Privacy Policy & Cookie Policy
ANA Nursing is committed to protecting your privacy and handling your personal information with care and respect. This policy explains what we collect, how we use it and your rights.
Jump to section
Last updated: June 2026. This policy applies to the website ana-nursing.co.uk and to the services provided by ANA Nursing. We review this policy regularly and will update it when necessary. Please check back periodically for any changes.
1. Who we are
ANA Nursing is a professional home care agency based in London, providing trusted domiciliary care, live-in care, complex nursing care and related care services to clients across London.
For the purposes of data protection law, ANA Nursing is the Data Controller for personal information we collect via this website and in connection with our care services.
| Detail | Information |
|---|---|
| Business name | ANA Nursing |
| Address | Willesden Centre for Health & Care, Robson Avenue, Willesden, London, NW10 3RY |
| Telephone | 07392 170990 |
| info@ana-nursing.co.uk | |
| Website | ana-nursing.co.uk |
| ICO Registration | Please contact us for our ICO registration number |
If you have any questions about how we handle your personal data, please contact us using the details above. As a care provider handling sensitive health information, we take our data protection responsibilities very seriously.
2. What personal information we collect
We collect personal information in the following ways:
When you contact us via our website contact form, telephone or email, you may provide:
- Your name
- Your email address
- Your telephone number
- Your postal address
- Information about the person requiring care (which may include health, medical and personal circumstances)
- Any other information you choose to include in your message
When we carry out a home care assessment or provide care services, we may collect additional information including:
- Medical history, diagnoses and health conditions
- Medication details
- GP and healthcare professional details
- Emergency contact information
- Details of daily living needs and personal preferences
- Financial information relevant to care funding arrangements
- Next of kin and family contact details
When you visit ana-nursing.co.uk, certain information is collected automatically by our website and analytics tools, including:
- Your IP address
- Browser type and version
- Pages you visit and time spent on them
- How you found our website (search engine, referral link etc)
- Device type (desktop, mobile, tablet)
- General geographic location (country/city level, not precise)
If you apply to join our team via the website or by email, we will collect your CV, contact details, work history, qualifications, DBS check information and references. This information is handled in accordance with our staff recruitment policies.
Please note: You are not obliged to provide personal information to us. However, if you choose not to, we may not be able to respond to your enquiry, carry out a care assessment or provide our services to you.
3. How we use your personal information
We use the personal information we collect for the following purposes:
| Purpose | Details |
|---|---|
| Responding to enquiries | To respond to messages submitted via our contact form, by email or by telephone |
| Carrying out care assessments | To assess your needs or those of your loved one and recommend appropriate care services |
| Providing care services | To deliver the home care, live-in care or nursing services you have engaged us to provide, including care planning, carer matching and service coordination |
| Care coordination | To liaise with GPs, NHS teams, hospitals, pharmacies and other care professionals involved in a client’s care (with appropriate consent) |
| Invoicing and payments | To manage billing, payments and financial administration in connection with our services |
| Legal obligations | To comply with our legal, regulatory and safeguarding obligations as a care provider, including CQC requirements |
| Recruitment | To process job applications and manage the recruitment of care staff |
| Website analytics | To understand how visitors use our website so we can improve it (via Google Analytics/Site Kit, with your cookie consent) |
| Marketing communications | To send you information about our services, where you have given us consent to do so. You can opt out at any time. |
We will not use your personal information for any purpose that is incompatible with the reason it was collected, and we will not sell your personal data to any third party.
4. Our legal basis for processing your data
Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. We rely on the following legal bases:
| Legal basis | When we use it |
|---|---|
| Contract | Processing is necessary to perform our contract with you for the provision of care services, or to take steps to enter into such a contract at your request |
| Legal obligation | Processing is required to comply with our legal obligations as a regulated care provider, including safeguarding duties, CQC requirements and employment law |
| Legitimate interests | Where processing is necessary for our legitimate business interests (such as responding to general enquiries, improving our website and services) and those interests are not overridden by your rights |
| Consent | For marketing communications and for non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal |
| Vital interests | In exceptional circumstances where processing is necessary to protect someone’s life or physical safety |
5. Health and sensitive personal data
As a care provider, we regularly handle special category data as defined under UK GDPR — particularly health and medical information about our clients. This type of data is given a higher level of protection.
We process health and sensitive data only where:
- It is necessary for the provision of health and social care services (Article 9(2)(h) UK GDPR)
- You or your representative have given explicit consent
- It is necessary for reasons of vital interest (emergency situations)
- We are required to do so to comply with our legal obligations as a regulated care provider
All staff who handle sensitive personal data are trained in data protection and confidentiality. Access to health and care records is restricted on a strict need-to-know basis.
Safeguarding: We have a duty to report safeguarding concerns to the appropriate authorities. In such circumstances we may need to share personal information with local authorities, the police or other statutory bodies, regardless of consent, in order to protect the safety and welfare of vulnerable individuals.
7. How long we keep your information
We retain personal information only for as long as necessary for the purposes it was collected, or as required by law. Our general retention periods are:
| Type of information | Retention period |
|---|---|
| Client care records (including health information) | 8 years from the end of service (or until the client’s 25th birthday if they were a minor, whichever is longer), in line with NHS guidance and CQC requirements |
| General enquiries and correspondence | 2 years from the date of last contact, unless the enquiry resulted in a service engagement |
| Job applicant information (unsuccessful) | 6 months from the date of the decision |
| Employee and carer records | 6 years from the end of employment, in accordance with employment law requirements |
| Financial and invoicing records | 6 years from the end of the relevant financial year, in line with HMRC requirements |
| Website analytics data | 26 months (Google Analytics default), or as set within our Google account settings |
When personal information is no longer required, it is securely deleted or anonymised.
8. Your rights under UK GDPR
Under UK data protection law, you have the following rights regarding your personal information:
| Right | What it means |
|---|---|
| Right of access | You can request a copy of the personal information we hold about you (a Subject Access Request). We will respond within one calendar month. |
| Right to rectification | You can ask us to correct any inaccurate or incomplete personal information we hold about you. |
| Right to erasure | In certain circumstances, you can ask us to delete your personal data. Note that this right does not apply where we are required by law to retain the information (e.g. care records). |
| Right to restrict processing | You can ask us to restrict how we use your personal data in certain circumstances, for example while you contest its accuracy. |
| Right to data portability | Where processing is based on consent or contract and carried out by automated means, you can ask us to provide your data in a portable format. |
| Right to object | You can object to processing based on our legitimate interests, or to direct marketing at any time. We will stop unless we have compelling grounds to continue. |
| Rights related to automated decision-making | We do not currently use solely automated decision-making that produces legal or significant effects on individuals. |
| Right to withdraw consent | Where processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. |
To exercise any of these rights, please contact us at info@ana-nursing.co.uk or by post at the address above. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
Right to complain: If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would, however, always appreciate the opportunity to address any concerns directly before you contact the ICO.
10. How we keep your information secure
We take the security of your personal information seriously and have appropriate technical and organisational measures in place to protect it against unauthorised access, accidental loss or destruction. These include:
- Secure HTTPS encryption on our website
- Password-protected systems with restricted access
- Staff training on data protection and confidentiality
- Regular review of our security measures
- Secure disposal of personal information when it is no longer needed
While we take every reasonable precaution, no method of internet transmission is 100% secure. If you have concerns about the security of your information, please contact us.
Data breach notification: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and will contact affected individuals directly where required.
11. Links to other websites
Our website may contain links to external websites, including NHS resources, government guidance and social media platforms. These websites have their own privacy policies and we are not responsible for their content or privacy practices. We recommend you review the privacy policy of any website you visit via a link from ours.
12. Children’s privacy
Our website is not directed at children under 13 and we do not knowingly collect personal data from children via our website. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us and we will take steps to delete it.
Where we provide care services to children or young people, we handle their personal data in accordance with our duty of care, safeguarding obligations and the additional protections afforded to children under UK GDPR and the Children Act.
13. Changes to this policy
We may update this Privacy and Cookie Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make significant changes, we will update the “last updated” date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.
Questions about this policy?
If you have any questions about how ANA Nursing handles your personal data, or if you would like to exercise any of your rights, please get in touch.
✉ info@ana-nursing.co.uk 📞 07392 170990
Willesden Centre for Health & Care, Robson Avenue, Willesden, London, NW10 3RY
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk — 0303 123 1113