Privacy policy

Last updated: 3 August 2026

1. About Bluebell Haven Care

Bluebell Haven Care Ltd is a company registered in England and Wales under company number 17348477.

In this Privacy Policy, “Bluebell Haven Care”, “Bluebell”, “we”, “us” and “our” refer to Bluebell Haven Care Ltd.

For most of the activities described in this Privacy Policy, Bluebell Haven Care is the data controller. This means that we decide why and how personal information is used.

In limited circumstances, particularly when delivering services under the direct written instructions of another organisation, we may act as a data processor. Where this applies, the organisation that instructed us will normally be the data controller and its own privacy notice may also apply.

Our data protection contact details are:

Bluebell Haven Care Ltd
128 City Road
London
EC1V 2NX
United Kingdom

Email: support@bluebellhavencare.co.uk
Email subject: Data Protection

2. Purpose of this Privacy Policy

This Privacy Policy explains how we collect, use, store, share and protect personal information when you:

  • visit or use the Bluebell Haven Care website;
  • complete a Home Support enquiry form;
  • enquire about a Personal Assistant introduction;
  • make a staffing or recruitment enquiry;
  • contact us by email, telephone, social media or through a website form;
  • use or consider using one of our services;
  • make an enquiry on behalf of another person;
  • refer or signpost someone to Bluebell Haven Care;
  • apply for a job, assignment, placement, Personal Assistant opportunity or training opportunity;
  • provide a reference;
  • work with us as an employee, worker, Personal Assistant, candidate, contractor or supplier;
  • represent a client organisation, public body, community organisation or referral partner;
  • make a payment, complaint, safeguarding report or information request; or
  • otherwise communicate or engage with Bluebell Haven Care.

We may provide additional privacy information to clients, candidates, workers, employees, Personal Assistants or organisations where we need to collect more detailed information. Any additional notice should be read alongside this Privacy Policy.

We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations where relevant.

3. What personal information we may collect

The information we collect depends on your relationship with Bluebell Haven Care.

Identity and contact information

This may include:

  • full name;
  • title;
  • date of birth where necessary;
  • postal address;
  • email address;
  • telephone number;
  • postcode;
  • preferred contact method;
  • emergency contact details;
  • details of an authorised representative;
  • proof of identity; and
  • communication or accessibility requirements.

Home Support and Personal Assistant enquiry information

This may include:

  • whether the enquiry is for you or another person;
  • the type of practical support being considered;
  • preferred days, times and start date;
  • routines, preferences, interests and goals;
  • location and service address;
  • communication preferences;
  • mobility or accessibility information;
  • information needed to assess whether the service is suitable;
  • details of a family member, representative or referrer;
  • notes of conversations, assessments and reviews; and
  • information about changes in circumstances or support requirements.

Our initial website enquiry forms are not intended for medical records, detailed health information, financial documents, identity documents or care plans. We ask people to provide only the minimum information needed for us to understand and respond to the initial enquiry.

Personal Assistant introduction information

This may include:

  • the type of Personal Assistant arrangement being sought;
  • preferred skills, experience, availability and working pattern;
  • agreed matching criteria;
  • candidate profiles and application information;
  • screening and interview information;
  • reference and background-check information;
  • introduction records;
  • feedback following an introduction; and
  • information needed to administer an agreed introduction service.

Staffing and organisational information

This may include:

  • organisation name and type;
  • business address and service location;
  • professional contact details;
  • job title and authority to make the enquiry;
  • staffing requirements;
  • job descriptions and person specifications;
  • required experience, qualifications, training and checks;
  • proposed shifts, working patterns and start dates;
  • number and type of workers required;
  • contractual and supplier-onboarding information;
  • feedback concerning an assignment or candidate; and
  • invoicing and payment information.

Organisations should not include service-user names, care plans, medical records, incident reports or other confidential service-user information in an initial staffing enquiry.

Candidate, worker and recruitment information

This may include:

  • application forms and curriculum vitae;
  • contact details;
  • employment and assignment history;
  • education, qualifications and training;
  • professional skills and experience;
  • availability and preferred working arrangements;
  • interview notes and assessment results;
  • identity and right-to-work information;
  • references and referee details;
  • driving licence and vehicle information where relevant;
  • Disclosure and Barring Service information where the role is legally eligible for a check;
  • information about restrictions, professional concerns or safeguarding matters;
  • payroll, tax, pension and bank information where applicable;
  • performance, supervision, training and disciplinary information;
  • health, disability and reasonable-adjustment information where necessary; and
  • equality-monitoring information where it is collected voluntarily.

Financial and transaction information

This may include:

  • payment and invoice details;
  • amounts paid or owed;
  • billing information;
  • bank details where needed to make or receive payment;
  • payment status;
  • refunds and cancellations;
  • financial correspondence; and
  • accounting and tax records.

Where a third-party payment provider is used, that provider may collect and process payment-card information directly. Bluebell Haven Care may receive confirmation of the transaction without receiving the complete card details.

Communications, concerns and complaints

This may include:

  • emails, letters and website messages;
  • notes of telephone conversations;
  • feedback and testimonials;
  • complaints and complaint outcomes;
  • safeguarding concerns;
  • incidents, accidents and risk information;
  • allegations, investigations and actions taken;
  • legal correspondence; and
  • information requests or data-protection complaints.

Website and technical information

When you use our website, we or our technology providers may collect:

  • Internet Protocol address;
  • browser and device type;
  • operating system;
  • approximate location derived from an Internet Protocol address;
  • pages visited;
  • date and time of visits;
  • referring website;
  • links and buttons selected;
  • cookie identifiers;
  • consent preferences;
  • form-submission information;
  • website security and error logs; and
  • information used to identify and prevent spam, fraud or automated activity.

Marketing and professional contact information

This may include:

  • marketing preferences;
  • newsletter or mailing-list status;
  • responses to campaigns;
  • event attendance;
  • publicly available professional contact details;
  • organisation, job title and business sector;
  • source of the contact details; and
  • records of requests not to receive further marketing.

Photographs, recordings and testimonials

Where relevant, we may collect photographs, video, audio, quotations, reviews or testimonials. We will explain the proposed use and obtain appropriate permission before using identifiable content for public marketing or promotional purposes.

4. Special category and criminal offence information

Some personal information receives additional protection under data protection law. This is known as special category data.

Because Bluebell Haven Care works in support, staffing and recruitment, information provided to us may sometimes reveal or concern:

  • physical or mental health;
  • disability;
  • racial or ethnic origin;
  • religious or philosophical beliefs;
  • sexual orientation;
  • trade union membership; or
  • other legally protected sensitive information.

We collect and use this information only where it is relevant, necessary and lawful.

We may also process criminal offence information, including information connected with:

  • Disclosure and Barring Service checks;
  • barred-list status;
  • criminal convictions or cautions;
  • allegations or investigations;
  • safeguarding concerns; or
  • restrictions relevant to a particular role.

We process criminal offence information only where the role or purpose justifies it and where UK law permits us to do so. We apply additional access, confidentiality, security and retention controls.

Please do not submit medical records, identity documents, detailed health information, care plans, financial documents or Disclosure and Barring Service certificates through a general website enquiry form unless we have specifically provided a suitable and secure method.

5. Where we obtain personal information

We may obtain information:

  • directly from you;
  • from a family member, representative or advocate who is authorised to act for you;
  • from a person making an enquiry on your behalf;
  • from a social worker, healthcare professional, local authority, NHS organisation, community organisation or other referrer;
  • from a client or hiring organisation;
  • from a candidate, worker, employee or Personal Assistant;
  • from referees, former employers, training providers or educational institutions;
  • from identity, right-to-work, qualification and background-check providers;
  • from the Disclosure and Barring Service where legally appropriate;
  • from professional bodies or regulators;
  • from recruitment platforms and job boards;
  • from publicly available professional sources, business directories or organisation websites;
  • from our website, cookies and analytics tools;
  • from Shopify and other technology providers;
  • from payment, accounting and communications providers; and
  • from public authorities, emergency services or safeguarding bodies where lawful and necessary.

Where someone provides us with information about another person, they should have appropriate authority or another lawful reason for doing so. They should provide only information that is relevant and necessary.

Where appropriate, we will provide this Privacy Policy or other relevant privacy information to the person concerned.

6. How and why we use personal information

We only use personal information where we have a lawful basis.

Responding to enquiries

We use personal information to:

  • identify and communicate with you;
  • understand your enquiry;
  • check service location and availability;
  • determine whether the enquiry is within our service scope;
  • arrange an introductory conversation;
  • provide information, proposed terms or a quotation;
  • respond to questions; and
  • take steps requested before entering into an agreement.

Our lawful basis will usually be:

  • taking steps at your request before entering into a contract;
  • performing a contract;
  • our legitimate interests in responding to enquiries and operating our services; or
  • compliance with a legal obligation where applicable.

Providing and managing Home Support

We may use information to:

  • understand practical support requirements;
  • assess whether we can safely and appropriately provide the requested service;
  • agree the support arrangement;
  • allocate an appropriate worker;
  • plan visits and communicate changes;
  • respect routines, choices and communication needs;
  • monitor service quality;
  • review changes in circumstances;
  • manage payments and records;
  • respond to concerns; and
  • protect the welfare and safety of clients and workers.

Our lawful basis will usually be:

  • taking steps before entering into a contract;
  • performing a contract;
  • compliance with legal obligations;
  • our legitimate interests in providing a safe, effective and person-centred service; or
  • vital interests in a genuine emergency.

Where health or other special category information is necessary, we will also identify an appropriate additional condition. Depending on the circumstances, this may include:

  • explicit consent;
  • the provision or management of health or social care where the legal requirements are met;
  • employment and social-protection obligations;
  • protecting vital interests where the person is unable to consent;
  • safeguarding children or individuals at risk;
  • establishing, exercising or defending legal claims; or
  • another applicable substantial-public-interest condition under UK law.

Personal Assistant introductions

We may use information to:

  • understand the proposed Personal Assistant role;
  • identify agreed matching criteria;
  • assess applications and candidate suitability;
  • carry out agreed screening;
  • communicate with candidates and individuals seeking a Personal Assistant;
  • prepare and share appropriate candidate profiles;
  • arrange interviews or introductions;
  • record decisions and feedback;
  • administer the introduction agreement; and
  • address safeguarding, complaints or contractual concerns.

Our lawful basis will usually be:

  • taking steps before entering into a contract;
  • performing a contract;
  • compliance with legal obligations; and
  • our legitimate interests in providing an effective, fair and safe introduction service.

We will explain to candidates when and with whom their profile or application information may be shared. We will not disclose more information than is reasonably necessary for the agreed introduction.

Staffing, recruitment and workforce services

We may use information to:

  • understand an organisation’s staffing requirement;
  • register and communicate with candidates and workers;
  • assess suitability for a role or assignment;
  • verify identity, right to work, employment history, qualifications and training;
  • obtain references;
  • conduct legally permitted background checks;
  • consider reasonable adjustments;
  • prepare candidate profiles;
  • introduce or supply candidates and workers;
  • manage assignments, attendance and performance;
  • administer payroll, invoices and payments;
  • comply with employment, tax, immigration, safeguarding and health-and-safety obligations;
  • investigate complaints or concerns; and
  • protect clients, workers, service users and the public.

Our lawful basis will usually be:

  • taking steps requested before entering into a contract;
  • performing an employment, worker, recruitment or staffing contract;
  • compliance with legal obligations; and
  • our legitimate interests in recruiting suitable people, operating our workforce and protecting the people and organisations involved.

For relevant special category information, additional conditions may include employment and social-protection obligations, occupational health where applicable, explicit consent for genuinely optional processing, safeguarding, legal claims or another condition permitted by law.

Criminal offence and Disclosure and Barring Service information will be processed only under an applicable condition in UK law and with the required safeguards.

Safeguarding, safety and emergencies

We may process and share information to:

  • identify and respond to a safeguarding concern;
  • protect a person from abuse, neglect, exploitation or serious harm;
  • respond to an accident or emergency;
  • contact an authorised representative or emergency contact;
  • make an appropriate safeguarding referral;
  • cooperate with local authorities, emergency services, healthcare professionals or law enforcement;
  • investigate an allegation; and
  • maintain appropriate safeguarding records.

The lawful basis may include legal obligation, legitimate interests, vital interests, substantial public interest, safeguarding conditions or legal claims, depending on the circumstances.

We will share only information that is relevant and necessary for the purpose.

Complaints, incidents and legal matters

We may use information to:

  • acknowledge, investigate and respond to complaints;
  • investigate incidents, accidents and allegations;
  • comply with insurance requirements;
  • obtain professional advice;
  • establish facts;
  • protect legal rights;
  • respond to court orders or lawful requests;
  • establish, exercise or defend legal claims; and
  • comply with legal and regulatory obligations.

The lawful basis may include legal obligation, legitimate interests, contract and legal claims.

Payments, accounting and business administration

We may use information to:

  • issue quotations and invoices;
  • collect or make payments;
  • administer refunds or cancellations;
  • maintain accounting records;
  • manage contracts and suppliers;
  • prevent financial crime or fraud;
  • comply with tax and company-law requirements; and
  • respond to audits or professional advisers.

The lawful basis will usually be contract, legal obligation or our legitimate interests in managing our business and finances.

Website operation, security and improvement

We may use technical information to:

  • operate and display the website;
  • maintain website functionality;
  • remember privacy and accessibility choices;
  • protect forms and systems;
  • detect spam, bots, fraud and malicious activity;
  • investigate faults and security incidents;
  • understand general website performance;
  • measure which pages and services are useful; and
  • improve the accessibility, content and usability of the website.

Essential website and security processing is generally based on our legitimate interests in providing and protecting the website, together with any applicable legal obligations.

Where consent is legally required for non-essential cookies, analytics or advertising technology, we will ask for consent through the website’s cookie or privacy controls.

Marketing and professional communications

We may use contact information to:

  • send requested information;
  • provide service updates;
  • send newsletters or event information;
  • communicate with existing professional contacts;
  • introduce relevant Bluebell Haven Care services to organisations;
  • measure responses to communications; and
  • maintain a record of marketing preferences.

We will rely on consent where consent is legally required.

For proportionate business-to-business communications sent to relevant professional or corporate contacts, we may rely on our legitimate interests where permitted by law. Every recipient may object or opt out.

We do not use information supplied through Home Support, safeguarding or recruitment forms to create targeted advertising audiences without a separate, valid and clearly explained lawful basis.

Our legitimate interests

Where we rely on legitimate interests, those interests may include:

  • operating and improving our services;
  • responding to people who contact us;
  • managing client, candidate, worker and professional relationships;
  • identifying suitable people for roles or introductions;
  • maintaining quality and continuity;
  • protecting people from harm;
  • preventing fraud, spam and misuse;
  • protecting our website and systems;
  • maintaining accurate business records;
  • obtaining professional advice;
  • managing complaints and legal claims; and
  • conducting proportionate business-to-business outreach.

We consider the impact on the person concerned and do not rely on legitimate interests where their rights and interests override ours.

7. When providing information is required

Some information is necessary so that we can:

  • respond to an enquiry;
  • assess whether we can offer a service;
  • enter into or perform an agreement;
  • verify a candidate’s suitability;
  • comply with employment, tax, immigration, safeguarding or other legal obligations;
  • make or receive payments; or
  • protect people from harm.

Required website fields are normally marked with an asterisk.

Where necessary information is not provided, we may be unable to respond fully, offer a service, proceed with an introduction, progress an application or fulfil an agreement.

Confirming that you have read this Privacy Policy does not replace any specific consent that we may need for a separate activity.

8. Who we may share personal information with

Where lawful and necessary, we may share personal information with:

  • authorised Bluebell Haven Care directors, employees, workers and contractors;
  • a Personal Assistant, candidate, client, family or authorised representative involved in an agreed introduction;
  • client and hiring organisations considering or receiving a candidate or worker;
  • workers who need relevant information to perform an agreed service safely;
  • referees and previous employers;
  • identity, right-to-work, qualification and background-check providers;
  • the Disclosure and Barring Service where legally appropriate;
  • training, payroll, pension and occupational-health providers;
  • payment processors, banks, accountants and bookkeepers;
  • insurers, solicitors and other professional advisers;
  • website, email, cloud-storage, telephone, form and information-technology providers;
  • Shopify, which hosts and supports our website;
  • website analytics and advertising providers where enabled and lawfully used;
  • hCaptcha, which helps protect our forms against spam and automated abuse;
  • local authorities, NHS organisations, social workers, healthcare professionals and other appropriate referral or safeguarding professionals;
  • emergency services and law-enforcement organisations;
  • courts, regulators and government bodies;
  • prospective purchasers, investors or professional advisers involved in a genuine corporate transaction; and
  • another organisation where you ask us to share information or where we have another lawful reason.

Access is limited to information reasonably required for the relevant purpose.

We do not sell or rent personal information.

9. Shopify and website providers

Shopify Network Intelligence is currently enabled on our website. Shopify may use information about visitors’ interactions with our website together with information about their interactions with Shopify and other Shopify merchants to provide Enhanced Services. These services may include personalisation, analytics, fraud prevention, service improvement and advertising. Information may be shared with Shopify and relevant third-party providers, including providers located outside the United Kingdom. Where consent is legally required for non-essential cookies, personalised advertising or similar technologies, this processing will be subject to the visitor’s consent choices. Visitors can manage their cookie choices through our website’s Cookie Preferences controls and may exercise certain rights directly through the Shopify Privacy Portal. We do not use information submitted through our Home Support, Personal Assistant or staffing enquiry forms for targeted advertising without a separate, appropriate lawful basis and any consent required by law.

Further information is available in the Shopify Consumer Privacy Policy. People may also use the Shopify Privacy Portal to manage certain information processed by Shopify.

10. hCaptcha

We use hCaptcha to help protect website forms and systems against spam, fraud, bots and automated misuse.

To determine whether an interaction meets website security requirements, hCaptcha may process technical and interaction information such as:

  • Internet Protocol address;
  • browser and device information;
  • date and time;
  • website interaction information;
  • challenge responses; and
  • information used to distinguish a genuine user from automated activity.

Our lawful basis for using hCaptcha is our legitimate interest in protecting the website, personal information and users from spam, fraud and malicious activity.

Information may be processed outside the United Kingdom, subject to appropriate transfer arrangements.

Further information is available in the hCaptcha Privacy Policy and hCaptcha Terms of Service.

11. Cookies, analytics and advertising technology

Cookies are small files or similar technologies placed on a device when a website is used.

Our website may use:

Essential cookies

These are required for security, privacy preferences, form operation, website navigation and other core functionality.

Some essential cookies cannot be switched off through the website because the website may not function properly without them.

Functional cookies

These may remember choices such as accessibility, language or other website preferences.

Analytics cookies

Where enabled, analytics tools such as Shopify Analytics or Google Analytics may help us understand:

  • visitor numbers;
  • pages viewed;
  • general visitor journeys;
  • website errors;
  • how people arrived at the website; and
  • which website content is useful.

Advertising cookies and pixels

Where enabled, Google Ads or other advertising services may help us:

  • measure whether an advertisement led to a website visit or enquiry;
  • avoid repeatedly showing the same advertisement;
  • understand campaign performance; or
  • show relevant service advertising.

We will request consent before using non-essential analytics or advertising cookies where required by law.

You may accept, reject or manage non-essential cookies through the website’s cookie banner or privacy-preference controls. You may change or withdraw your choice at any time through the available privacy controls.

You can also change browser settings, although blocking some cookies may affect website functionality.

12. International transfers

Some technology, website, communications, analytics, security or recruitment providers may process information in countries outside the United Kingdom.

Where personal information is transferred outside the United Kingdom, we will take appropriate steps to protect it. Depending on the destination and provider, these may include:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to approved Standard Contractual Clauses;
  • an approved data-privacy framework;
  • contractual, organisational and technical safeguards; or
  • another transfer mechanism permitted by UK law.

You may contact us for further information about the safeguards relevant to a particular transfer.

13. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, safeguarding, accounting, insurance and contractual requirements.

Our usual retention periods are:

  • General or service enquiries that do not proceed: normally up to 12 months after the last meaningful contact.
  • Client, Home Support, Personal Assistant introduction and staffing records: normally up to 6 years after the agreement, service or relationship ends.
  • Contracts, complaints and incident records: normally up to 6 years after closure, unless a longer period is justified by safeguarding risk, insurance requirements, an ongoing dispute or legal proceedings.
  • Safeguarding records: retained according to the seriousness of the concern, continuing risk, applicable guidance, legal requirements and the interests of the person concerned. Some records may need to be kept longer than ordinary service records.
  • Financial, invoice, tax and accounting information: normally 6 years after the end of the relevant financial period, or longer where legally required.
  • Unsuccessful applicant or candidate records: normally up to 6 months after the recruitment decision.
  • Candidate talent-pool records: normally up to 12 months where the person has clearly agreed to remain available for future roles.
  • Employee and worker records: normally up to 6 years after employment or engagement ends, subject to shorter or longer statutory periods for particular records.
  • Disclosure and Barring Service certificate copies: normally no longer than 6 months after the relevant decision unless there is a lawful and documented reason for longer retention. A limited record that a check was completed may be kept for longer where permitted.
  • Marketing records: until consent is withdrawn or the person objects. We may retain a minimal suppression record so that we can respect a request not to make further contact.
  • Website logs, cookies and analytics information: according to the purpose, provider settings, consent choices and the shortest period reasonably necessary for security or analysis.

Information may be deleted earlier where it is no longer needed. It may be retained longer where necessary for safeguarding, legal claims, court proceedings, fraud prevention, regulatory requirements or another lawful reason.

14. How we protect personal information

We use proportionate technical and organisational measures designed to protect personal information. These may include:

  • access controls;
  • password protection and multi-factor authentication;
  • secure cloud and information-technology providers;
  • encryption where appropriate;
  • role-based access;
  • confidentiality obligations;
  • recruitment and identity checks;
  • staff training;
  • secure disposal;
  • backup and recovery arrangements;
  • incident and breach procedures;
  • supplier due diligence; and
  • periodic review of information access and retention.

Access to sensitive information is limited to people who need it for an authorised purpose.

No website, email service or information system can be guaranteed to be completely secure. Please do not send highly sensitive information through a general email or website form unless we have confirmed that this is appropriate.

If we identify a personal-data breach, we will assess it and make any legally required notifications.

15. Your data-protection rights

Depending on the circumstances and lawful basis, you may have the right to:

  • be informed about how your information is used;
  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase information where the legal conditions are met;
  • ask us to restrict the use of information;
  • receive certain information in a portable format;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing;
  • withdraw consent where we rely on consent;
  • ask for information about international-transfer safeguards;
  • challenge certain solely automated decisions; and
  • complain about the way we have handled personal information.

These rights are not absolute. In some circumstances, we may need to continue retaining or using information because of a legal obligation, safeguarding requirement, contractual need or legal claim.

Withdrawing consent does not affect processing that was lawful before the consent was withdrawn. It also does not prevent us from using information under a different lawful basis where that basis genuinely applies.

To exercise a right, email support@bluebellhavencare.co.uk with the subject Data Protection Request.

Please explain:

  • your name;
  • the right you wish to exercise;
  • the information or service concerned; and
  • any information that may help us locate the relevant records.

We may ask for reasonable evidence of identity. Where someone acts on behalf of another person, we may also request evidence of their authority.

We will respond within the time required by applicable data protection law.

16. Automated decision-making

Bluebell Haven Care does not currently make decisions about clients, candidates, workers or website users solely through automated processing where the decision would have a legal or similarly significant effect.

Technology may assist with administration, website security, filtering, matching or analysis, but material decisions are subject to appropriate human consideration.

We will update this Privacy Policy and provide any additional required information before introducing relevant solely automated decision-making.

17. Marketing choices

You may ask us to stop sending marketing communications at any time by:

We will stop marketing communications as soon as reasonably practicable.

We may still send non-marketing communications that are necessary for an enquiry, contract, service, application, assignment, payment, safeguarding concern, complaint or legal obligation.

18. Information about children

Our website and current services are intended primarily for adults, families acting for adults, professionals and organisations.

We do not knowingly invite children to submit general enquiry or recruitment forms independently.

Information concerning a child may occasionally be received where:

  • a parent or guardian contacts us;
  • it is relevant to a family or representative arrangement;
  • a safeguarding concern is raised;
  • a legal obligation applies; or
  • the information is otherwise necessary and lawful.

Where we process information about a child, we will take account of the child’s age, understanding, interests, safeguarding needs and the authority of the person providing the information.

A parent, guardian or appropriately authorised person may contact us with concerns about information relating to a child.

19. Third-party websites and social media

Our website may contain links to third-party websites, directories or social-media platforms.

Those organisations control their own information-handling practices. Their privacy policies should be reviewed before providing information to them.

Information posted publicly on social media may be visible to other users. Please do not publish confidential support, health, safeguarding, employment or service-user information on Bluebell Haven Care’s public social-media pages.

20. Data-protection complaints

You may raise a concern or complaint about how Bluebell Haven Care has collected, used, shared, stored or protected personal information.

Please contact:

Email: support@bluebellhavencare.co.uk
Email subject: Data Protection Complaint

Please explain:

  • your name and contact details;
  • what happened;
  • the information or activity concerned;
  • when the issue occurred;
  • what outcome you are seeking; and
  • any relevant supporting information.

We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it and communicate the outcome without undue delay.

We may contact you for clarification or information needed to investigate the complaint fairly.

You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s independent data-protection regulator. We would appreciate the opportunity to consider and address your concern first, but this does not affect your right to contact the Information Commissioner’s Office.

The Information Commissioner’s Office helpline is 0303 123 1113.

21. Changes to this Privacy Policy

We may update this Privacy Policy when:

  • our services change;
  • website features, cookies or technology providers change;
  • we introduce new forms or platforms;
  • our information-handling practices change;
  • legal or regulatory requirements change; or
  • clarification is needed.

The latest version will be published on our website with an updated date.

Where a change is significant and affects information already held, we will take reasonable steps to provide additional notice where required.

22. Contact us

For questions, rights requests or complaints concerning personal information, contact:

Bluebell Haven Care Ltd
Company number: 17348477

128 City Road
London
EC1V 2NX
United Kingdom

Email: support@bluebellhavencare.co.uk
Email subject: Data Protection