Skip to main content
Eservices Care
Legal

Privacy Policy

How we collect, use and protect your personal information when you use our website or receive care from Eservices Care.

Last updated: 18 May 2026

1. Who we are

Eservices Care Ltd ("we", "us", "our") is the data controller for the personal information we process. We are registered in England & Wales, with our registered office at 10 Larkspur Way, Peterborough, PE7 2FW, and are registered with the Information Commissioner's Office (ICO). You can contact our Data Protection Lead on 07895 538618 or at info@eservicescare.co.uk.

2. The information we collect

Depending on how you interact with us, we may collect:

  • Identity & contact data : name, date of birth, address, phone, email.
  • Care & health data (special category) : assessments, care plans, medication, clinical records, risk information.
  • Next of kin / Representative data : contact details for family, advocates, attorneys or deputies.
  • Referral data from Local Authorities, NHS bodies, GPs and other professionals.
  • Financial data : invoicing details for privately funded care.
  • Website & technical data : IP address, device type, browser, pages viewed and cookies (see our Cookie Policy).

3. How we use your information and our lawful bases

We process personal data under the UK GDPR using the following lawful bases:

  • Contract : to deliver care or services you have requested.
  • Legal obligation : to meet duties under the Care Act 2014, Health and Social Care Act 2008, safeguarding law and tax/employment law.
  • Vital interests : to protect someone's life in an emergency.
  • Public task : for care commissioned by Local Authorities or the NHS.
  • Legitimate interests : for service improvement, security and limited direct communication, balanced against your rights.
  • Consent : for non-essential cookies and optional marketing.

Special category health data is processed under Article 9(2)(h) UK GDPR (provision of health and social care) and Schedule 1 of the Data Protection Act 2018, subject to the common law duty of confidentiality.

4. Who we share information with

We share information only where it is lawful, necessary and proportionate, including with:

  • Treating clinicians, GPs, hospitals and community health teams;
  • Local Authorities, Integrated Care Boards and NHS commissioners;
  • Safeguarding partners, the police and emergency services where required;
  • Regulators including the Care Quality Commission and the ICO;
  • Trusted service providers (e.g. IT, secure hosting, payroll, accountancy) under written data processing agreements; and
  • Courts or other bodies where we are legally required to disclose information.

We do not sell personal data and we do not use it for automated decision-making with legal effects.

5. International transfers

We aim to keep personal data within the UK and the European Economic Area. Where data is transferred outside the UK (for example via a cloud provider), we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum.

6. How long we keep your information

We retain records in line with the NHS Records Management Code of Practice and our retention schedule. As a guide:

  • Adult social care records : at least 8 years after care ends;
  • Children's records : until the person's 25th birthday;
  • Financial records : 6 years for tax purposes;
  • Website analytics : up to 26 months.

When data is no longer required, it is securely deleted or anonymised.

7. How we keep information secure

We use organisational and technical measures aligned with the NHS Data Security and Protection Toolkit, including access controls, encryption in transit and at rest, secure UK-based hosting, staff training and audit logging. Paper records are kept in locked storage with restricted access.

8. Your rights

Under UK data protection law you have the right to:

  • Be informed about how your data is used;
  • Access a copy of your data (a Subject Access Request);
  • Have inaccurate data corrected;
  • Request erasure where there is no overriding legal or care reason to retain it;
  • Restrict or object to certain processing;
  • Data portability for information you provided to us;
  • Withdraw consent where consent is the lawful basis; and
  • Not be subject to solely automated decision-making.

To exercise any of these rights, contact us at info@eservicescare.co.uk. We will respond within one month.

9. Cookies

Our website uses a small number of cookies and similar technologies. Full details, and how to manage your preferences, are set out in our Cookie Policy.

10. Children's data

Our website is aimed at professionals, families and adults. Where we provide services to children or young people, we only process their data with appropriate parental, guardian or commissioner consent and in line with the law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the "Last updated" date. Significant changes affecting active service users will be communicated directly.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

13. Contact us