Privacy Policy for Lunesdale House

1. Who We Are

Lunesdale House is the Data Controller responsible for your personal data.

• Address: Lunesdale House, Hale, Milnthorpe, Cumbria, LA7 7BN
• Email: manager@lunesdalehouse.co.uk

2. The Data We Collect About You

When you use our website, we may collect, use, and store different kinds of personal data about you, which we have grouped together as follows:

• Identity & Contact Data: Includes your first name, last name, email address, and telephone number when you fill out a contact form or email us.
• Technical & Usage Data: Includes your IP address, browser type and version, time zone setting, operating system, and information about how you navigate our website.
• Special Category Data: Due to the nature of our care home services, you may voluntarily share sensitive information (such as health details of a prospective resident) in your messages to us. We treat this information with the utmost strictness and confidentiality.

3. How We Collect Your Data

• Direct Interactions: You may give us your Contact and Identity data by filling in forms on our site or by corresponding with us by post, phone, or email.
• Automated Technologies: As you interact with our website, standard functionality built into our content management system (WordPress) and web server automatically collects Technical Data about your equipment and browsing actions using cookies and server logs.

4. Lawful Basis for Processing Your Data

Under UK GDPR, we must have a valid legal basis to process your data. We rely on the following:

• Consent: When you actively agree to our use of non-essential cookies or specific marketing communications.
• Legitimate Interests: For running our website, ensuring network security, and responding to your general business inquiries.
• Performance of a Contract: When taking steps at your request prior to entering into a care agreement with Lunesdale House.
• Legal Obligation: Where we need to comply with a regulatory or statutory obligation.

5. Disclosures of Your Personal Data

We do not sell your personal data. We may share your data with trusted third parties strictly for the purposes of operating our business, including:

• IT and System Administrators: Service providers who provide our UK-based web hosting, server management, and secure email services.
• Regulatory Bodies: Authorities (such as the CQC) to whom we are required to report in certain circumstances.

6. Data Security & Retention

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements. General web inquiries that do not result in a contract are securely deleted after 24 months.

7. Your Legal Rights

Under UK data protection laws, you have rights relating to your personal data, including the right to:

• Request access to your personal data.
• Request correction of incomplete or inaccurate data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request the transfer of your personal data.
• Withdraw consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please email us at manager@lunesdalehouse.co.uk.

8. Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.