Privacy policy
Our Privacy Policy
Last updated September 2026.
Rock Cottage Care Home is committed to protecting the privacy of everyone who contacts us, visits this website, lives in our home, or is close to someone who does. This policy explains what personal information we collect, why we collect it, how we look after it, and the rights you have over it.
This policy is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Rock Cottage Care Home, Breach Road, Brown Edge, Stoke on Trent, Staffordshire, ST6 8TR, is the data controller for the personal information described in this policy. This means we decide how and why your information is used.
If you have any question about this policy or about how we handle your information, please contact us on 01782 503120 or at enquiries@rockcottagecarehome.com.
The information we collect
The information we hold depends on your relationship with us.
If you enquire about care — your name, telephone number, email address, the type of care you are asking about, the age of the prospective resident, and anything else you choose to tell us in your message.
If you or a relative lives with us — contact and next-of-kin details, care needs and preferences, medical and medication records, care plans and daily notes, dietary and mobility requirements, GP and other healthcare contacts, funding arrangements, and records of visits.
If you visit the home — your name, who you are visiting, and the date and time of your visit, recorded in our visitor log.
If you visit this website — limited technical information such as your IP address, browser type and the pages you view, collected through cookies and similar technologies.
Health and other special category information
Providing care means we necessarily hold information about health, and sometimes about religious beliefs, ethnicity or other sensitive matters where these affect the care and support someone receives. The law treats this as special category data and requires additional protection.
We only collect what we need in order to provide safe and appropriate care, we limit access to those members of the team who need it to do their job, and we never use it for marketing.
Why we use your information, and our lawful basis
To respond to your enquiry and arrange a visit — because it is in our legitimate interests to answer people who contact us, and because we are taking steps at your request before entering into a contract.
To provide care and support — to perform our contract with the resident or their representative, and, for health information, because it is necessary for the provision of health and social care.
To meet our legal and regulatory duties — including our obligations to the Care Quality Commission, to safeguarding authorities, and under health and safety and employment law.
To protect someone in an emergency — where it is necessary to protect the vital interests of a resident or another person.
To keep the home secure and operating properly — because it is in our legitimate interests to do so.
Who we share information with
We do not sell personal information, and we do not share it for anyone else’s marketing. We do share it where care or the law requires it, including with GPs, district nurses, hospitals and other NHS services; with the local authority and, where relevant, NHS commissioners funding a placement; with the Care Quality Commission and safeguarding teams; with pharmacies dispensing medication; with our professional advisers and IT suppliers, who act on our instructions; and with family members or representatives where the resident has agreed, or where they lack capacity and it is in their best interests.
How long we keep it
We keep information only as long as we need it. Care records are retained in line with the NHS Records Management Code of Practice. Enquiries that do not lead to a placement are kept for a limited period and then deleted. Visitor logs and any CCTV footage are kept for a short period unless needed for an investigation.
Keeping information safe
We hold paper records securely on site and electronic records in access-controlled systems. Our team receive data protection and confidentiality training, and access is limited to those who need it for their role.
Your rights
You have the right to ask for a copy of the information we hold about you, to have inaccurate information corrected, to ask us to delete information or restrict how we use it, to object to certain uses, and to ask for your information in a portable format. Where we rely on consent, you can withdraw it at any time.
These rights are not absolute, and some do not apply where we are required by law to keep care records. To make a request, contact us using the details above. We will respond within one month.
Cookies
This website uses cookies to make the site work and to help us understand how it is used. You can control cookies through your browser settings. Blocking some cookies may affect how parts of the site function.
Complaints
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We review this policy regularly and will update this page when it changes. This version was published in September 2026.