This policy explains how Nyadowa Services Limited, trading as Nyadowa Care, uses personal information when you visit our website, contact us, apply to work with us or receive our home care services. It also explains your choices and how to raise a concern.
Who is responsible for your information
Nyadowa Services Limited is the data controller for the processing described here. Company number 12354328. Registered office: Earls Farmhouse, Earls Lane, South Mimms, Hertfordshire, EN6 3LT. Contact the Registered Manager about privacy by emailing info@nyadowa.com or calling 01707 659 099.
For general enquiries you can also use WhatsApp: Chat on WhatsApp. Do not send medical records, identification documents, bank details or other sensitive information through general website forms or WhatsApp. Please ask us to arrange a suitable way to share care information. These channels are not emergency services.
Information we use and where it comes from
Website enquiries may include your name, contact details, postcode, relationship to the person needing care, communication preferences and the information you choose to provide. A care assessment may require information about daily living, health, medication, risks, support needs, family contacts and preferences. Recruitment information may include employment history, qualifications, references, eligibility to work and legally required suitability checks.
We receive information directly from you and, where appropriate, from representatives, relatives, commissioners and health or social care professionals involved in your care. We check the authority of people acting on another person’s behalf. Website hosting, security and statistics services may process technical information such as IP addresses, browser details and pages requested. Cookie information is explained separately in our cookie policy.
Why we use information and our legal bases
We use enquiry information to respond and, where you are seeking your own care, take steps at your request before entering a contract. When a relative or representative contacts us, our legitimate interests include responding appropriately and arranging safe, suitable support while respecting the person’s rights.
We use information to assess, arrange and deliver agreed care, manage the service and communicate with authorised contacts. Our bases include contractual necessity, relevant legal obligations and legitimate interests in safe service management. Health and other special category information used for necessary health or social care is processed under Article 9(2)(h) UK GDPR and the relevant Data Protection Act 2018 condition, subject to duties of confidentiality. Safeguarding or emergency situations may require another applicable legal basis and special category condition; we record the justification.
We process recruitment information to consider applications, take steps towards employment and meet employment and care-sector obligations. Required criminal record checks are handled only with the necessary legal authority and safeguards. Optional electronic marketing relies on consent unless a lawful exception applies. You can unsubscribe at any time. We do not make care or recruitment decisions solely through automated processing that produces legal or similarly significant effects.
Who may receive information
Access is limited to people who need information for their role. Relevant recipients may include our authorised staff, IT and website providers, WordPress.com and Automattic services, email providers and our Oncare care management service. Where necessary and lawful, we share relevant information with health professionals, commissioners, councils, safeguarding teams, emergency services, CQC, professional advisers and other legally authorised recipients.
We must check service-provider contracts, confidentiality and security arrangements and only share the information needed for the purpose. We do not sell personal information. Opening external review, social media or WhatsApp links takes you to services that operate under their own privacy information. If information is transferred outside the UK, the transfer must use an applicable adequacy arrangement, appropriate safeguards or another lawful transfer route. Contact us for information about safeguards relevant to your data.
How long we keep information
Retention depends on the purpose and type of record. General enquiries are retained while the enquiry remains active and for a proportionate follow-up period, considering whether care is arranged, whether a dispute is reasonably anticipated and any legal requirement. Unsuccessful recruitment records are retained only for a proportionate recruitment and claims-handling period; keeping an application for future vacancies requires a separate justified basis and appropriate notice.
Care, safeguarding and complaints records are retained according to applicable legal, regulatory, commissioning and record-management requirements, including relevant limitation periods. Newsletter information is retained while the subscription remains active, with minimal suppression information where needed to honour an unsubscribe. We review retention, restrict records subject to a legal hold and delete or anonymise information when it is no longer needed. You can request the retention criteria or applicable schedule for your particular records.
Security and your choices
We use proportionate organisational and technical safeguards and must restrict access, train staff, manage suppliers and respond to suspected breaches. No internet service can be guaranteed completely secure. Where a breach requires notification, we follow the applicable reporting and communication requirements.
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information, object to processing based on legitimate interests and withdraw consent where we rely on it. These rights are not absolute; some information must be retained or used for legal or care-related reasons. We may need to verify identity or representative authority. We normally respond within one month, subject to lawful extensions or pauses, and explain any applicable exception. To exercise a right, use the privacy contact above.
Cookies and contact preferences
Our cookie policy describes cookies and similar technologies and the consent controls available on the website. Optional technologies that require consent must remain disabled until consent is given. You can change your choice through the website’s consent controls. Marketing permission is separate from permission to respond to an enquiry or provide care.
Concerns and changes
Please contact us first if you have a privacy concern. You can also complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. You do not have to complete our complaints process before approaching the ICO. We review this policy when our services, processing or legal requirements change, and explain material changes where required.
