Privacy Policy

CARE ELEVATION – Privacy Policy


Last updated: 21 August 2026


CARE ELEVATION respects your privacy and is committed to protecting personal information handled through this website and in connection with its consultancy services.


This Privacy Policy explains how CARE ELEVATION collects, uses, stores and protects personal information and explains your rights under applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. About CARE ELEVATION


CARE ELEVATION is an independent quality, compliance and consultancy service supporting organisations operating within the UK adult social care sector.


For the purposes of UK data protection law, CARE ELEVATION is the data controller where it determines the purposes and means by which personal information is processed.


In some consultancy engagements, CARE ELEVATION may process personal information on behalf of a client. Where CARE ELEVATION acts as a data processor, the handling of that information will also be governed by the applicable consultancy agreement and any appropriate data processing arrangements.


2. Personal Information We May Collect


Depending on how you interact with CARE ELEVATION, we may collect and process information including:

  • your name;
  • email address;
  • telephone number;
  • organisation or business details;
  • information provided through website contact or enquiry forms;
  • information provided when arranging or attending a discovery call;
  • correspondence and communications with CARE ELEVATION;
  • information required to prepare quotations, proposals, invoices or consultancy agreements;
  • information supplied in connection with commissioned consultancy services; and
  • technical or website usage information where collected through necessary website technologies or services.

CARE ELEVATION does not currently process card payment details through this website. Payments for consultancy services are arranged separately, for example by invoice and bank transfer.


3. Information Provided During Consultancy Work


The nature of adult social care consultancy means that clients may occasionally provide documents or information containing personal information relating to employees, workers, service users or other individuals.


Clients should only provide personal information that is reasonably necessary for the agreed consultancy purpose and should anonymise or redact identifiable information where appropriate.


Please do not submit confidential service-user records, health information or other sensitive personal information through the general website contact form unless specifically requested and an appropriate method of transfer has been agreed.


Where CARE ELEVATION processes personal information on behalf of a client as part of commissioned consultancy work, that information will be handled in accordance with applicable data protection requirements and the relevant contractual arrangements.


4. How We Collect Personal Information


We may receive personal information:

  • directly from you when you contact us;
  • when you complete a website enquiry form;
  • when you book a discovery call;
  • through email, telephone or other business correspondence;
  • when you request or engage consultancy services;
  • from an organisation or authorised representative engaging CARE ELEVATION; and
  • through documents and information supplied during commissioned consultancy work.

We may also receive limited technical information through the operation and security of the website and its underlying service providers.


5. How We Use Personal Information


CARE ELEVATION may use personal information to:

  • respond to enquiries and communications;
  • arrange and manage discovery calls;
  • assess prospective consultancy requirements;
  • prepare quotations, proposals and scopes of work;
  • enter into and administer consultancy engagements;
  • deliver commissioned consultancy services;
  • communicate with clients and prospective clients;
  • maintain appropriate business, financial and administrative records;
  • issue and administer invoices and payments;
  • protect the security and integrity of the website and business systems;
  • establish, exercise or defend legal rights where necessary; and
  • meet applicable legal, regulatory, tax and accounting obligations.

CARE ELEVATION will not use personal information for purposes that are incompatible with those for which it was collected unless permitted or required by law.


6. Lawful Bases for Processing


Under UK data protection law, CARE ELEVATION must have an appropriate lawful basis for processing personal information.


Depending on the circumstances, we may rely upon:


Contract – where processing is necessary to take steps at your request before entering into a contract or to perform a consultancy agreement.


Legitimate interests – where processing is reasonably necessary for the operation and administration of CARE ELEVATION, responding to business enquiries, maintaining client relationships, protecting business systems or establishing and protecting legal rights, provided those interests are not overridden by your rights and interests.


Legal obligation – where processing is necessary to comply with an obligation imposed by law, including relevant financial, taxation or regulatory requirements.


Consent – where consent is the appropriate lawful basis and has been freely provided for a specific purpose. Where we rely on consent, you may withdraw it at any time.


The lawful basis used will depend upon the purpose and circumstances of the particular processing activity.


Further information is available in the ICO guidance on lawful basis.


7. Special Category and Sensitive Information


CARE ELEVATION does not seek to collect special category personal information through its general website enquiry facilities.


However, information of this nature may occasionally be contained within documentation legitimately provided during commissioned adult social care consultancy work.


Where CARE ELEVATION needs to process special category personal information, it will only do so where there is an appropriate lawful basis and an applicable condition under UK data protection law, and where the processing is necessary and proportionate.


Where possible and appropriate, clients should anonymise or redact personal information before providing documentation for review.


8. Sharing Personal Information


CARE ELEVATION does not sell personal information.


Personal information may be shared where reasonably necessary with trusted organisations or service providers supporting the operation of the business, such as:

  • website hosting and website service providers;
  • email and communications providers;
  • IT, cloud storage or administrative service providers;
  • professional advisers, where appropriate;
  • financial or accounting service providers; and
  • regulators, public authorities, courts or other parties where disclosure is required or permitted by law.

Where third parties process personal information on behalf of CARE ELEVATION, reasonable steps will be taken to ensure appropriate data protection and confidentiality arrangements apply.


9. International Data Transfers


Some technology, website, email, cloud or other service providers may process or store information outside the United Kingdom.


Where personal information is subject to a restricted international transfer, CARE ELEVATION will take reasonable steps to ensure that an appropriate mechanism or safeguard required by UK data protection law is in place.


10. How Long We Keep Personal Information


CARE ELEVATION retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including the provision of consultancy services and any applicable legal, regulatory, accounting, tax, contractual or dispute-resolution requirements.


Retention periods may therefore vary depending on the nature of the information and the purpose for which it is held.


When determining an appropriate retention period, CARE ELEVATION will consider factors including:

  • the nature and sensitivity of the information;
  • the purpose for which it is required;
  • the duration of any client or consultancy relationship;
  • applicable legal or regulatory requirements; and
  • whether the information may reasonably be required to establish, exercise or defend legal rights.

Information that is no longer reasonably required will be securely deleted, destroyed or anonymised where appropriate.


This approach reflects the ICO's storage-limitation guidance: there is no single UK GDPR retention period applicable to all personal information; organisations must determine and be able to justify appropriate retention periods.

11. Information Security


CARE ELEVATION takes reasonable organisational and technical measures to protect personal information against unauthorised access, alteration, disclosure, accidental loss or misuse.


Access to personal information is limited to circumstances where it is reasonably required for legitimate business or consultancy purposes.


No method of electronic transmission or storage can be guaranteed to be completely secure, but reasonable measures will be maintained having regard to the nature of the information processed.


12. Cookies and Website Technologies


This website may use cookies or similar technologies that are necessary for the website to operate correctly and securely.


Additional analytics, advertising or marketing technologies may be introduced in the future. Where required by applicable law, appropriate information and consent mechanisms will be provided before non-essential technologies are used.


Further information may also be provided through the website's Cookie Consent settings or cookie information.


13. Marketing Communications


CARE ELEVATION will not add individuals to marketing communications solely because they have submitted an enquiry or booked a discovery call.


Where CARE ELEVATION introduces newsletters or other direct electronic marketing, personal information will be used for such purposes only where there is an appropriate lawful basis and in accordance with applicable data protection and electronic marketing requirements.


Where consent is relied upon, it may be withdrawn at any time.


14. Your Data Protection Rights


Depending on the circumstances and the lawful basis relied upon, UK data protection law provides individuals with rights relating to their personal information.


These may include:

  • the right to be informed about how your information is used;
  • the right to request access to your personal information;
  • the right to request correction of inaccurate or incomplete information;
  • the right to request deletion of personal information in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing;
  • the right to data portability where applicable; and
  • the right to withdraw consent at any time where processing is based on consent.

These rights are not absolute and their application may depend upon the circumstances and the lawful basis for processing.


To exercise a data protection right, please contact CARE ELEVATION using the details below.


The ICO confirms that the rights available can vary depending on the lawful basis for processing, which is why the wording above appropriately says that the rights apply depending on the circumstances.


15. Automated Decision-Making


CARE ELEVATION does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.


16. Third-Party Websites and Services


This website may contain links to third-party websites or use services supplied by third parties.


CARE ELEVATION is not responsible for the privacy practices of independent third-party websites. You should review the relevant privacy information provided by those organisations when using their services.


17. Changes to This Privacy Policy


CARE ELEVATION may update this Privacy Policy periodically to reflect changes in its services, website functionality, business practices or applicable legal and regulatory requirements.


The latest version published on this website will apply from the date shown at the top of this Privacy Policy.


18. Questions, Concerns and Complaints


If you have a question or concern about how CARE ELEVATION handles your personal information, or wish to exercise a data protection right, please contact:



CARE ELEVATION


Email: emilyn@careelevation.org


CARE ELEVATION will seek to address data protection concerns appropriately.


You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.


Information about making a complaint is available from the Information Commissioner's Office.