Privacy policy

Last reviewed: 8 September 2026

Who we are

Grow Care Agency Limited ("we", "us") is the data controller for the personal information described in this notice. Our registered address is6 Humble Walk, Ebbsfleet Valley, Kent,DA10 1DR. You can contact us about privacy by email at admin@growcareagency.co.uk or by phone on 07412 556546.

The information we collect

• People we care for. Contact and identity details, next of kin and emergency contacts, care needs assessments, care plans, daily notes, medication records, and information about your health, disabilities and wellbeing. Some of this is special category (health) data.
• Family members and representatives. Names, relationship, contact details, and any information you give us when arranging or discussing care.
• Enquiries. The details you provide when you call, email or send an enquiry through this website.
• Carers and job applicants. Application details, right to work, references, DBS checks, training and qualifications, and employment records. Applications submitted through our online form are processed by Google Forms on our behalf.
• Website visitors. This site is a set of static pages. It does not run advertising or third-party analytics trackers. Standard server logs (IP address, page requested, timestamp) are kept by our hosting provider for security and troubleshooting.

Why we use it, and our lawful basis

• To provide and manage care - performance of our contract with you, and our legitimate interests in running the service. For health data we rely on the provision of health and social care (UK GDPR Article 9(2)(h)), and on protecting someone's vital interests in an emergency.
• To respond to enquiries - our legitimate interests in answering people who contact us, and taking steps to enter into a contract.
• To recruit and employ carers - taking steps to enter into a contract, our legal obligations (safer recruitment, right to work), and our legitimate interests in safeguarding.
• To meet legal and regulatory duties - including our obligations to the Care Quality Commission, safeguarding authorities, and HMRC.

Who we share it with

We share personal information only where it is necessary, with:

• the carers and care managers involved in your care;
• health and social care professionals where needed for your care, such as GPs, district nurses, pharmacists, hospitals and local authority social care teams;
• the Care Quality Commission and safeguarding authorities, where we are required or permitted to;
• our service providers (for example IT, hosting and secure record systems), who act only on our instructions;
• emergency services, where someone's safety requires it.

We do not sell personal information, and we do not use it for advertising.

How long we keep it

We keep care records for the periods set by health and social care records retention guidance (generally at least eight years after care ends, and longer where the law requires). Recruitment records for unsuccessful applicants are kept for a short period and then deleted. Enquiry records are kept only as long as needed to deal with the enquiry and any follow-up.

Keeping it secure

Access to records is limited to staff who need it. We use secure systems, train our team in confidentiality and data protection, and have procedures for reporting and managing any data breach, including notifying the Information Commissioner's Office and affected people where required.

Your rights

You have the right to ask for a copy of your information, to have it corrected, to ask us to delete it or restrict how we use it, to object to certain uses, and to data portability. These rights have limits, particularly for care records we must keep by law. To make a request, contact us using the details above. We will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

We may update this notice. The date at the top shows when it was last reviewed.