Care Circle Ltd information
Privacy Notice
How Care Circle Ltd collects, uses and protects information submitted through this website.
Who we are
Care Circle Ltd is responsible for the personal information submitted through this website. Our registered office is Unit 4 Willie Snaith Road, Newmarket, England, CB8 7SG. Our data-protection lead is Dilna J P and our ICO registration number is ZB616434.
Information we collect
Care Circle Ltd asks for only the information needed to respond to an enquiry, referral, staffing request or training enquiry.
- Contact and organisation details
- Broad care, referral, staffing or training requirements
- Consent and submission records
- Technical information needed for security and fraud prevention
How information is used
Information is used to route and respond to requests, take steps requested before an agreement, maintain appropriate records, protect the service and meet legal or regulatory responsibilities. The lawful basis depends on the purpose and may include steps connected with a contract, legitimate interests, legal obligation, vital interests or consent where consent is specifically required. Information is not used for unrelated marketing without a lawful basis.
Protecting enquiry forms
When online verification is enabled, Cloudflare Turnstile processes technical browser and connection information to help detect automated abuse. Enquiry text and contact fields are not sent to Cloudflare by our verification request. We use verification outcomes, short-lived security records and submission limits to protect the enquiry service.
Sensitive information
Public forms should not be used for detailed medical records or unnecessary identifiable health information. Secure document transfer is arranged after initial contact when needed.
- Do not send emergency information through a website form
- Do not send detailed records by unsecured email
- Professional referrers must have lawful authority to share information
Website retention
An enquiry that does not become an operational relationship is reviewed no later than 12 months after the last meaningful contact. If an enquiry proceeds, the website copy is deleted within 90 days after transfer to the approved operational system has been verified. Website consent evidence follows its parent enquiry.
- Form-abuse and replay-protection records: 24 hours
- Successful email-delivery outbox records: 90 days
- Failed or dead outbox records: 180 days, unless a documented hold applies
- Identifying web server and security logs: 30 days, unless needed for an active investigation
- Google Analytics 4 event-level data: 14 months
Exceptions and operational records
A documented legal, safeguarding, complaint, insurance, litigation or public-inquiry hold may pause routine deletion for a defined reason and review period. Care, clinical, workforce, finance and IrisVault records are not covered by this website schedule and follow their own approved requirements.
Your rights and contact
You may ask about access, correction, deletion, restriction, objection or portability where the law provides these rights. Use the website contact route or write to the registered office, quoting ‘Data protection’, so the request can be handled securely. You may also raise a concern with the Information Commissioner’s Office.
