Privacy Policy
Last updated: 31 December 2025
Introduction
Next Chapter Support Group is committed to protecting your privacy and handling personal information in a safe, transparent and responsible way. This Privacy Policy explains how we collect, use, store and protect personal data when you interact with us, use our services, visit our website, or apply for a role with us.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Next Chapter Support Group
123 Care Street
East London, E1 1AA
United Kingdom
Telephone: 020 1234 5678
Email: info@nextchaptergroup.co.uk
CQC Registration Number: 1-123456789
We are a CQC-regulated care provider supporting adults and young people with learning disabilities, autism, mental health needs and complex support requirements.
What Personal Data We Collect
We may collect and process the following types of personal data:
a) Service Users and Families
Name, address, date of birth and contact details
Health and care information (including support needs and care plans)
Emergency contact and next-of-kin details
Communication records and assessments
b) Staff and Job Applicants
Contact details and employment history
Right-to-work information
DBS and safeguarding information
Training records and performance information
c) Website and General Enquiries
Names and contact details submitted via forms or email
IP address and basic website usage data
Special Category Data
As a care provider, we may process special category data, including health and safeguarding information. This data is handled with the highest level of security and only processed where it is necessary, lawful and proportionate.
How We Use Personal Data
We use personal data to:
Deliver safe, effective and person-centred care
Develop and manage individual care plans
Safeguard vulnerable individuals
Recruit, train and support our staff
Meet legal, regulatory and CQC requirements
Communicate with service users, families and professionals
Respond to enquiries and complaints
Improve our services
Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
Consent
Performance of a contract
Legal obligation
Vital interests
Public task
Legitimate interests
For health and care data, we rely on additional lawful bases permitted under UK GDPR for health and social care services.
Safeguarding and Staff Training
Safeguarding is central to how we handle personal data. All staff receive:
Enhanced DBS checks
Mandatory safeguarding training and regular updates
Ongoing supervision and monitoring
Clear whistleblowing and incident reporting guidance
Access to personal data is limited strictly to authorised staff who require it to perform their role.
Sharing Personal Data
We only share personal data where necessary and lawful. This may include:
Local authorities and commissioning bodies
Healthcare professionals and multidisciplinary teams
Regulatory bodies such as the CQC
Payroll, HR or IT providers acting as data processors
All third parties are required to protect personal data in line with data protection law.
Data Storage and Security
We take appropriate technical and organisational measures to protect personal data, including:
Secure electronic systems and access controls
Encrypted devices where required
Secure storage of paper records
Regular reviews of data protection practices
We retain personal data only for as long as necessary and in line with legal and regulatory requirements.
Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of data (where applicable)
Restrict or object to processing
Request data portability
Withdraw consent (where consent is the lawful basis)
Requests can be made by contacting us using the details above.
Complaints
If you are unhappy with how we handle your personal data, you can contact us directly. You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law or our services. The latest version will always be available on our website.