Privacy Policy

Effective date: 9 January 2026

1. Introduction

Gateway Support & Care Ltd ("Gateway", "we", "us", or "our") is committed to protecting your privacy and handling personal data in a transparent, lawful, and responsible manner.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use this website or submit information through it.

2. Who We Are

Gateway Support & Care Ltd is a company registered in England and Wales with company registration number 05300121.
We operate in Wales and are regulated by Care Inspectorate Wales (CIW).

We act as the data controller for personal data collected through this website.

3. Personal Data We Collect

We may collect and process personal data when you:

Submit a referral
Provide feedback
Make an enquiry
Apply for a role
Use or browse the website

The types of personal data collected may include:

Names and contact details
Information relating to care needs, health, or personal circumstances
Employment and application information
Feedback and opinions
Technical data such as IP address, browser type, and usage information

Some of the information we process may constitute special category data, including health and care related information, where this is necessary for the provision of our services.

We only collect personal data that is relevant and necessary for the purposes described in this policy.

4. How We Use Personal Data

We use personal data for the following purposes:

Responding to enquiries and referrals
Assessing and processing referrals
Managing feedback and improving services
Handling recruitment and job applications
Operating, securing, and improving the website
Complying with legal and regulatory obligations

We do not use personal data for automated decision making.

5. Lawful Basis for Processing

Under UK data protection law, we rely on the following lawful bases to process personal data:

Legitimate interests, where processing is necessary to operate our services and respond to requests
Legal obligation, where processing is required to comply with applicable law or regulation
Consent, where required, such as for certain cookies or optional communications

Where processing involves special category data, we rely on appropriate additional conditions permitted under UK data protection law.

Where processing is based on consent, consent may be withdrawn at any time.

6. Form Submissions and Data Storage

Online forms on this website are provided using a third party form service.

When a form is submitted, information is first processed and stored within the third party form platform. Form submission data is then transferred to and stored within our own systems for operational purposes.

Data stored within our systems is held using Google Firestore in a UK based data centre located in the Europe West2 region.

Appropriate technical and organisational measures are in place to protect personal data at all stages of processing.

7. Email Communications

We use a third party email delivery service to send emails related to enquiries, referrals, feedback submissions, and job applications.

This service processes email addresses and message content solely for the purpose of delivering communications on our behalf and in accordance with our instructions.

8. Analytics and Cookies

This website uses analytics tools implemented via Google Tag Manager to collect anonymised information about how visitors use the site.

This may include:

Pages visited
Time spent on pages
Interaction patterns
General device and browser information

Analytics data is used solely to improve website performance, accessibility, and user experience. It is not used to identify individual users.

A cookie consent banner is displayed on your first visit to the website, allowing you to manage your cookie preferences. Where required, analytics cookies are only set following user consent.

9. Third Party Service Providers

We use trusted third party service providers to support:

Website hosting
Online form delivery and processing
Secure storage of submitted data
Email delivery
Website analytics and monitoring
Security and spam prevention

These providers may process personal data as part of delivering their services to us. They are required to act only on our instructions and to implement appropriate safeguards.

10. International Data Transfers

Some third party service providers used by this website may process personal data outside the United Kingdom.

Where personal data is transferred internationally, appropriate safeguards are used to ensure data remains protected in accordance with UK data protection law.

11. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements.

When personal data is no longer required, it is securely deleted or anonymised.

12. Your Rights

Under UK data protection law, you have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete data
Request deletion of personal data, where applicable
Object to or restrict processing in certain circumstances
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Commissioner’s Office

Requests may be made using the contact details provided on this website.

13. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

Access to personal data is limited to authorised individuals who require it for legitimate purposes.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data handling practices.

Any updates will be published on this website with a revised effective date.

15. Contact and Data Protection Lead

The Data Protection Lead for Gateway Support & Care Ltd is:

Adrianne Murphy
Registered Manager

If you have any questions about this Privacy Policy or how we handle personal data, you may contact us using the contact details provided on this website.