Privacy Policy

Kupa Care Ltd is a domiciliary care provider operating within the Gwent Regional Partnership area in Wales. We are committed to protecting and respecting your privacy.

This policy explains how we collect, use, store, and share personal information when you use our website or contact us about our services.

For questions about this policy, please contact us at abigail@kupacareltd.co.uk.

We may collect the following personal information:

We do not collect sensitive personal data (such as health records) through our website. Any clinical or care-plan information is collected separately and handled under our care service agreements.

• Contact details — your name, email address, and phone number when you submit an enquiry or request care via our website.
• Care-related information — the type of care you are enquiring about and any additional details you choose to share in your message.
• Technical data — standard server logs including your IP address, browser type, and pages visited, collected automatically when you use our website.

We use the information you provide to:

We will not use your information for marketing purposes without your explicit consent, and we will never sell your data to third parties.

• Respond to your enquiry or care request.
• Arrange an initial consultation or assessment.
• Communicate with you about our services.
• Comply with our legal and regulatory obligations as a care provider.

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Legitimate interests — to respond to enquiries and provide information about our services.
• Contract performance — where you have engaged or are considering engaging our care services.
• Legal obligation — where we are required to process data to comply with applicable law or regulatory requirements.

Your personal data is stored securely and accessed only by authorised members of our team. We retain enquiry data for up to 12 months, after which it is securely deleted unless a care relationship has been established, in which case our retention policy for care records applies.

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

We do not share your personal information with third parties except where necessary to:

• Provide the care services you have requested (e.g. with a care coordinator).
• Comply with a legal obligation or regulatory requirement.
• Use trusted service providers who process data on our behalf (e.g. our website platform), under strict data processing agreements.

Under UK GDPR, you have the right to:

To exercise any of these rights, please contact us at abigail@kupacareltd.co.uk.

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict how we process your data.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Information Commissioner's Office (ICO).

Our website may use essential cookies to ensure it functions correctly. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and seek your consent where required.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: abigail@kupacareltd.co.uk
• Email: mini@kupacareltd.co.uk