Privacy Policy

Steps Ahead Care & Support Ltd is a registered domiciliary care and support provider. To provide our services and run our business, we collect and manage personal information about individuals. In our capacity as a data controller, we are registered with the Information Commissioner’s Office.

We are committed to ensuring that your privacy is protected. This privacy policy is part of our commitment to process personal information fairly and lawfully. It explains your rights to control how we use your personal information.

Our Details

Steps Ahead Care & Support Ltd
6 Sandy Court, Ashleigh Way, Plymouth, PL7 5JX
Phone: 01752 547257
Email: admin@stepsaheadsupport.co.uk

Data Protection Officer
The data controller and processor is Miss Christine Holdsworth, who can be contacted via the above address and details.

Why We Collect and Process Information

We collect and process personal information for purposes including:

  • Service provision and development, including collaboration with other parties involved in care and rehabilitation

  • Business and finance management

  • Employment and HR administration

  • Informing recommendations for safe and effective care

  • Working effectively with others involved in the provision of care

  • Research and audit

  • Preparing statistics used for business development and decision-making

  • Keeping interested parties informed about our company and news

Information We Collect

We may collect:

  • Name, address, email address, phone number, date of birth

  • Family and next of kin / emergency contact details

  • Records of contact (calls, visits, meetings, etc.)

  • Education and training history (mainly staff and professionals working with us)

  • Employment records and pension details (for staff and contractors)

  • Financial details

  • Lifestyle and social circumstances

We may also collect special category information including:

  • Physical and mental health, disabilities, allergies, treatment and care

  • Records from health professionals, support workers, and relatives

  • Racial and ethnic origin

  • Sexual life

  • Religious or similar beliefs

  • Offences (including alleged offences), criminal proceedings and outcomes

  • Trade union membership

  • Employment tribunal applications, complaints, accidents and incident details

How Your Information is Collected

Depending on our relationship with you, data may be collected via:

  • Email, letters, telephone calls, meetings, reports

  • Company websites

  • Job applications (direct or via third-party platforms)

  • Referral

Legal Basis for Processing

Under the UK GDPR, our legal bases for processing include:

  • Meeting contractual obligations with clients

  • Meeting legal obligations in relation to employment, CQC regulation and safeguarding

  • Consent (for marketing or provision of information)

  • Legitimate interests (ours or a third party’s)

  • Protecting vital interests (yours or another person’s)

Specific Information for Clients

It is necessary for us to collect and process personal data to provide support services and meet our obligations under professional and regulatory standards.

  • Data is retained throughout our working relationship

  • After this, it is kept for 6 years (or 3 years after death) for adults

  • For children, data is held until their 26th birthday if services ended while under 18 (or 3 years after death if sooner)

Specific Information for Job Applicants

We use application details, supporting documents, references, and interview records to:

  • Identify and process applications

  • Verify suitability for roles (including DBS, Right to Work, and pre-employment checks)

  • Assess and decide on appointments

If successful, data becomes part of personnel records. If unsuccessful, data is kept for 6 months after the process ends before being destroyed.

How Information is Stored

We use encrypted cloud-based storage approved by the ICO. Information is managed in line with the Records Management Code of Practice.

Who Information is Shared With

We do not distribute, sell, or lease personal information to third parties unless required by law or with strict permission.

Data may be shared internally with authorised Steps Ahead staff to fulfil managerial, HR, accounts, and payroll duties. All staff are bound by confidentiality.

Security

We use highly encrypted systems and strict managerial procedures to safeguard data. If a breach occurs, a protocol is in place to contain, address, and report it.

Accessing Your Information

You may request details of personal information we hold about you under GDPR by writing to us at the above address.

Where you use our website, cookies collect log-in and visitor behaviour information. You can accept or decline cookies in your browser. Declining may limit website functionality.

Your Rights

Under data protection law, you have the right to:

  • Access your personal information

  • Rectify inaccurate or incomplete information

  • Request erasure of your data in certain circumstances

  • Restrict processing in certain circumstances

  • Object to processing in certain circumstances

  • Request data portability to another organisation or yourself

More details: ICO website

Opt-Out and Deletion

All marketing materials include an opt-out option. You may withdraw consent or request deletion from our files at any time by contacting: admin@stepsaheadsupport.co.uk

How to Complain

If you have concerns, please contact us first using the above details.

You can also contact the ICO:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk

Last Updated: 12 January 2026