Privacy Policy
How personal information is collected, used, shared, stored, and protected in connection with Havenlight care and enquiries.

Confidentiality with accountability
This policy explains how Havenlight handles personal data, respects privacy, and balances confidentiality with safeguarding and legal responsibilities.
Lawful use
GDPR aligned
Personal data is processed for care delivery, legal obligations, safeguarding, and service management.
Sensitive data
Handled carefully
Health, care, capacity, medication, and safeguarding information are treated as confidential and only used when justified.
Your rights
Access and control
People can request access, corrections, advocacy support, and raise privacy concerns without disadvantage.
This page is structured to feel clear, not dense.
The main points are surfaced first, and the detailed sections are laid out as readable blocks instead of one continuous wall of policy text.
Sections
15 detailed areas
Highlights
3 key trust markers
Policy Statement
Havenlight is committed to protecting personal information and handling it fairly, lawfully, securely, and transparently.
Privacy and dignity are central to good care, and information will only be shared where there is a clear legal, care, or safeguarding reason.
What Information We May Hold
- Personal details such as name, address, phone number, email, and date of birth
- Assessment information, care plans, risk assessments, and consent records
- Health, mobility, nutrition, medication, and communication needs
- Next of kin, representative, advocate, or professional contact details
- Visit logs, EMAR records, incident records, and complaint information
Special Category and Sensitive Information
Care delivery often requires processing sensitive information such as health conditions, disability, capacity, medication, cultural needs, and safeguarding concerns.
This information is only used where necessary for care, safety, legal compliance, or safeguarding.
Why We Use Information
- To assess needs before care begins
- To plan and review safe person centred support
- To manage medication and EMAR records
- To communicate with service users, representatives, and professionals
- To meet safeguarding, legal, regulatory, and contractual obligations
- To monitor quality, incidents, complaints, and service improvement
Lawful Bases for Processing
Depending on the situation, Havenlight may rely on consent, contractual necessity, legal obligation, vital interests, legitimate interests, provision of health or social care, or safeguarding duties.
Consent, Choice, and Capacity
Consent is recorded where required and care choices are respected wherever possible.
Where capacity is in question, Havenlight follows the Mental Capacity Act, records decisions appropriately, and involves advocates or representatives where required.
Sharing Information
Information may be shared with GPs, nurses, hospitals, pharmacists, commissioners, safeguarding teams, emergency services, or lawful representatives where needed for care, safety, or legal compliance.
Information is not sold and is not shared casually or for private purposes.
Confidentiality and Safeguarding Disclosures
Confidentiality is respected, but it may be overridden where there is a safeguarding concern, risk of serious harm, prevention or detection of crime, or another clear legal basis for disclosure.
Security and Storage
Records are stored securely using appropriate technical and organisational controls. Access should be limited to those who need the information to carry out their role.
Retention
Information is retained only for as long as required for care delivery, governance, safeguarding, and legal or regulatory obligations.
Your Rights
- Request access to your information
- Request correction of inaccurate records
- Ask questions about how your data is used
- Request support from an advocate or representative
- Raise a complaint about privacy or data handling
Advocacy and Representatives
Service users may nominate family members, legal representatives, or advocates to support communication, decision making, and access requests. IMCA support may apply in serious decisions where capacity is lacking.
Website Enquiries and Contact Forms
Where people contact Havenlight through website forms or email, the information provided is used to respond to the enquiry, assess suitability, and arrange follow-up.
Website related processing should remain proportionate and relevant to care enquiries, communication, and service administration.
Complaints About Data Handling
Privacy concerns can be raised through Havenlight's complaints route and should be handled fairly, confidentially, and without disadvantage to the complainant.
Contact Information
Office Address
To be added
Telephone
To be added
Out of Hours
To be added
hello@havenlightcarelimited.co.uk
Registered Manager
To be added
If you remain concerned about data handling, you may also seek guidance from the Information Commissioner's Office.