Lakem Care Ltd
| Effective Date | September 2, 2026 |
| Data Controller | Lakem Care Ltd |
| ICO Registration Number | ZB680663 |
| Registered Office | The Oast, 62 Bell Road, Sittingbourne, Kent, ME10 4HE |
| Contact Email | info@lakemcare.co.uk |
1. Important Information and Who We Are
Lakem Care Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy informs you about how we collect, use, store, and share your personal data when you use our website (www.lakemcare.co.uk), make an inquiry, or receive our care and support services.
Lakem Care Ltd is the Data Controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Supervisory Authority Contact: You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.
2. The Personal Data We Collect
Personal data means any information about an individual from which that person can be identified. We collect, store, and process several categories of personal data, including:
- Identity Data: Full name, title, date of birth, marital status, gender, NHS number.
- Contact Data: Billing address, care address, email address, telephone numbers, emergency contact details, and next-of-kin information.
- Special Category Data (Health & Social Care Data): Physical and mental health details, medical history, care plans, medication requirements, accessibility needs, and risk assessments.
- Financial Data: Bank account details and payment information related to billing for care services.
- Technical & Usage Data: IP address, browser type, operating system, and interaction details when visiting our website.
3. Lawful Basis for Processing Your Data
We only process your personal data where there is a clear lawful basis under the UK GDPR:
Standard Personal Data (Article 6 Conditions)
- Contractual Necessity (Art. 6(1)(b)): To perform a contract we have entered into with you or take pre-contractual steps.
- Legal Obligation (Art. 6(1)(c)): To comply with legal or regulatory obligations (e.g., CQC regulations, health and safety, tax laws).
- Legitimate Interests (Art. 6(1)(f)): Necessary for our legitimate business interests, provided your fundamental rights do not override those interests.
- Vital Interests (Art. 6(1)(d)): To protect your life or the life of another person in an emergency.
Special Category Data – Health & Care Information (Article 9 Conditions)
- Health or Social Care Provision (Art. 9(2)(h)): Necessary for the provision of health or social care or treatment, or the management of health and social care systems.
- Vital Interests (Art. 9(2)(c)): Necessary to protect vital interests where the data subject is physically or legally incapable of giving consent.
- Explicit Consent (Art. 9(2)(a)): Specific consent obtained where required by applicable law.
4. How We Collect Your Personal Data
We collect data through direct interactions (forms, emails, phone calls, care assessments), third-party referrals (Local Authorities, NHS bodies, GPs, commissioning groups), and automated website interaction logs.
5. Disclosures and Data Sharing
To deliver safe and effective care services, we share necessary data with trusted recipients:
| Recipient / Category | Purpose & Safeguards |
|---|---|
| Healthcare Professionals | GPs, NHS trusts, emergency services, and social care teams for direct care delivery. |
| Regulators & Authorities | Care Quality Commission (CQC), local safeguarding boards, and legal authorities. |
| RoundSys | Secure electronic care planning and care record management system. |
| Microsoft 365 | Encrypted cloud storage, productivity, and organizational communication software. |
| Q Shaw Limited | Managed IT infrastructure and technical maintenance services under DPA. |
6. Data Security and Technical Measures
We implement robust technical and organizational measures to safeguard your personal data, including:
- Multi-Factor Authentication (MFA) across Microsoft 365 and digital care management tools.
- Role-based access controls limiting personal data access to essential staff only.
- End-to-end encryption for stored records and safe transport layers for email communications.
- Mandatory annual UK GDPR and data confidentiality training for all care staff.
7. Retention Period
We retain personal data strictly for as long as required by legal and regulatory frameworks:
- Care Records: Retained for a minimum of 8 years following the completion of care service in alignment with NHS Records Management Codes and CQC guidance.
- Financial Records: Retained for 6 years following the end of the tax year in accordance with HMRC guidelines.
8. Your Legal Rights
Under the UK GDPR, you hold specific rights regarding your personal information:
- Right of Access: Request a copy of your personal data free of charge (Subject Access Request).
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure: Request deletion of your data when retention is no longer legally required.
- Right to Restrict Processing: Limit how we process your personal information under certain conditions.
- Right to Object: Object to data processing based on legitimate interests or direct marketing.
- Right to Data Portability: Request transfer of your data to another service provider.
To exercise any of these rights, please contact us at info@lakemcare.co.uk.