We have an ensuite room available for respite or permanent care in Leeds

0114 349 7837

admin@twelvetreescare.co.uk

Privacy Policy

Twelve Trees Care Ltd

Last updated: [15/09/2025]

1. Introduction

Twelve Trees Care Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, enquire about our services, or receive care from us.

We are registered with the Care Quality Commission (CQC) and comply with all relevant data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Information

Data Controller: Twelve Trees Care Ltd
Registered Office: 17 Priory Road, Sheffield, South Yorkshire, S7 1LW
Company Registration Number: 11712041
CQC Provider Registration: 1-101714226
CQC Location Registrations: 1-113592098 (Residential Care), 1-2452350697 (Home Care)
Contact: admin@twelvetreescare.co.uk
Telephone: 0114 349 7837

3. Information We Collect

3.1 Personal Information You Provide

We may collect the following personal information when you:

  • Contact us for information about our services
  • Complete enquiry forms on our website
  • Apply for employment with us
  • Receive care services from us

This may include:

  • Name, address, telephone number, email address
  • Date of birth and age
  • Emergency contact details
  • Financial information (for billing purposes)
  • Employment history and references (for job applications)

3.2 Health and Care Information

When providing care services, we collect sensitive personal information including:

  • Medical history and current health conditions
  • Care needs assessments
  • Medication requirements
  • GP and healthcare provider details
  • Social services information
  • Details of family members and next of kin
  • Care plans and risk assessments
  • Daily care records and progress notes

3.3 Website Usage Information

When you visit our website, we may automatically collect:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on site
  • Referring website information
  • Cookie data (see our Cookie Policy)

4. How We Use Your Information

4.1 Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you provide explicit consent for specific purposes Contract: To provide care services or fulfil contractual obligations Legal Obligation: To comply with regulatory requirements (CQC, safeguarding duties) Vital Interests: To protect health and safety in emergency situations Legitimate Interests: For business administration and service improvement

4.2 Purposes of Processing

We use your information to:

  • Provide personalised care and support services
  • Assess care needs and develop care plans
  • Communicate with you and your family about care
  • Process payments and manage billing
  • Comply with regulatory and legal obligations
  • Maintain safeguarding records
  • Improve our services and website functionality
  • Recruit and manage staff
  • Handle complaints and feedback

5. Information Sharing

5.1 When We Share Information

We may share your personal information with:

Healthcare Professionals: GPs, consultants, nurses, and other medical practitioners involved in your care Social Services: Local authorities and social workers coordinating your care Family Members: Next of kin and designated emergency contacts (with appropriate consent) Regulatory Bodies: CQC, local safeguarding boards, and other statutory authorities Professional Services: Legal advisors, accountants, and auditors (under confidentiality agreements) Technology Providers: Secure IT systems and software providers supporting our services Emergency Services: In urgent situations requiring immediate medical attention

5.2 Third-Party Processors

We work with carefully selected third-party processors who help us deliver our services:

  • Care management software providers
  • Payroll and HR systems
  • Website hosting and maintenance
  • Communication platforms
  • Financial services providers

All third parties are required to maintain appropriate security measures and process data only as instructed by us.

6. International Transfers

We do not routinely transfer personal data outside the UK. If international transfers are necessary, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the UK authorities.

7. Data Retention

7.1 Care Records

We retain care-related personal information in accordance with professional and legal requirements:

  • Active care records: Retained for the duration of care provision plus 8 years
  • Children’s records: Retained until the 25th birthday or 8 years after death
  • Mental health records: Retained for 20 years after last contact
  • Safeguarding records: Retained permanently or as directed by local safeguarding boards

7.2 Other Information

  • Enquiry and marketing data: 3 years from last contact
  • Employment records: 6 years after employment ends
  • Financial records: 7 years for tax and accounting purposes
  • Website data: Up to 2 years for analytics purposes

8. Your Rights

Under UK GDPR, you have the following rights:

8.1 Right to Information

You have the right to be informed about how we use your personal data (this privacy policy).

8.2 Right of Access

You can request a copy of the personal information we hold about you.

8.3 Right to Rectification

You can ask us to correct inaccurate or incomplete personal information.

8.4 Right to Erasure

You can request deletion of your personal data in certain circumstances.

8.5 Right to Restrict Processing

You can ask us to limit how we use your personal information.

8.6 Right to Data Portability

You can request a copy of your data in a portable format.

8.7 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.8 Rights Related to Automated Decision-Making

You have rights regarding automated decision-making and profiling.

Important Note: Some rights may be limited when we need to process data for regulatory compliance, safeguarding, or vital interests.

9. Security Measures

We implement appropriate technical and organisational measures to protect your personal information:

  • Encrypted data storage and transmission
  • Regular security assessments and updates
  • Staff training on data protection
  • Access controls and user authentication
  • Secure disposal of records
  • Incident response procedures
  • Regular backup and recovery testing

10. Cookies and Website Technology

Our website uses cookies and similar technologies. Please see our separate Cookie Policy for detailed information about:

  • Types of cookies we use
  • How to manage cookie preferences
  • Third-party cookies and analytics
  • Your choices regarding cookies

11. Children’s Privacy

We may provide care services to children and young people under 18. When processing children’s data:

  • We obtain appropriate consent from parents/guardians
  • We consider the child’s capacity to understand and consent
  • We apply additional protections for children’s data
  • We follow relevant safeguarding procedures

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

  • Post the updated policy on our website
  • Notify you of significant changes via email or direct communication
  • Update the “last modified” date at the top of this policy

13. Contact Us

13.1 General Enquiries

For questions about this Privacy Policy or our data practices:

  • Email: admin@twelvetreescare.co.uk
  • Telephone: 0114 349 7837
  • Post: Twelve Trees Care Ltd, 17 Priory Road, Sheffield, South Yorkshire, S7 1LW

13.2 Data Protection Officer

If you have concerns about how we handle your personal data:

  • Email: admin@twelvetreescare.co.uk
  • Post: Data Protection Officer, Twelve Trees Care Ltd, 17 Priory Road, Sheffield, South Yorkshire, S7 1LW

13.3 Regulatory Complaints

You have the right to lodge a complaint with the supervisory authority:

  • Information Commissioner’s Office (ICO)
  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

14. Safeguarding and Disclosure

In line with our duty of care and legal obligations, we may need to share information without consent in situations involving:

  • Risk of harm to the individual or others
  • Safeguarding concerns
  • Prevention or detection of crime
  • Court orders or legal proceedings
  • Public health emergencies

We follow established safeguarding procedures and only share necessary information with appropriate authorities.


This Privacy Policy is designed to be transparent and accessible. If you need this information in an alternative format or have difficulty understanding any section, please contact us and we will be happy to help.