Who We Are
[REGISTERED COMPANY NAME] trading as Sunrise Total Care is the data controller for the information described here. Company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
Data protection contact: [DATA PROTECTION LEAD NAME AND ROLE], email [PRIVACY EMAIL], phone [PHONE], or write to the address above.
This notice covers the website only. People who receive care and our employees are given separate, fuller privacy notices.
Information We Collect
When you contact us through a form:
| Form | What we collect |
|---|---|
| Form: Callback request | What we collectName, phone number, postcode, best time to call |
| Form: Care enquiry | What we collectName, phone or email, postcode, who the care is for, type of care, when it is needed, your message |
| Form: Professional referral | What we collectYour name, organisation, role, work email and phone, support requested, postcode, preferred contact time |
| Form: Job application | What we collectName, email, phone, role, town, experience, driving licence, CV |
| Form: Feedback and complaints | What we collectName and contact details (optional), type of feedback, your message |
We also record the page you sent the form from and the date and time.
Health information: an enquiry or referral may include some details about a person's health or care needs. Please share only a brief outline. There is no need to send medical records through the website.
When you browse our website: technical data such as your IP address, browser type and the pages you visit. Analytics data is only collected if you accept analytics cookies. See our Cookie Policy.
How We Use Your Information and Why
| Purpose | Lawful basis |
|---|---|
| Purpose: Responding to callback requests and care enquiries, arranging assessments | Lawful basisSteps taken at your request before entering into a contract, and our legitimate interest in responding to people who contact us |
| Purpose: Handling health details within an enquiry or referral | Lawful basisProvision of health or social care, with appropriate safeguards |
| Purpose: Handling professional referrals | Lawful basisLegitimate interests, and provision of health or social care for any health details |
| Purpose: Assessing job applications | Lawful basisSteps taken at your request before entering into an employment contract |
| Purpose: Responding to feedback and complaints | Lawful basisLegitimate interests and our legal obligations as a CQC registered provider |
| Purpose: Website analytics | Lawful basisYour consent, which you can withdraw at any time |
| Purpose: Keeping the website secure and working | Lawful basisLegitimate interests |
We do not sell your information, use it for unrelated marketing or make decisions about you by automated means.
Who We Share It With
We use a small number of trusted service providers who process data on our behalf under written contracts:
- Supabase: stores form submissions in a secure database. Hosting region: [HOSTING REGION].
- Resend: sends email notifications of new form submissions to our team.
- Google Analytics 4: measures how the website is used, only with your consent.
- Cloudflare: hosts the website and protects it against attacks. It processes IP addresses for security and delivery.
Some providers may process data outside the UK, including in the United States. Where this happens, transfers are protected by recognised safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU to US Data Privacy Framework.
We may also share information with local authorities, the NHS or other professionals involved in someone's care where this is needed, and with regulators or the police where the law requires it.
How Long We Keep It
| Information | How long |
|---|---|
| Information: Enquiries that do not lead to care | How long[RETENTION PERIOD] |
| Information: Enquiries that lead to care | How longMoved into the care record and kept under our care records policy |
| Information: Unsuccessful job applications | How long[RETENTION PERIOD] |
| Information: Feedback and complaints | How long[RETENTION PERIOD] |
| Information: Analytics data | How long14 months in Google Analytics |
After this, data is deleted securely or fully anonymised.
How We Protect It
All data is encrypted in transit. Access to form submissions is limited to staff who need it, protected by individual logins. Our forms include spam protection and we never send personal details to Google Analytics.
Your Rights
Under UK data protection law you have the right to:
- ask for a copy of your information
- ask us to correct anything that is wrong
- ask us to delete your information
- ask us to limit how we use it
- object to us using it
- ask for it in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, contact [PRIVACY EMAIL]. We will respond within one month. There is normally no charge.
How to Complain
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk (opens in a new tab) or on 0303 123 1113.
Changes to This Notice
We may update this notice when our services or tools change. The latest version will always be on this page, with the date it was last updated.
Our website is not intended for children under 16 and we do not knowingly collect their information online.
Related:Read our Cookie Policy Contact us