Skip to content

Privacy Policy

Last reviewed: January 2026

Beacon of Hope Supported Living UK Limited (“we”, “us”, “our”) is committed to protecting the privacy of everyone we work with. This policy explains what personal information we collect, why we collect it, how we use it and the rights you have in relation to it.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the guidance issued by the Information Commissioner’s Office (ICO) and the Care Quality Commission (CQC).

1. Who we are

Beacon of Hope Supported Living UK Limited is a company registered in England and Wales (Company No. 17088842). Our registered office is 55 Thunderbolt Way, Tipton, England, DY4 9SG. We act as the data controller for the personal information described in this policy.

2. Definitions

  • Personal data: information that identifies a living individual, either on its own or when combined with other information.
  • Special category data: sensitive information such as health, ethnicity or religious beliefs, which requires additional protection.
  • Processing: any action taken with personal data, including collecting, storing, using, sharing or deleting it.
  • Data subject: the person the information is about.

3. Scope

This policy applies to people we support, their families and representatives, professionals who refer to us, our employees and applicants, visitors to our services, and users of our website.

4. Information we collect

  • Name, address, date of birth and contact details.
  • Health, care and support needs, including assessments and care plans.
  • Information about family members, advocates and professionals involved in a person’s care.
  • Funding, commissioning and placement information.
  • Employment records, references and right-to-work information for staff and applicants.
  • Website usage information collected through basic analytics and enquiry forms.

5. Why we use your information

  • To provide safe, person-centred supported living and regulated care.
  • To meet our legal, regulatory and contractual duties, including CQC and local authority obligations.
  • To respond to referrals, enquiries and complaints.
  • To recruit, employ and support our team.
  • To manage safeguarding concerns and protect people from harm.

6. Lawful basis for processing

We rely on one or more of the following lawful bases:

  • Legal obligation and public task, for our regulated care activities.
  • Contract, where we are delivering agreed services.
  • Vital interests, where information must be shared to protect life.
  • Consent, where you have chosen to share information with us.
  • Legitimate interests, where balanced against your rights and freedoms.

7. Sharing your information

We only share information when it is necessary and lawful. This may include local authorities, the NHS, GPs, safeguarding teams, the CQC, advocates, and other professionals involved in a person’s care. We do not sell personal data. We do not transfer personal data outside the United Kingdom unless appropriate safeguards are in place.

8. How long we keep your information

We retain records for the periods required by law, regulatory guidance and our contractual duties. Care and support records are typically retained for a minimum of eight years after a person has left our service. Employment records are kept in line with statutory requirements.

9. Keeping your information secure

We use appropriate technical and organisational measures to protect personal information from loss, misuse or unauthorised access. Access to records is restricted to trained staff on a need-to-know basis. All staff receive training in data protection and confidentiality.

10. Your rights

  • Be informed about how your data is used.
  • Access the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete information.
  • Ask us to delete information where there is no lawful reason to keep it.
  • Restrict or object to certain processing.
  • Withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, please contact us using the details below or complete our request form at Request My Data.

11. Complaints

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

12. Contact

Data Protection Lead, Beacon of Hope Supported Living UK Limited, 55 Thunderbolt Way, Tipton, England, DY4 9SG. Email: info@bo-hope.co.uk.

13. Review

This policy is reviewed annually or sooner if there is a change in law, regulation or our practices.