1. Data Controller Information
Agency Care Staff Ltd is the Data Controller responsible for your personal data collected through this website and our advisory services.
Data Controller: AGENCY CARE STAFF LTD (Trading as CQC Registration Support)
Company Registration Number: 13609279 (Registered in England & Wales)
Registered Office Address: 82 Mendip Way, Corby, Northamptonshire, England, NN18 8GJ
ICO Registration Reference: ZB536024 (Tier 1 • Registered: 14 April 2023 • Registration expires: 13 April 2027)
Email Address: info@cqcregistrationsupport.co.uk
Direct Telephone / WhatsApp: +44 7544 496286
2. The Personal Data We Collect
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer the following categories of personal data:
- Identity & Contact Data: Includes your first name, last name, email address, telephone or WhatsApp mobile number, and organisation/trading name (if provided).
- Enquiry & Assessment Details: Information submitted through our contact forms or advice modals, such as your proposed service type (Domiciliary Care, Supported Living, Learning Disabilities), your preferred method of contact, specific questions, and results generated by our free CQC Readiness Checklist calculator.
- Client Service & Transaction Data: Where you engage our services, details of packages ordered (e.g., Full Registration Support, Policies & Procedures Pack, Statement of Purpose drafting, Business Plan, Mock Interview coaching) and payment/invoicing history. (Note: We do not store full payment card details; payments are handled via secure bank transfer or certified merchant processors).
- Technical & Usage Data: Internet Protocol (IP) address (which is anonymised/truncated by Google Analytics), browser type and version, operating system, pages visited, time spent on pages, navigation paths, and referring URLs. This information is collected via Google Analytics 4 cookies only when you give your consent via our cookie banner.
We do not routinely collect any Special Category Personal Data (such as health, biometric, religious, or ethnic data) through this website.
3. How Your Personal Data Is Collected
We use different methods to collect data from and about you, including:
- Direct Interactions: You provide your identity and contact information by filling in our contact form, requesting advice via our modal popup, using our checklist calculator, contacting us by email, or messaging us via WhatsApp.
- Automated Technologies: As you interact with our website, we may collect technical data about your equipment and browsing patterns. We collect this data using strictly necessary session storage and, where permitted, Google Analytics cookies. Please refer to our Cookie Policy for full details.
4. Our Lawful Bases for Processing Under UK GDPR
Under Article 6 of the UK GDPR, we only process your personal data when we have a recognized legal basis:
| Purpose / Activity | Category of Data | Lawful Basis under UK GDPR |
|---|---|---|
| Responding to enquiries & providing advice | Identity, Contact, Enquiry Details | Legitimate Interests (to respond to requests and assist prospective providers) |
| Delivering CQC consultancy packages & documents | Identity, Contact, Transaction, Service Details | Performance of a Contract (to fulfil our agreed consultancy services) |
| Statutory accounting, tax and corporate compliance | Identity, Contact, Financial/Transaction records | Legal Obligation (HMRC and Companies Act compliance) |
| Website analytics and performance measurement | Technical, Usage, Cookie Identifiers | Consent (obtained via our Cookie Consent Banner) |
5. Disclosures of Your Personal Data
We do not sell, rent, or trade your personal data to marketing third parties. We only share personal data with trusted service providers who act as data processors under strict contractual obligations:
- Hosting & Infrastructure Providers: Google Cloud Platform and Firebase Hosting (used to securely host our website, application files, and API endpoints).
- Analytics Providers: Google LLC / Google Ireland Ltd (Google Analytics 4), used to track aggregated traffic metrics subject to your cookie consent.
- Communication Tools: WhatsApp (Meta Platforms Ireland Ltd) when you choose to communicate with our nurse-led team via WhatsApp messaging.
- Professional Advisers: Accountants, legal advisers, and banking institutions where necessary to manage statutory audits and company finances.
- Regulatory & Legal Authorities: Where disclosure is strictly required by HM Revenue & Customs, police authorities, or a court order.
6. International Data Transfers
Some of our third-party service providers (such as Google Cloud or Google Analytics) maintain server facilities outside the United Kingdom (including in the United States and the European Economic Area). Whenever personal data is transferred internationally, we ensure adequate safeguards are in place, including:
- Transfers to countries deemed to provide an adequate level of protection by the UK Government; or
- Use of standard contractual clauses and the UK International Data Transfer Addendum (IDTA) approved by the Information Commissioner's Office.
7. How Long We Retain Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- General Enquiries & Checklist Submissions: Retained for up to 2 years from the date of last contact to allow for ongoing discussion, follow-up enquiries, or subsequent registration support.
- Client Consultancy & Invoicing Records: Retained for 6 years following the end of the financial year in which services were completed, in accordance with UK statutory accounting requirements (HMRC) and limitation periods for contract claims.
- Analytics & Cookie Data: Google Analytics 4 event data is automatically set to expire after standard retention windows (2 months or 14 months) and is aggregated.
8. Your Legal Rights Under UK GDPR
Under UK data protection legislation, you have significant rights regarding your personal data:
Right of Access (SAR)
You have the right to request a copy of the personal data we hold about you.
Right to Rectification
You have the right to have inaccurate or incomplete data corrected.
Right to Erasure
You may ask us to delete your personal data where there is no valid reason for us to continue processing it.
Right to Object & Restrict
You have the right to object to processing based on legitimate interests or to restrict processing during dispute resolution.
Right to Data Portability
You may request the transfer of your personal data to you or a third party in a structured, machine-readable format.
Right to Withdraw Consent
Where we rely on consent (e.g. for analytics cookies), you can withdraw consent at any time via our Cookie Preferences.
To exercise any of these rights, please email us at info@cqcregistrationsupport.co.uk. We respond to all legitimate requests within one calendar month without charge.
9. The Right to Lodge a Complaint with the ICO
If you have any concerns regarding how we handle your personal data, we invite you to contact us first so we can resolve the issue promptly. However, you have the right to make a complaint at any time to the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk
Our ICO Data Controller Registration Reference is: ZB536024 (Agency Care Staff Ltd).
10. Third-Party Links & CQC Independence
Our website includes links to official guidance websites such as the Care Quality Commission (cqc.org.uk) and legislation repositories. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
Please note: CQC Registration Support is an independent compliance consultancy operated by Agency Care Staff Ltd. We are not affiliated with, endorsed by, or acting on behalf of the Care Quality Commission (CQC).
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our legal duties, services, or regulatory guidelines. Any updates will be posted on this page with an updated “Last updated” date.