Privacy notice

Last updated: 16/10/2026

This notice explains how Pure Hearts Support Services Ltd collects, uses and protects personal information about the people we support, their families, our staff, job applicants and visitors to this website.

Who we are

Pure Hearts Support Services Ltd is the data controller for the information described in this notice. We are registered in England and Wales, company no. 17375249, registered office 31 Kingsway, Huby, Leeds, LS17 0AL. We are registered with the Information Commissioner's Office (ICO), registration no. ZC211777.

For any question about your information, contact: Darrell Ward, admin@purehearts-support.co.uk

The information we collect

People we support: name, address, date of birth, contact details, next of kin, health and medical information, care needs and plans, medication information, visit records and billing details.

Families and representatives: name, relationship and contact details.

Staff: contact details, employment and pay records, training records, right-to-work checks, DBS check outcomes, and health information needed to support you at work.

Job applicants: the details in your application form, including anything you submit through our online starter form and any documents you upload (such as ID, right-to-work evidence, proof of address, your CV and certificates), references and interview notes.

Website visitors and enquiries: the details you give us when you call, email or fill in a form.

Why we use it and our legal basis

To plan and provide safe care: necessary to perform our contract with you (UK GDPR Article 6(1)(b)) and to meet our legal duties (Article 6(1)(c)). Health information is used for the provision of health and social care (Article 9(2)(h)).

To employ staff: necessary for the employment contract and our legal duties as an employer (Articles 6(1)(b) and (c), and Article 9(2)(b) for health information).

DBS checks: required by law for care roles. We record the certificate number, date and outcome only, under the Data Protection Act 2018, Schedule 1.

To contact family members in an emergency and keep them informed: our legitimate interest in providing safe care (Article 6(1)(f)), or your consent where needed.

To answer enquiries: to take steps before entering a contract with you, or our legitimate interest in responding (Articles 6(1)(b) and (f)).

Who we share it with

Only when needed, and only what is needed: health professionals involved in your care (such as your GP or district nurses), social services, the Care Quality Commission, HMRC and our accountant, and the police or other authorities where the law requires it. For job applicants, we also contact your referees and previous employers, and use the Disclosure and Barring Service and the Home Office right-to-work service.

We use trusted service providers who store data for us under contract, including our care management software (The Access Group), email and document storage (Microsoft 365, where online job applications are stored) and our website host. They may only use the data to provide their service to us.

We never sell your information.

How long we keep it

Care records: 8 years after care ends. Staff records: 6 years after employment ends. Unsuccessful job applications: 6 months. Enquiries that don't lead to care: 12 months. Financial records: 6 years plus the current year.

How we keep it safe

Care records are kept in secure care management software with individual logins. Staff are trained in data protection every year, devices are password-protected, and paper records are stored securely. We complete the NHS Data Security and Protection Toolkit.

Your rights

You have the right to: access the information we hold about you; have it corrected; ask for it to be deleted or restricted (where the law allows); object to how we use it; and ask for it to be transferred. To use any of these rights, contact us using the details above. We will reply within one month.

Cookies

Our website does not use advertising or tracking cookies and does not collect visitor statistics. Your browser always stores your cookie choice so the notice doesn't appear on every page. If you switch on "Remember my chat details" (or choose Accept all), your browser also keeps your name, contact details and recent chat messages on your device so you don't have to retype them. You can change this at any time using the Cookie settings link at the bottom of each page. Messages you send through the chat or the enquiry form are used only to reply to you. Like most websites, our web server keeps short technical logs (IP address, page requested and browser type) to keep the site secure and working.

Here is everything the website stores, grouped the same way as in the cookie settings. Our hosting security provider, Cloudflare, may also set a short-lived security cookie to protect the site from automated attacks.

Complaints

If you are unhappy with how we have used your information, please contact us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.