How we look after your information

Quality Care Scotland Ltd is the "controller" of the personal information you give us through this website. That means we decide how it is used and we are responsible for looking after it.

• Company number SC600126, registered in Scotland
• Registered office: 29 Nethercliffe Avenue, Netherlee, Glasgow G44 3UH (we provide care in Helensburgh, Rhu, Cardross and nearby villages)
• Registered with the Information Commissioner's Office: ZB166646
• Registered with the Care Inspectorate: service number CS2018367887

Our Data Protection Officer is Mark Oliver. You can contact him about anything in this notice by emailing Nina.dambrosio@qualitycarescotland.co.uk (please mark it "For the Data Protection Officer"), calling 07493 304 526, or writing to the registered office above.

When you send an enquiry using the form on our contact page, we collect your first and last name, email address, phone number, and, if you choose to give them, your town or village, a description of the care you're looking for, and whether you'd like to join our waiting list.

What you write about care needs may include health information about you or a relative. Please share only what you're comfortable with. We'll talk through the details properly when we speak to you.

When you call or email us, we keep a record of the conversation or message so we can help you.

When you simply browse the site, we do not collect anything that identifies you. See "Cookies and visitor statistics" below.

We use the information you send us only to:

• reply to your enquiry and arrange a chat or a visit;
• assess whether, and how, we can provide the care you're asking about;
• let you know when a place opens, if you've asked to join our waiting list.

Our lawful basis is that you've asked us to take steps before possibly entering into a care agreement with you (UK GDPR Article 6(1)(b)). Where you tell us about a relative, we rely on our legitimate interest in responding to an enquiry made on their behalf (Article 6(1)(f)). Any health information is handled for the purpose of providing health and social care (Article 9(2)(h) and the Data Protection Act 2018).

We never sell your information, never use it for marketing you haven't asked for, and never use it to make automated decisions about you.

Your enquiry is seen by our management team. We use a small number of trusted service providers to run the website and our email. They process information only on our instructions:

• Netlify, which hosts this website and receives the enquiry form before passing it to us by email;
• Google Workspace, which provides our email.

Some of these providers may store data outside the UK, including in the United States. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

We would only share your information with anyone else if the law requires it (for example, a safeguarding concern), or with your agreement.

If your enquiry doesn't lead to care with us, we delete it within 12 months of our last contact with you. If you join our waiting list, we keep your details until you ask to be removed or we no longer have places to offer.

If you go on to receive care from us, your enquiry becomes part of your care record, which we keep for the periods set out in our records retention policy, in line with Care Inspectorate and NHS guidance. We're happy to explain these periods if you ask.

This website does not use advertising or tracking cookies, so you won't see a cookie banner.

To understand how many people visit and which pages are useful, we use Plausible Analytics, a privacy-friendly service based in the EU. It sets no cookies and collects no personal information. It counts visits in a way that cannot identify you or follow you to other websites. It also records when someone presses our phone number or email link or sends the enquiry form, but never what they wrote.

The map on our contact page loads map images from OpenStreetMap, which, like any website, briefly receives your device's internet (IP) address in order to send them.

Links to our Facebook and LinkedIn pages take you to those sites, which have their own privacy policies.

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that's wrong;
• ask us to delete your information;
• object to, or ask us to limit, how we use it;
• ask us to pass it to another organisation in a usable format.

To use any of these rights, contact us using the details under "Who we are". It's free, and we'll reply within one month.

Enquiries are sent over an encrypted connection, and access to them is limited to the staff who need it to respond. Our wider approach to data security is set out in our UK GDPR policies, which we're happy to share.

Please talk to us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office: visit ico.org.uk/make-a-complaint or call 0303 123 1113.

If we change how we use your information, we'll update this page and the date at the top.