Privacy Policy

Aurora Care AL Ltd is the data controller for the information described on this page. That means we decide how and why it is used, and we are responsible for looking after it.

• Company name: Aurora Care AL Ltd
• Registered in England and Wales, company number: 16437779
• Registered office: The Linney, Fiddleford, Sturminster Newton, Dorset, England, DT10 2BX
• Data protection contact: Kirsty Sellick, Company Director
• Email: auroracare284@gmail.com
• Phone: 07786 438301

Whether you call, email, use our enquiry form, or complete a form on one of our Facebook or Instagram adverts, we usually collect:

• Your name and the name of the person you are enquiring about
• Your phone number and email address
• Your postcode or general area, so we can tell you whether we cover it
• The best time to call you
• Anything you choose to tell us about the situation and the support you are looking for

You do not have to tell us anything about anyone's health in order to make an enquiry. If you do choose to, we treat it as described in section 5.

If you go ahead with support, we hold considerably more, because we cannot deliver it safely without it:

• Contact details, address and key-safe or access arrangements
• Date of birth
• Details of your GP, district nurse and any other professionals involved
• Next of kin and emergency contacts
• Health information, mobility, dietary needs and anything else relevant to the support we provide
• The support plan itself, plus visit notes and risk assessments
• Any funding arrangements, invoices and payment records
• Records of complaints, incidents or safeguarding concerns

We sometimes advertise on Facebook and Instagram. If you complete an enquiry form inside one of those adverts, Meta Platforms passes us the details you entered, and we use them exactly as described in this policy — to call you back about your enquiry and nothing else.

Meta also collects and uses information about you in its own right as a separate data controller, including how you interact with the advert. That use is governed by Meta's own privacy policy, not this one. You can read it at facebook.com/privacy/policy and adjust your ad settings in your Facebook or Instagram account.

We do not sell or share enquiry details with any other organisation for marketing purposes.

Information about someone's health, care needs or disability is treated as a "special category" under data protection law and given extra protection.

Where we handle it, we rely on Article 9(2)(h) of the UK GDPR — the provision of health and social care and the management of care services — together with Schedule 1 of the Data Protection Act 2018. Where we handle information for safeguarding purposes we rely on the safeguarding condition in that same Schedule. In an emergency where someone's life is at risk, we may rely on protecting their vital interests.

Everyone at Aurora Care works under a duty of confidentiality. Records are only accessible to the people who need them to do their job.

We share only what is necessary, and only with:

• Healthcare professionals involved in your care, such as your GP, district nurses, pharmacists, hospital teams and therapists
• Your local authority or NHS body, where they are involved in arranging or funding your support
• Local authority safeguarding teams, the police or emergency services, where we have a concern about someone's safety
• Family members and representatives, where you have agreed to it or where someone holds legal authority such as a Lasting Power of Attorney
• Our service providers, including our scheduling and records software, IT support, accountants and insurers, all of whom are bound by contract to protect your information
• Regulators and public bodies, where we are required by law to provide information

We do not sell your information. We do not share it with other care providers or lead generation companies.

Your information is stored on servers within the UK or European Economic Area wherever possible.

Some of our suppliers, including Meta, may process information outside the UK. Where that happens we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards.

Under UK data protection law you have the right to:

• Be told how your information is used, which is what this page is for
• Access a copy of the information we hold about you
• Correct anything inaccurate or incomplete
• Ask us to delete information, though we cannot delete records we are legally required to keep
• Restrict how we use your information while a concern is being resolved
• Object to us using your information where we rely on legitimate interests
• Withdraw consent at any time, where consent is what we relied on
• Portability, meaning receiving certain information in a reusable electronic format

To use any of these rights, contact us using the details in section 13. We will respond within one month. There is no charge in ordinary circumstances.

If you are asking on behalf of someone else, we will need to confirm you have the authority to do so.

This website uses a small number of cookies that are strictly necessary for it to work properly, such as remembering your preferences during a visit. These do not require your consent and do not identify you personally.

We do not use advertising or analytics cookies on this website. You can block or delete cookies through your browser settings at any time, though parts of the site may not work as well.

We take the security of your information seriously. We use access controls so staff only see what they need, secure and password-protected systems, encrypted devices, and staff training on confidentiality and data protection. Paper records, where we hold any, are kept locked away.

If a data breach occurs that is likely to put someone at risk, we will report it to the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.