Privacy Policy
Last updated 8/27/2026
PRIVACY POLICY
Autonomous Care Limited
Effective Date: 27/08/2026
Last Updated: 27/08/2026
1. Introduction
Autonomous Care Limited (“Autonomous Care”, “we”, “us” or “our”) is committed to protecting the privacy and confidentiality of individuals whose personal information we process.
This Privacy Policy explains how we collect, use, store, protect and share personal information when you:
* visit or use our website;
* contact us about our care services;
* request or receive care services;
* register as a care worker or self-employed care professional;
* communicate with us by telephone, email, social media or other means;
* enter into an agreement with us; or
* otherwise interact with our services.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and other applicable UK data protection legislation.
Please read this Privacy Policy carefully. By using our website or providing information to us, you acknowledge that your personal information may be processed as described in this policy.
⸻
2. Who We Are
Data Controller: Autonomous Care Limited
Registered Office: 182-184 High Street North, London, England, E6 2JA
Company Registration Number: 17325420
Email: info@autonomouscare.co.uk
Telephone: 08455443986
Website: www.autonomouscare.co.uk
For the purposes of UK data protection law, Autonomous Care Limited is generally the Data Controller of personal information that we collect and process in connection with our business.
Where we introduce self-employed care workers to individuals or families requiring care, the precise allocation of data protection responsibilities may depend upon the nature of the services and contractual arrangements involved.
If you have any questions regarding how your personal information is processed, please contact us using the details above.
⸻
3. Information We Collect
Depending on your relationship with us, we may collect different categories of personal information.
3.1 Information about people seeking care
If you or someone you represent is seeking care services, we may collect:
* full name;
* date of birth and age;
* contact details;
* home address;
* emergency contact details;
* details of family members or representatives;
* information about care requirements;
* mobility and accessibility requirements;
* information about daily living activities;
* relevant medical or health information;
* medication and treatment information where relevant to arranging care;
* information about disabilities or additional support requirements;
* preferred care arrangements;
* information about funding or payment arrangements;
* information regarding local authority, NHS or other funding;
* financial information necessary for billing or payment;
* information about the home environment relevant to providing care;
* information concerning risks and safeguarding;
* records of communications with you; and
* any other information reasonably necessary to assess, arrange or manage care services.
Some of this information may constitute special category personal data, particularly information relating to health or disability.
3.2 Information about care workers
If you register or enquire with us as a care worker, we may collect:
* full name;
* date of birth;
* contact details;
* address;
* nationality or immigration/right-to-work information where legally required;
* employment or self-employment information;
* work history;
* qualifications and training;
* professional registrations;
* references;
* identity verification information;
* Disclosure and Barring Service (DBS) information where applicable;
* driving licence and vehicle information where relevant;
* availability and preferred working arrangements;
* skills and experience;
* safeguarding-related information;
* bank or payment information where necessary;
* records of communications;
* photographs where required for identification or professional purposes; and
* other information necessary to assess suitability for introduction to clients.
Certain information concerning criminal convictions, DBS checks or safeguarding may be subject to additional legal protections.
3.3 Information collected through our website
When you use our website, we may collect:
* your IP address;
* browser type and version;
* device information;
* operating system;
* pages visited;
* date and time of visits;
* referring website;
* information submitted through website forms; and
* information collected through cookies and similar technologies.
Please see our Cookie Policy for further information.
⸻
4. How We Collect Personal Information
We may collect information:
* directly from you;
* from a family member, attorney, deputy or other authorised representative;
* from a care worker;
* from healthcare or social care professionals where lawful and appropriate;
* from local authorities or NHS organisations where relevant;
* from professional or regulatory organisations;
* from referees;
* from DBS or other appropriate verification services;
* through our website;
* through telephone calls, emails and other correspondence;
* through third-party service providers; or
* from publicly available sources where lawful.
Where we obtain information from someone other than you, we will take reasonable steps to ensure that the processing is lawful and that you receive appropriate privacy information where required by law.
⸻
5. How We Use Your Information
We may use personal information for purposes including:
For people seeking care
* understanding your care requirements;
* assessing your care needs for the purpose of making suitable introductions;
* identifying suitable care workers;
* facilitating introductions between clients and care workers;
* communicating with you and your representatives;
* arranging and managing care services;
* administering agreements;
* processing payments and invoices;
* managing complaints and concerns;
* safeguarding vulnerable individuals;
* managing risks;
* complying with legal and regulatory obligations;
* maintaining appropriate records; and
* improving our services.
For care workers
* assessing your suitability for introduction to clients;
* verifying your identity and qualifications;
* checking references;
* undertaking appropriate safeguarding checks;
* confirming right-to-work status where applicable;
* matching your skills and experience with client requirements;
* facilitating introductions;
* communicating about assignments or opportunities;
* administering agreements and payments where applicable;
* managing complaints and safeguarding matters;
* maintaining records; and
* complying with legal obligations.
For website visitors and enquiries
We may use your information to:
* respond to enquiries;
* provide information about our services;
* arrange consultations;
* process registrations;
* maintain website security;
* analyse website usage;
* improve our website and services; and
* send marketing communications where legally permitted and appropriate.
⸻
6. Lawful Basis for Processing
Under the UK GDPR, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on one or more of the following:
6.1 Consent
We may process information where you have given us specific, informed and freely given consent.
You may withdraw consent at any time, although this will not affect processing carried out before consent was withdrawn.
6.2 Contract
We may process information where it is necessary to enter into or perform a contract with you.
6.3 Legal obligation
We may process information where necessary to comply with a legal or regulatory obligation.
6.4 Legitimate interests
We may process information where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.
Our legitimate interests may include:
* operating and managing our business;
* providing and improving our services;
* facilitating introductions between clients and care workers;
* preventing fraud;
* protecting individuals;
* maintaining appropriate business records; and
* managing business relationships.
6.5 Vital interests
In exceptional circumstances, we may process information where necessary to protect someone’s life or prevent serious harm.
⸻
7. Special Category Data
Care services frequently involve information relating to health, disability and other sensitive matters.
Special category data receives additional protection under the UK GDPR.
Where we process special category information, we will ensure that an appropriate Article 9 condition under the UK GDPR applies, together with an appropriate lawful basis under Article 6.
Depending on the circumstances, this may include:
* explicit consent;
* processing necessary for the provision or management of health or social care services;
* processing necessary for reasons of substantial public interest;
* processing necessary to protect vital interests where the individual is physically or legally incapable of giving consent; or
* another lawful condition permitted by applicable data protection law.
We will only collect and use health or other sensitive information to the extent reasonably necessary for legitimate care, safeguarding, administration or legal purposes.
⸻
8. Criminal Convictions and DBS Information
Where relevant to assessing the suitability of care workers, we may process information relating to criminal convictions, offences or DBS checks.
Such information will only be processed where permitted by applicable law and where appropriate safeguards are in place.
We will not use criminal-record information in a discriminatory or unlawful manner.
⸻
9. Sharing Personal Information
We may share personal information with appropriate third parties where lawful and necessary.
Depending on the circumstances, these may include:
* care clients and their authorised representatives;
* care workers;
* family members or attorneys where appropriately authorised;
* healthcare professionals;
* social care professionals;
* local authorities;
* NHS organisations;
* safeguarding authorities;
* emergency services;
* regulators and government bodies;
* DBS or verification organisations;
* insurers;
* accountants and professional advisers;
* solicitors and legal advisers;
* IT, hosting and software providers;
* payment service providers;
* communication providers;
* website and marketing service providers; and
* other service providers acting on our behalf.
We will only share information where there is an appropriate lawful basis.
Where we introduce a care worker to a client, relevant personal information may need to be shared so that both parties can assess the suitability and safety of the proposed care arrangement.
⸻
10. Data Sharing Between Clients and Care Workers
Because Autonomous Care may operate as an introductory service, information may need to be shared between clients and self-employed care workers.
We will seek to limit information shared to information that is reasonably necessary for:
* assessing suitability;
* arranging an introduction;
* establishing care requirements;
* managing risks;
* facilitating the proposed care arrangement; and
* complying with legal or safeguarding obligations.
Clients and care workers are expected to respect the confidentiality and privacy of information received about one another.
⸻
11. Data Processors
We may use trusted third-party organisations to process personal information on our behalf.
Examples include providers of:
* website hosting;
* cloud storage;
* email;
* IT systems;
* accounting;
* payment processing;
* customer relationship management systems;
* document management;
* recruitment and verification services; and
* communications.
Where a third party processes personal information on our behalf, we will take appropriate steps to ensure that appropriate contractual and security requirements are in place.
⸻
12. International Transfers
Where personal information is transferred outside the United Kingdom, we will ensure that the transfer is carried out in accordance with applicable data protection law.
This may include relying on:
* UK adequacy regulations;
* UK International Data Transfer Agreements;
* UK Addendums to approved contractual clauses; or
* another lawful transfer mechanism.
We will take reasonable steps to ensure that personal information transferred internationally receives an appropriate level of protection.
⸻
13. How We Protect Personal Information
We take appropriate technical and organisational measures to protect personal information from:
* unauthorised access;
* accidental loss;
* destruction;
* alteration;
* disclosure;
* misuse; and
* other unlawful processing.
Measures may include:
* access controls;
* password protection;
* secure systems;
* encryption where appropriate;
* staff confidentiality requirements;
* secure storage;
* regular system updates;
* backups;
* staff training;
* data minimisation; and
* appropriate incident management procedures.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
⸻
14. Confidentiality
We recognise the particularly sensitive nature of information relating to care recipients and care workers.
Employees, contractors and service providers who have access to personal information will be expected to maintain appropriate confidentiality.
Personal information will only be accessed or disclosed where there is a legitimate reason to do so.
⸻
15. Data Retention
We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including for legal, regulatory, accounting and reporting requirements.
Retention periods will vary depending on the type of information and the reason it is being processed.
When information is no longer required, we will securely delete, destroy or anonymise it where appropriate.
Our retention periods may take account of:
* legal requirements;
* contractual requirements;
* safeguarding requirements;
* regulatory requirements;
* potential complaints or legal claims;
* accounting and financial requirements; and
* our legitimate business needs.
⸻
16. Your Data Protection Rights
Subject to certain legal exemptions and restrictions, you may have the following rights under UK data protection law:
Right of access
You may request a copy of the personal information we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to erasure
In certain circumstances, you may ask us to delete your personal information.
Right to restrict processing
You may ask us to restrict how we process your information in certain circumstances.
Right to data portability
In certain circumstances, you may request your personal information in a structured, commonly used and machine-readable format.
Right to object
You may object to certain processing, including processing based on legitimate interests and direct marketing.
Rights relating to automated decision-making
You may have rights relating to decisions based solely on automated processing, including profiling, where such processing produces legal or similarly significant effects.
⸻
17. Withdrawing Consent
Where we rely on consent to process your personal information, you may withdraw your consent at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
If you withdraw consent, we may still be able to process information where another lawful basis applies.
⸻
18. Direct Marketing
We may use your contact information to provide information about our services where permitted by law.
Where required, we will obtain appropriate consent before sending electronic marketing communications.
You may unsubscribe from marketing communications at any time by:
* using the unsubscribe option included in the communication; or
* contacting us directly.
We will not sell your personal information to third parties for their own direct marketing purposes.
⸻
19. Cookies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as:
* website functionality;
* security;
* remembering preferences;
* analysing website traffic; and
* improving user experience.
Where required by law, we will obtain consent before placing non-essential cookies on your device.
Further information will be provided in our Cookie Policy.
⸻
20. Children’s Information
Our services are primarily intended for adults.
We do not knowingly collect personal information from children unless there is a legitimate reason to do so in connection with the provision of services or where a parent, guardian or authorised representative is involved.
Where information concerning a child is processed, we will apply appropriate safeguards and consider the child’s rights and best interests.
⸻
21. Safeguarding and Disclosure of Information
Protecting vulnerable adults is an important part of our responsibilities.
We may disclose personal information without consent where we reasonably believe this is necessary to:
* protect an individual from serious harm;
* investigate or report safeguarding concerns;
* prevent or detect crime;
* comply with a legal obligation;
* cooperate with law enforcement;
* cooperate with local authorities, NHS organisations or safeguarding bodies; or
* protect the rights and safety of individuals.
Where lawful and appropriate, we will inform the individual concerned about such disclosure.
⸻
22. Data Breaches
If we become aware of a personal data breach, we will assess the breach and take appropriate action in accordance with UK GDPR requirements.
Where legally required, we will notify the Information Commissioner’s Office (ICO) and/or affected individuals.
⸻
23. Your Responsibilities
Where we provide you with personal information concerning another person, you should only provide that information where you have a lawful basis or appropriate authority to do so.
If you receive personal information about another individual through an introduction facilitated by Autonomous Care, you must:
* keep the information confidential;
* use it only for legitimate purposes;
* not disclose it unnecessarily;
* take reasonable steps to keep it secure; and
* comply with applicable data protection legislation.
⸻
24. Complaints
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.
Please contact:
Data Protection Contact
Autonomous Care Limited
182-184 High Street North, London, England, E6 2JA
Email: info@autonomouscare.co.uk
Telephone: 08455443986
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
You can contact the ICO through its official website or telephone service.
⸻
25. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
* changes in our services;
* changes in technology;
* changes in applicable legislation;
* regulatory guidance; or
* changes to our data processing practices.
The latest version will be published on our website and will include the date on which it was last updated.
⸻
26. Contact Us
If you have questions about this Privacy Policy, your personal information, or how Autonomous Care Limited processes personal data, please contact us:
Autonomous Care Limited
Registered Office:
182-184 High Street North, London, England, E6 2JA
Email:
info@autonomouscare.co.uk
Telephone:
08455443986
Website:
www.autonomouscare.co.uk
Data Protection Contact:
Kelly
Effective Date: 27/08/2026
Last Updated: 27/08/2026