statement should be read alongside Confidentiality and Data Protection (UK GDPR) Policy and Procedure.
4.2. By following this Website Privacy Statement and our related Confidentiality and Data Protection (UK GDPR) Policy and Procedure, We aim to demonstrate to people who use our services, their families, staff and the Care Quality Commission (CQC) that we manage information in a way that supports safe, effective, caring, responsive and well‑led domiciliary care, in line with the CQC Single Assessment Framework.
5. Data Protection
5.1. We have a separate document that details Our Confidentiality and Data Protection (UK GDPR) Policy and Procedure.
5.2. For the purposes of UK GDPR, The Good Place is the “data controller” in respect of the personal information collected via our website, unless stated otherwise.
5.3. We only process personal information where we have a lawful basis under Article 6 UK GDPR, for example:-
- a. Consent – for certain optional cookies and for some forms of direct marketing communications;
- b. Performance of a contract – where website use is necessary for us to provide services you have requested, such as managing an online account or progressing an enquiry about care;
- c. Legal obligation – where we must process information to comply with the law (for example, records We must keep for tax or regulatory reasons);
- d. Legitimate interests – where we use information in ways that are necessary for our legitimate business interests, balanced against your rights and freedoms, such as improving our website, responding to enquiries and maintaining IT security.
5.4. Where we process special category information (for example health information submitted via an enquiry form about care), We will only do so where an additional condition under Article 9 UK GDPR applies, such as the provision of health or social care, or with Your explicit consent where required.
6. What information We collect and how
6.1. Information you give us
6.1.1. When you create an account we collect information that allows us to set up or open your account, such as your name, date of birth, address, email address, phone number and password;
6.1.2. When you contact us for any reason including for support or to give us feedback;
6.1.3. When you participate in optional surveys or product research;
6.1.4. Any information you type in or attach and submit while using our website.
6.1.5. If You submit information about care needs, health conditions or support requirements through our website (for example via enquiry or contact forms), this may include special category personal data about health. we only ask for information that is necessary for us to understand your enquiry and to respond appropriately.
6.2. Information we get when you use our website
6.2.1. Your Internet Protocol ("IP") address which is automatically logged by our website;
6.2.2. Your device and browser details;
6.2.3. Your device advertising identifiers, such as iOS IDFAs and Android Advertising IDs;
6.2.4. Your usage information such as the pages you viewed and the features you use on our website;
6.2.5. Any information you type in or attach and submit while using our website.
6.3. Information from cookies
6.3.1. Cookies can be placed on your device to help us distinguish you from other users that are visiting our website at the same time and to store your preferences. Further details about the specific cookies We use, and how to manage Your preferences, are set out below.
7. How do We use Your information
7.1. In general, we will use the personal information we collect from you only for the purposes described in this Website Privacy Statement or for purposes we explain at the time we collect your personal information, and only where we have a lawful basis to do so under UK GDPR.
7.2. Typical purposes include:-
- a. Responding to enquiries about our domiciliary care services, including from people who use our services, their relatives, professionals, or commissioners;
- b. Managing any online account or portal, if available;
- c. Considering and managing job applications submitted via the website;
- d. Sending you service‑related communications or information you have requested;
- e. Monitoring and improving the quality, accessibility and safety of our website and related systems.
7.3. Where we intend to use your information for direct marketing, we will only do so in line with PECR and UK GDPR, and will give you clear opportunities to opt in or opt out.
7.4. You can opt out of receiving non‑essential marketing communications at any time by following the unsubscribe instructions in the message or by contacting us.
7.5. Providing, improving and protecting our website
7.5.1. We only collect personal information to:-
- a. Provide you with the use of our website and its features;
- b. Personalise your experience;
- c. Provide technical support;
- d. Protect the security and safety of our website, our customers, The Good Place, and others;
- e. Otherwise operate our business.
7.6. Communicating with you
7.6.1. From time to time we may communicate with you, including to:-
- a. Provide you with important information about our website;
- b. Send you information about The Good Place, our other products and services, special offers, and our website software updates;
7.7. Analysing Your information
7.7.1. We may use both manual and automated systems, such as machine learning and artificial intelligence, to:-
- a. Analyse your information to improve our website and personalise your experience;
- b. Automate certain aspects of our website;
- c. Protect the safety and security of our website, our customers and others.
8. How We share Your information
8.1. From time to time, we may need to share your personal information, but we will only share your personal information for the following reasons:-
- a. With your consent;
- b. For legal reasons. We may share your personal information with third-parties for legal reasons, including:-
- aa. To prevent fraud and for debt collection;
- ab. To enforce, remedy, or apply any agreements;
- ac. To protect against or defend our website against attacks;
- ad. To protect the rights, property, or safety of The Good Place, our website, our service users, or others;
- ae. When we reasonably believe disclosure is required or permitted in order to comply with a subpoena, court order, or other applicable law, regulation or legal process.
- c. If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your information with that company and its advisors before and after the transaction date.
8.2. We may share your personal information with trusted third‑party service providers who support the operation of our website and related systems (for example, website hosting, IT support, analytics or email service providers). Where we do this, we have written contracts in place that require those providers to keep your information secure, use it only in accordance with wur instructions, and comply with UK data protection law.
8.3. Where information submitted via the website relates to an enquiry or referral about care, it may be shared internally within The Good Place with relevant staff such as managers, care coordinators and team leaders, so that we can respond to the enquiry and, where appropriate, set up or deliver services safely and in line with CQC requirements.
8.4. We do not sell your personal information to third parties.
9. What You can do to manage Your privacy
9.1. You can manage certain aspects of your privacy directly, for example by changing your browser settings to control cookies and by choosing which optional information you provide via our website forms.
9.2. You also have a range of legal rights in relation to your personal information, including rights of access, correction, deletion, restriction, objection and portability.
10. Cookies
10.1. In order to comply with UK data protection law, including the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we use a system of classifying the different types of cookies which we use or may use in the future on our website. The classification was developed by the International Chamber of Commerce UK and explains more about which cookies we use or may use in the future, why we use or may use them, and the functionality you will lose if you decide you do not want to have them on your device.
10.2. We will only set non‑essential cookies (such as certain performance, analytics or advertising cookies) on your device where you have given us consent through our cookie banner or settings. You can withdraw your consent at any time by changing your cookie preferences in your browser or through our cookie management tools, where available.
10.3. A list of all the cookies that are used and may be used in the future on our website, by category, is set out below. We review this information periodically and will update it if the cookies we use change.
10.4. What is a cookie?
10.4.1. Cookies are text files containing small amounts of information which are downloaded to Your personal computer, mobile or other device when You visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user's device.
10.4.2. Persistent cookies - these cookies remain on a user's device for the period of time specified in the cookie. They are activated each time that the user visits the website that created that particular cookie.
10.4.3. Session cookies - these cookies allow website operators to link the actions of a user during a browser session. A browser session starts when a user opens the browser window and finishes when they close the browser window. Session cookies are created temporarily. Once You close the browser, all session cookies are deleted.
10.4.4. Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts You see online are more relevant to You and Your interests.
10.5. Cookies used on Our Website
10.5.1. A list of all the cookies that are use and may be used in the future on Our Website, by category, is set out below.
10.5.2. Strictly Necessary Cookies
10.5.2.1. These cookies enable services You have specifically asked for. For these types of cookies that are strictly necessary, no consent is required.
10.5.2.2. These cookies are essential in order to enable You to move around Our Website and to use its features, such as accessing secure areas.
10.5.2.3. We do not require your consent for cookies that are strictly necessary to provide services you have requested via the Website. However, we still explain what they do so that you can understand how your information is used.
| Cookie | Purpose | Expiry |
|---|---|---|
| zenid | This cookie contains a session ID which is a mechanism for distinguishing different users' visits when multiple users are visiting the website at the same time. It is essential for interactive use of the site. | Session |
| PHPSESSID | This cookie contains a session ID which is a mechanism for distinguishing different users' visits when multiple users are visiting the website at the same time. It is essential for interactive use of the site. | Session |
| cookieconsent | This cookie is used to see if the cookie information popup box has been shown. It stores a value of 'accept' or 'reject' to indicate if additional cookies are permitted to be used. | 30 days |
| js | This cookie is used to check if JavaScript is enabled in the browser. It stores a value of '0', '1' or '2' to indicate the check status. | Session |
| lc | This cookie contains an ISO language code (i.e. 'en-GB') to ensure content is servered in the language you have selected. | Session |
| e | This cookie is used to see if the exit intent pop-up has been displayed, and is used to ensure multiple pop-ups are not shown. Its stores a value of '1'. | 1 Hour |
10.5.3. Performance & Analytic Cookies
10.5.3.1. These cookies collect anonymous information on the pages visited. You agree that we can place these types of cookies on Your device following Your acceptance via the cookie information popup.
10.5.3.2. These cookies collect information about how visitors use our website, for instance which pages visitors go to most often, and if they get error messages from the web pages visited. These cookies don't collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how our Website works.
10.5.3.3. We do not use this type of cookie on our website.
10.6. Functional cookies
10.6.1. These cookies remember choices you make to improve your experience. You agree that we can place these types of cookies on your device following your acceptance via the cookie information popup.
10.6.2. These cookies allow our Website to remember choices You make (such as your user name, language or the region You are in) and provide enhanced, more personal features. These cookies can also be used to remember changes You have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.
10.6.3. We do not use this type of cookie on our website.
10.7. Targeting or advertising cookies
10.7.1. These cookies collect information about your browsing habits in order to make advertising relevant to you and your interests. You agree that we can place these types of cookies on your device following Your acceptance via the cookie information popup.
10.7.2. These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times You see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.
10.7.3. We do not use this type of cookie on our website.
11. Using browser settings to manage cookies
11.1. You can control or delete cookies through Your browser settings. Helpful guidance is available from the Information Commissioner’s Office (ICO):-
11.2. Your browser’s own help section will also explain how to manage cookies.
11.3. Where available on our website, You can also use the cookie banner or cookie settings tool to accept or reject different categories of cookies.
11.4. Because cookies allow you to take advantage of some essential features of our website, we recommend You leave strictly necessary cookies turned on. If you leave cookies turned on, remember to sign out when you finish using a shared computer.
12. Data retention and destruction
12.1. We keep personal information collected via our website only for as long as it is reasonably necessary for the purposes for which it was collected, and to meet any legal, regulatory, tax, accounting or reporting requirements. This will vary depending on the nature of the information. For example:-
- a. General enquiries about our services are usually retained for no longer than 2 years after the enquiry is closed, unless they lead to the provision of services;
- b. Information relating to people who go on to receive care and support from us may be retained in line with our care records retention schedule;
- c. Job application information may be retained for a defined period in line with our recruitment and HR policies.
12.2. Details of our wider retention periods are set out in Confidentiality and Data Protection (UK GDPR) Policy and Procedure or associated retention schedule.
12.3. Unless you specifically request your information to be deleted and/ or de‑identified earlier by contacting us, we will not retain website personal information for longer than necessary and will review retention periods regularly.
12.4. There may be occasions where we are unable to fully delete or de‑identify your information due to technical or other operational reasons, for example where your information has been archived onto back‑up systems. Where this is the case, we will take reasonable measures to securely isolate your information from any further processing until such time as we are able to delete or de‑identify it.
12.5. If you request that we delete or de‑identify your information earlier, there may be some details that we are legally required to retain, such as information for financial record keeping or to meet CQC or safeguarding obligations. This information will automatically be deleted or de‑identified at the end of the statutory or regulatory retention period.
13. Your rights
13.1. You have certain rights with respect to your personal information that we collect and process. These rights are set out in UK GDPR and the Data Protection Act 2018 and may include the right of access, rectification, erasure, restriction of processing, objection to processing and data portability. These rights are not absolute and may be subject to specific conditions and exemptions.
13.2. We respond to all requests We receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. To file a request or take action on one of your rights, please contact us.
13.3. You have the right to file a complaint with us about our collection and processing of your personal information; this can be done via our contact. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the UK supervisory authority for data protection:-
- a. Online: https://ico.org.uk/make-a-complaint/
- b. Telephone: 0303 123 1113
13.4. If your personal information is used in connection with the provision of CQC‑regulated care (for example, where information from a website enquiry is added to a care record), you also have rights in relation to those care records, which are explained in our Confidentiality and Data Protection (UK GDPR) Policy and Procedure.
13.5. Access, correction or deletion
13.5.1. You can access, correct or delete your personal information by contacting us.
13.5.2. Please note that even if you request for your information to be deleted, certain aspects may be retained for us:-
- a. To meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us);
- b. To exercise, establish or defend legal claims;
- c. To protect against fraudulent or abusive activity on our website;
- d. Due to technical reasons;
- e. Due to operational reasons.
13.6. Objection and restriction
13.6.1. You may object to our processing of your personal information or ask us to restrict processing of your personal information.
13.7. Withdraw consent
13.7.1. If we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
13.8. File a complaint
13.8.1. You have the right to file a complaint with us about our collection and processing of your personal information, this can be done via our contact page.
14. Security of Your information
14.1. We understand that the security of your personal information is important to you. We use appropriate technical and organisational measures to protect personal information collected via our website against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include encryption, access controls, staff training, secure configuration of our systems, regular monitoring and testing, and contractual requirements on any third‑party service providers.
14.2. Despite our efforts, no system can be completely secure and we cannot guarantee the absolute security of your personal information transmitted to or from our website. Where you choose to share information online, you do so at your own risk, and we encourage you to take steps to keep your information safe, such as using strong passwords and not sharing account details.
15. International data transfers
15.1. Our main systems for processing and storing personal information collected via the website are located in the UK, or in other countries that have been assessed as providing an adequate level of protection for personal data.
15.2. Where we use service providers or host data outside the UK, We will only do so where appropriate safeguards are in place in accordance with UK GDPR, such as adequacy regulations or standard contractual clauses approved by the UK government.
15.3. Accessing our website from outside the UK (for example, when you are travelling abroad) may involve your information being routed through servers in other countries as part of normal internet operations. This is not something we control but is inherent in how the internet works.
16. Collection and use of children’s personal information
16.1. Our website is intended for and directed to individuals aged 18 or over and we do not knowingly collect information directly from minors. If you provide information about a child or young person as part of an enquiry about care or support, this information will be processed in line with this Website Privacy Statement and Confidentiality and Data Protection (UK GDPR) Policy and Procedure.
17. Other websites
17.1. This Website Privacy Statement only covers our website. Any other websites which may be linked to by our website are subject to their own privacy or cookies policies, which may differ from ours. We encourage you to read the privacy information on any other websites you visit.
