Privacy Notice

Effective date: 18 August 2026

At Angelica Care Mid Sussex, we take your privacy seriously. This Privacy Notice explains how we collect, use, store and protect your personal information and your rights under data protection law.

Who We Are
Winsor Care Group Ltd, trading as Angelica Care Mid Sussex, is the Data Controller responsible for your personal information.

Company number: 12829970
ICO registration: ZA812201
Correspondence address: 32 West Street, Storrington, Pulborough, West Sussex, RH20 4EE
Telephone: 01903 742658
Email: info@angelicacaremidsussex.com

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018 and other applicable data protection legislation.

What Information Do We Collect?
The information we collect depends on your relationship with us.

If you receive or enquire about our care services, this may include:
- your name, date of birth, address and contact details;
- next of kin, representatives and emergency contacts;
- information about your health, medical conditions and medication;
- care assessments, care plans and risk assessments;
- mobility, accessibility and communication needs;
- dietary requirements and allergies;
- safeguarding and mental capacity information where relevant;
- records of the care and support we provide;
- financial and funding information; and
- correspondence, complaints, incidents and other relevant records.

Health and care information is considered special category personal data and receives additional protection under data protection law.

We may also process appropriate personal information relating to family members and representatives, job applicants, employees, workers, suppliers and other people who interact with our organisation.

How We Collect Your Information
We may collect information:
- directly from you;
- from a family member or authorised representative;
- from healthcare and social care professionals;
- from Local Authorities, NHS organisations and commissioners;
- during assessments and delivery of care;
- when you contact or correspond with us;
- through recruitment processes; and
- through our website and cookies.

We only collect and use information where we have a lawful reason to do so.

How We Use Your Information
We use personal information where necessary to:
- assess your care and support needs;
- prepare and maintain care plans;
- provide safe, effective and person-centred care;
- administer and support medication where required;
- communicate with you and appropriate representatives;
- coordinate care with health and social care professionals;
- respond to enquiries;
- manage contracts, funding, invoices and payments;
- protect people from abuse, neglect or harm;
- investigate incidents and complaints;
- recruit and manage our workforce;
- monitor and improve the quality of our services; and
- meet our legal, safeguarding and regulatory responsibilities.

We will not use your personal information for an unrelated purpose unless we have a lawful reason to do so.

Our Lawful Bases
Depending on the circumstances, we may process personal information because:
- it is necessary to provide or manage a contract;
- we have a legal obligation;
- it is necessary for our legitimate interests;
- you have given consent;
- it is necessary to protect someone's vital interests; or
- another lawful basis applies.

Because we provide domiciliary care, we also process health and other special category information where necessary for the provision and management of health or social care, safeguarding, employment obligations and other purposes permitted by law.

We do not rely on consent where another lawful basis applies.

Who We May Share Information With
We keep your information confidential but may share relevant information where it is necessary and lawful to do so.

This may include:
- GPs and other healthcare professionals;
- NHS organisations;
- Local Authorities and commissioners;
- authorised family members and representatives;
- the Care Quality Commission (CQC) and other regulators;
- safeguarding authorities and the Police where appropriate;
- professional advisers;
- carefully selected IT, care management, payroll and other service providers; and
- other organisations where disclosure is required or permitted by law.

We only share information that is necessary for the relevant purpose.

We do not sell your personal information.

Safeguarding
There may be circumstances where we need to share information without consent, particularly where this is necessary to protect a child or adult from abuse, neglect or serious harm, prevent or detect crime, or meet a legal or safeguarding obligation.

Where appropriate and lawful, we will explain when information needs to be shared.

How We Protect Your Information
We use appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access or disclosure.

These include secure electronic systems, access controls, passwords, secure communications, appropriate encryption, secure storage, staff confidentiality requirements and data protection training.

Access to personal information is limited to people who need it to carry out their role.

How Long Do We Keep Your Information?
We only retain personal information for as long as necessary to provide our services and meet our legal, regulatory, contractual and operational obligations.

Different records have different retention periods. For example, care records are normally retained in accordance with applicable health and social care records-management requirements.

When information is no longer required, it is securely deleted, destroyed or anonymised.

Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- be informed about how your information is used;
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- request deletion of information in certain circumstances;
- ask us to restrict processing;
- object to certain uses of your information;
- request data portability where applicable; and
- withdraw consent where processing is based on consent.

These rights are not absolute and some information, particularly care records, may need to be retained because of our legal or regulatory obligations.

Angelica Care Mid Sussex does not make decisions about individuals based solely on automated decision-making or profiling.

Cookies and Website Information
When you use our website, we may collect technical information such as your IP address, browser, device type, pages visited and website usage information.

Essential cookies may be used to operate the website. Non-essential analytics or marketing cookies will only be used where the appropriate consent has been obtained.

You can manage your preferences through our website's cookie settings. Please see our Cookie Policy for more information.

Marketing
We will only send marketing communications where permitted by law.

Where we rely on your consent, you can withdraw it at any time. You can also ask us to stop sending direct marketing communications at any time.

International Transfers
Most personal information we process is stored within the United Kingdom.

If personal information needs to be transferred outside the UK, we will ensure that appropriate safeguards are in place as required by UK data protection law.

Contact Us About Your Information
If you have a question about your personal information or would like to exercise one of your data protection rights, please contact:

Angelica Care Mid Sussex
Winsor Care Group Ltd
32 West Street
Storrington
Pulborough
West Sussex
RH20 4EE

Telephone: 01903 742658
Email: info@angelicacaremidsussex.com

We may need to confirm your identity before responding to a request.

Complaints
If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

ICO telephone: 0303 123 1113
Website: ico.org.uk

Changes to This Privacy Notice
We may update this Privacy Notice when our services, business practices, technology or legal and regulatory requirements change.

The latest version will always be published on our website.

Last updated: 18 August 2026