Privacy Policy

Introduction

At Tender Heart, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our services or visit our website www.tenderheart.care. By accessing our website or using our services, you agree to the terms outlined in this policy.

Information We Collect

We may collect the following types of personal data:

• Personal Identification Information: Name, phone number, email address, postal address.
• Health-Related Information: Only if voluntarily provided as part of our care services.
• Payment Details: If you make a transaction for our services.
• Technical Data: IP address, browser type, and device information when visiting our website.

How We Use Your Information

We use your personal data to:

•  Provide and manage our care services.
• Respond to inquiries and customer support requests.
• Process transactions and maintain records.
• Improve our website and service experience.
• Comply with legal and regulatory requirements.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities.
• Contractual Obligation: When data is necessary to fulfil a contract with you.
• Legal Compliance: To comply with UK laws and regulatory requirements.
• Legitimate Interests: When necessary for the proper functioning of our services.

How We Share Your Data

We do not sell or rent your personal data. However, we may share your information in the following cases:

• With trusted third-party service providers (e.g., payment processors) to deliver our services.
• When required by law or regulatory bodies (e.g., UK authorities, CQC).
• If necessary to protect our rights, safety, or business interests.

Data Security & Protection

We take appropriate measures to protect your personal data from unauthorised access, loss, or misuse. Our security measures include:

• Encryption of sensitive data.
• Secure data storage systems.
• Regular monitoring of IT infrastructure.

Your Data Rights

Under the UK GDPR, you have the following rights regarding your data:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Correct inaccurate or incomplete data.
• Right to Erasure – Request deletion of your data where applicable.
• Right to Restrict Processing – Limit how we process your data.
• Right to Data Portability – Transfer your data to another provider.
• Right to Object – Opt-out of certain data processing activities.

Data Retention

We retain personal data only for as long as necessary to fulfil legal, regulatory, and operational requirements. Once data is no longer required, it is securely deleted or anonymised.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage users to review their policies.

Updates to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated via our website.