Who we are
Cedars Care Ltd is a domiciliary care provider registered in England and Wales, company number 09596021. Our registered office and our operational office are both at 64 Carlton Hill, Carlton, Nottingham NG4 1ED.
We are registered with the Care Quality Commission, provider ID 1-2652209337.
We are the data controller for the personal information described in this notice. We are registered with the Information Commissioner’s Office under registration reference ZA199363.
If you have any question about this notice or about how we use your information, please contact:
Tolulope Faloye, Director and Data Protection Lead
Cedars Care Ltd
64 Carlton Hill, Carlton, Nottingham NG4 1ED
Telephone: 0115 871 1900
Email: office@cedarscareltd.co.uk
What this notice covers
This notice explains how we collect, use, store and share personal information when you:
- use this website
- complete an enquiry, referral, or contact form on this website
- apply to work with us through this website
- contact us by telephone or email
If you become a person we provide care to, or a representative of that person, we will give you a separate and more detailed privacy notice covering the information we hold in order to deliver your care. That notice sits alongside this one.
The information we collect
When you complete a form on this website
Depending on which form you use, we may ask for:
- your name
- your telephone number
- your email address
- the name and relationship of the person needing care, where that is not you
- the area you live in
- information about care needs, health conditions, medication, or the support you are looking for
- for job applicants: your work history, right to work status, and referee details
When you use this website
Our website uses cookies and similar technologies. Our Cookie Policy explains what these are and how you can control them.
Special category data
Information about a person’s health, disability, or care needs is special category personal data under the UK General Data Protection Regulation. It attracts additional protection in law. We only ask for it where it is necessary, we ask for the minimum we need, and we handle it under the conditions set out below.
You do not need to give us detailed health information through this website. A short description of the support you are looking for is enough for us to call you back. Please do not send medical records, diagnoses, or medication details through a web form.
Why we use your information, and our lawful basis
What we use it for | Our lawful basis under UK GDPR Article 6 | Additional condition for health data under Article 9 |
Responding to your enquiry and calling you back | Legitimate interests: responding to a person who has contacted us | Explicit consent, given when you tick the box on the form |
Assessing whether we can meet a person’s care needs | Legitimate interests, and steps taken at your request before entering into a contract | Provision of health or social care, UK GDPR Article 9(2)(h), and Schedule 1 Part 1 of the Data Protection Act 2018 |
Processing a job application | Steps taken at your request before entering into a contract | Employment, social security and social protection law, Article 9(2)(b), where relevant |
Meeting our legal and regulatory duties, including to the Care Quality Commission | Legal obligation | Reasons of substantial public interest, regulatory requirements, Article 9(2)(g) |
Keeping our website secure and working properly | Legitimate interests: protecting our systems | Not applicable |
Non essential cookies and analytics | Consent | Not applicable |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we have concluded that they are not. You may ask us for our assessment.
Where we rely on your consent, you may withdraw it at any time by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.
Who we share your information with
We do not sell your information and we do not use it for advertising.
We may share it with:
- our care management software provider, who stores records on our behalf under a written contract
- our website and email providers, who host the systems your enquiry passes through
- our professional advisers, including our accountant and our insurers, where necessary
- the Care Quality Commission, a local authority, the NHS, the police, or another public body, where we are required or permitted by law to do so, including where we have safeguarding concerns about a person’s safety
Every organisation that processes information on our behalf is bound by a written contract requiring them to keep it secure and to use it only on our instructions.
We do not routinely transfer personal information outside the United Kingdom. Where a supplier does so, we ensure appropriate safeguards recognised under UK data protection law are in place.
How long we keep it
Type of record | How long we keep it |
Website enquiry where care did not go ahead | 12 months from our last contact with you |
Care records for a person we have supported | 8 years from the end of the care, in line with NHS and social care records management guidance. For a person who was under 18, until their 25th birthday |
Unsuccessful job application | 6 months from the outcome |
Website analytics | As set out in our Cookie Policy |
At the end of these periods we securely delete or destroy the information.
How we keep it safe
We hold the NHS Data Security and Protection Toolkit standard. We restrict access to personal information to staff who need it to do their job, we train our staff in confidentiality and data protection, and we keep electronic records on access controlled systems.
Your rights
Under UK data protection law you have the right to:
- be informed about how we use your information, which is the purpose of this notice
- access the personal information we hold about you
- rectification, meaning correction of information that is inaccurate or incomplete
- erasure of your information in certain circumstances
- restrict how we use your information in certain circumstances
- object to our use of your information where we rely on legitimate interests
- data portability in certain circumstances
- withdraw consent at any time where we rely on consent
There is normally no charge, and we will respond within one calendar month.
To exercise any of these rights, contact Tolulope Faloye using the details at the top of this page.
Complaints about how we use your information
If you are unhappy with how we have handled your personal information, please tell us first, using our Complaints Procedure. We take it seriously and we would like the chance to put it right.
You also have the right to complain directly to the Information Commissioner’s Office at any time. You do not have to come to us first.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
Changes to this notice
We review this notice at least once a year. Where we make a significant change, we will say so on this page. This notice was last updated on 7/11/2026