Last updated: 12 August 2026
At Breathe Care Services, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you:
- Visit our website
- Contact us
- Request a care assessment
- Enquire about care for yourself or another person
- Are referred to us by a professional
- Receive care or support from us
- Communicate with us as a family member, representative or professional
- Apply for a role with Breathe Care Services
- Otherwise interact with our organisation
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by subsequent legislation including the Data (Use and Access) Act 2025.
1. Who We Are
Breathe Care Services is the organisation responsible for deciding how and why your personal information is processed for the purposes described in this Privacy Policy.
Our contact details are:
Breathe Care Services
Telephone: 0121 827 5050
Email: hello@breathecareservices.co.uk
Registered/Business Address:
[INSERT FULL ADDRESS]
Company Number:
[INSERT COMPANY NUMBER]
ICO Registration Number:
[INSERT ICO REGISTRATION NUMBER IF APPLICABLE]
For questions about this Privacy Policy or how we use your information, please contact us using the details above.
2. What Personal Information We May Collect
The information we collect depends on how you interact with us.
Identity and Contact Information
This may include:
- Name
- Address
- Postcode
- Telephone number
- Email address
- Date of birth where relevant
- Emergency contact information
Care and Support Information
Where you enquire about or receive care, we may collect information such as:
- Care and support needs
- Daily routines
- Mobility
- Personal-care requirements
- Medication-support requirements
- Communication preferences
- Dietary needs
- Personal goals
- Preferred activities
- Independence and daily-living abilities
- Relevant risks
- Support hours
- Living arrangements
- Relevant family or representative details
Health and Other Sensitive Information
Providing care may require us to process information relating to someone’s physical or mental health.
We may also need information about matters such as:
- Disability
- Racial or ethnic background
- Religion or beliefs
- Communication needs
- Dietary requirements
- Sexual orientation where relevant to appropriate person-centred care
- Other information necessary to understand an individual’s needs, preferences or circumstances
Health information and certain other types of information receive additional protection under UK data protection law as special category personal data.
We only collect this information where it is relevant and necessary.
Professional Referral Information
Where a referral is made by a social worker, commissioner, healthcare professional, case manager or another professional, we may receive:
- Referral details
- Assessments
- Support requirements
- Risk information
- Funding or commissioning information
- Relevant health or social-care information
- Professional contact details
Website and Technical Information
When you use our website, we may collect information such as:
- IP address
- Browser type
- Device information
- Pages visited
- How you use the website
- Cookie preferences
- Website security and diagnostic information
More information about cookies is available in our Cookie Policy.
Communications
We may retain information contained in:
- Emails
- Telephone enquiries
- Contact forms
- Care assessment requests
- Referral forms
- Complaints
- Feedback
- Other communications with us
Recruitment Information
If you apply to work with Breathe Care Services, we may collect information including:
- Name and contact details
- CV
- Employment history
- Qualifications
- Skills and experience
- References
- Right-to-work information
- Availability and preferred role
- Information required for appropriate recruitment and background checks
Additional information may be provided in a separate Recruitment Privacy Notice where appropriate.
3. How We Collect Your Information
We may collect personal information:
Directly From You
For example when you:
- Complete a website form
- Request a care assessment
- Telephone or email us
- Apply for employment
- Meet with our care team
- Provide information during an assessment
From Someone Acting on Your Behalf
This may include:
- A family member
- Attorney
- Advocate
- Carer
- Representative
From Professionals or Organisations
Where appropriate, information may be provided by:
- Social workers
- Local authorities
- Commissioners
- NHS organisations
- Healthcare professionals
- Case managers
- Hospital discharge teams
- Other organisations involved in arranging or providing your care
Where we receive information about you from another person or organisation, we will handle that information in accordance with applicable data-protection requirements.
4. How and Why We Use Your Personal Information
We only use personal information where we have a lawful reason to do so.
Depending on the circumstances, our lawful basis may include:
Contract
Where processing is necessary to take steps at your request before entering into a care arrangement, or to provide services under an agreed contract.
Legal Obligation
Where we need to use information to comply with legal, regulatory, safeguarding, employment, accounting or other obligations.
Legitimate Interests
Where processing is reasonably necessary for the operation, administration, security or improvement of Breathe Care Services and those interests do not improperly override your rights and freedoms.
Consent
Where you have freely given us appropriate consent for a particular use of your information.
Where consent is our basis for processing, you may withdraw it.
Vital Interests
In limited circumstances, information may need to be used to protect someone’s life.
UK data protection law requires organisations to identify an appropriate lawful basis for processing personal information and to explain that basis to individuals.
5. How We Use Health and Other Special Category Information
Because we provide care and support services, we may need to process health information and other special category personal information.
Special category information requires additional legal protection. Processing it generally requires both an appropriate lawful basis and an additional special-category condition.
Depending on the circumstances, we may process such information where necessary for:
- Health or social-care provision or management
- Safeguarding
- Employment and social-protection obligations
- Establishing, exercising or defending legal claims
- Protecting vital interests
- Reasons of substantial public interest where applicable
- Purposes for which you have provided explicit consent, where consent is appropriate
We will only collect and use sensitive information that is reasonably necessary for the purpose concerned.
6. What We Use Your Information For
We may use personal information to:
- Respond to enquiries
- Understand care and support needs
- Arrange care assessments
- Determine whether we can provide appropriate support
- Develop personalised care plans
- Deliver and manage care services
- Coordinate care with appropriately involved professionals
- Communicate with authorised family members or representatives
- Manage medication support
- Maintain care records
- Monitor care quality
- Manage risks and safeguarding concerns
- Respond to complaints or concerns
- Meet regulatory and legal requirements
- Manage referrals and commissioned services
- Process employment applications
- Recruit and manage staff
- Maintain website security
- Improve our website and services
- Maintain business and financial records
- Establish or defend legal claims
We aim to collect only information that is adequate, relevant and necessary for the purpose for which it is being used, in line with the data-minimisation principle.
7. Information About Other People
You may sometimes provide information about another person—for example, when requesting care for a parent or making a professional referral.
Where you do so, please ensure that you are authorised or otherwise have an appropriate basis for providing the information.
Where appropriate, please also make the person aware that their information has been provided to Breathe Care Services and direct them to this Privacy Policy.
8. Who We May Share Personal Information With
We do not sell personal information.
We may share information where necessary and appropriate with organisations or people such as:
- NHS and healthcare professionals
- Social workers
- Local authorities
- Commissioners
- Case managers
- Other care professionals involved in an individual’s support
- Authorised family members, advocates or representatives
- Regulators and safeguarding authorities
- The Care Quality Commission where appropriate
- Police or other authorities where legally required
- Professional advisers such as accountants, solicitors or insurers
- IT, website, communications and cloud-service providers
- Care-management software providers
- Recruitment or background-check providers
- Other suppliers acting on our behalf
Where another organisation processes information for us, we expect appropriate contractual, confidentiality and data-security arrangements to be in place.
We only share information that is necessary for the relevant purpose.
9. International Transfers
Some technology, website, email, cloud or other service providers may process personal information outside the United Kingdom.
Where this involves a restricted transfer under UK data protection law, we will take appropriate steps to ensure that the transfer is lawful.
Depending on the circumstances, this may include relying on:
- UK adequacy regulations
- Appropriate contractual safeguards
- The UK International Data Transfer Agreement
- The UK Addendum to approved contractual clauses
- Another legally permitted transfer mechanism
UK GDPR contains specific requirements governing transfers of personal information to separate organisations outside the UK.
10. How Long We Keep Personal Information
We do not keep personal information for longer than necessary.
How long information is retained depends on factors including:
- Why it was collected
- Whether you become a service user
- Legal and regulatory requirements
- Care-record requirements
- Safeguarding responsibilities
- Contractual obligations
- Limitation periods for legal claims
- Recruitment requirements
- Whether information is needed to resolve a complaint or dispute
Different categories of information may therefore have different retention periods.
For example:
- General enquiries may be deleted once they are no longer required for the enquiry or a reasonable follow-up period.
- Care and service-user records may need to be retained for longer periods to meet legal, regulatory or professional requirements.
- Recruitment records may be retained for an appropriate period following the recruitment process.
- Financial records may be retained for periods required by tax and accounting law.
We maintain or will maintain appropriate retention arrangements and periodically review information we hold.
UK data-protection law does not prescribe one universal retention period; organisations must determine appropriate periods according to the purpose and circumstances and should not retain information indefinitely simply because it may be useful in future.
11. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Alteration
- Disclosure
- Accidental destruction
Measures may include, where appropriate:
- Access controls
- Password protection
- Secure systems
- Staff confidentiality requirements
- Data-protection training
- Appropriate supplier contracts
- Secure storage
- Policies and procedures governing access to personal information
Only people who have an appropriate reason to access personal information should be able to do so.
12. Cookies and Website Analytics
Our website may use cookies and similar technologies.
These may be used for purposes such as:
- Essential website functionality
- Remembering preferences
- Website security
- Understanding website usage
- Analytics
- Improving website performance
- Marketing, where applicable and permitted
Where consent is legally required for a particular cookie or similar technology, we will request that consent through our cookie-management system.
More detailed information is provided in our Cookie Policy.
13. Marketing Communications
We may occasionally send information about our services where we are legally permitted to do so.
Where consent is required for electronic marketing, we will seek appropriate consent.
You can ask us to stop sending direct marketing at any time.
Your right to object to the processing of your personal information for direct marketing is absolute.
You may unsubscribe using any unsubscribe option provided or contact us directly.
We may retain limited information on a suppression list to ensure that we respect your request not to receive further marketing.
14. Your Data Protection Rights
Depending on the circumstances and the lawful basis we rely upon, you may have rights including:
The Right to Be Informed
To receive clear information about how your personal information is used.
The Right of Access
To request access to personal information we hold about you.
The Right to Rectification
To ask us to correct inaccurate or incomplete information.
The Right to Erasure
To ask us to delete personal information in certain circumstances.
The Right to Restrict Processing
To ask us to limit how information is used in certain circumstances.
The Right to Data Portability
In certain circumstances, to receive information you provided to us in a structured format or have it transferred to another organisation.
The Right to Object
To object to certain types of processing, including processing based on legitimate interests.
You have an absolute right to object at any time to the use of your personal information for direct marketing.
The Right to Withdraw Consent
Where we rely on consent, you may withdraw it at any time.
Withdrawal does not make processing carried out before withdrawal unlawful.
Not every right applies in every circumstance. The rights available can depend on the purpose for processing and our lawful basis.
To exercise your rights, contact:
Email: hello@breathecareservices.co.uk
Telephone: 0121 827 5050
We may need to verify your identity before acting on certain requests.
15. Automated Decision-Making
We do not currently use personal information to make decisions about individuals that are based solely on automated processing and that produce legal or similarly significant effects.
If this changes, we will provide the information and safeguards required by applicable data-protection law.
16. Data Protection Complaints
If you believe that Breathe Care Services has not handled your personal information properly, please contact us so that we have an opportunity to investigate your concern.
You can make a data-protection complaint by:
Email: hello@breathecareservices.co.uk
Telephone: 0121 827 5050
You may also provide a dedicated Data Protection Complaint Form on this website.
We will:
- Provide a clear way for you to raise a data-protection complaint
- Acknowledge your complaint within 30 days
- Investigate the matter without undue delay
- Keep you appropriately informed while we investigate
- Tell you the outcome without undue delay
These complaint-handling requirements are now part of UK data-protection law following the Data (Use and Access) Act 2025.
If you remain dissatisfied, you also have the right to raise your concern with the Information Commissioner’s Office (ICO), the UK’s data-protection regulator.
We would appreciate the opportunity to address your concerns first, but this does not affect your right to contact the ICO.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to how we process information
- Changes in technology
- Changes in legal or regulatory requirements
The latest version will be published on our website with the date it was last updated.
Where a change significantly affects how we use personal information, we will take appropriate steps to bring that change to the attention of affected individuals where required.
18. Contact Us About Your Privacy
If you have questions about this Privacy Policy, wish to exercise your data-protection rights or want to make a data-protection complaint, contact:
Breathe Care Services
Telephone: 0121 827 5050
Email: hello@breathecareservices.co.uk
Address:
[INSERT FULL BUSINESS/REGISTERED ADDRESS]
ICO Registration Number:
[INSERT ICO NUMBER IF APPLICABLE]