This policy explains how C M Community Care Services Limited collects and uses personal information through this website. It covers visitors, people who contact us and people who apply for jobs. How we handle information about the people we care for, and our staff, is set out in separate notices we give them directly.
1. Who we are
C M Community Care Services Limited (“CM Community Care”, “we”, “us”) is the controller of the personal information described in this policy. This means we decide how and why it is used.
- Company number: 02311237 (registered in England and Wales)
- Registered office: 86 Tettenhall Road, Wolverhampton, WV1 4TF
- Head office: Lincoln Lodge, 2 Tettenhall Road, Wolverhampton, WV1 4SA
- ICO registration number: Z5389952
- Email: [email protected]
- Telephone: 01902 426364
For any question about this policy or your personal information, email us with “Data protection” in the subject line, or write to us at our head office. [If you have a Data Protection Officer, add their name or role and contact details here.]
2. What information we collect
When you use our contact form, we collect your name, email address, phone number and your message.
When you apply for a job through our careers form, we collect your name, email address, phone number, the office and role you are applying for, and whether you drive.
When you email or phone us, we keep a record of the conversation and the contact details you give us.
When you visit the website, we collect technical information such as your IP address, browser and device type, and the pages you visit. Some of this is only collected if you agree to statistics cookies (see section 4).
Please do not include health information or other sensitive details in the contact form. If you are enquiring about care, we will talk those details through with you directly.
Payments. Our payment links take you to Stripe (card payments) and GoCardless (Direct Debit). We never see or store your full card or bank details.
3. How we use your information and our lawful basis
UK data protection law requires us to have a lawful basis for each way we use personal information. Ours are:
| Purpose | Information | Lawful basis |
|---|---|---|
| Replying to enquiries about our care services | Contact form details, emails, call notes | Legitimate interests (responding to people who contact us) or, where you are asking about arranging care, taking steps at your request before entering a contract |
| Considering job applications | Careers form details, any CV or information you send later | Taking steps at your request before entering a contract, and legitimate interests (recruiting suitable staff) |
| Processing payments | Payment reference, amount, name | Performance of a contract |
| Understanding how the website is used | Analytics data from cookies | Consent (you can withdraw it at any time) |
| Keeping the website secure and working | IP address, technical logs | Legitimate interests (running a secure website) |
| Meeting legal and regulatory duties | Records we must keep, including for CQC | Legal obligation |
We do not sell your information, and we do not use it for automated decisions that have a legal or similarly significant effect on you.
4. Cookies and analytics
We use Google Analytics 4 to understand how people use our website, such as which pages are visited most. Google Analytics only sets cookies if you accept statistics cookies in our cookie banner. We have set it up so that no analytics cookies are used until you agree.
If you decline, Google may still receive limited information without cookies, such as that a page was viewed. Google does not use this to identify you.
We do not currently use advertising or marketing cookies.
Our website fonts are provided by Adobe Fonts. To display them, your browser connects to Adobe’s servers, which receive your IP address.
You can change or withdraw your cookie choices at any time from our Cookie Policy, which also lists the cookies we use.
5. Who we share your information with
We only share your information with organisations that help us run the website and our business. They may only use it to provide their service to us.
| Organisation | What they do |
|---|---|
| 20i | Hosts the website and stores form submissions |
| Microsoft (Microsoft 365) | Our email system |
| Google (Google Analytics) | Website statistics, only with your consent |
| Adobe (Adobe Fonts) | Supplies the website’s fonts |
| Stripe | Processes card payments |
| GoCardless | Processes Direct Debit payments |
Stripe and GoCardless handle your payment details under their own privacy policies.
We may also share information where the law requires it, for example with the Care Quality Commission, the police or a court.
Our website links to other sites, including Indeed, Facebook, Instagram and X. We are not responsible for their privacy practices, so please check their policies.
6. International transfers and security
Some of the organisations above, including Google, Microsoft, Adobe and Stripe, may process information outside the UK, mainly in the United States. When they do, the transfer is protected by safeguards recognised under UK law. These include the UK-US “data bridge” and the ICO’s International Data Transfer Agreement.
We use appropriate technical and organisational measures to keep your information secure. These include encrypted connections (HTTPS), restricted access to form submissions and secure passwords.
7. How long we keep your information
We keep personal information only for as long as we need it.
| Information | How long we keep it |
|---|---|
| General enquiries | [12 months] after our last contact, unless it leads to us providing care |
| Unsuccessful job applications | [6 months] after the recruitment decision |
| Successful job applications | Moved to your staff record and kept as set out in our staff privacy notice |
| Payment records | 6 years, to meet tax and accounting rules |
| Google Analytics data | [14 months] |
When the period ends, we delete the information securely or anonymise it.
8. Your rights
Under UK data protection law, you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use your information
- object to us using your information where we rely on legitimate interests
- ask us to transfer information you gave us to another organisation
- withdraw your consent at any time, where we rely on consent (for cookies, use the settings in our Cookie Policy)
To use any of these rights, contact us using the details in section 1. There is usually no charge. We will respond within one month. For complex requests this can be extended by up to two further months, and we will tell you if so. We may ask you to confirm your identity first.
9. Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can put it right.
- Email [email protected] with “Data protection complaint” in the subject line, or write to us at our head office.
- We will acknowledge your complaint within 30 days.
- We will look into it and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
10. Changes to this policy
We may update this policy from time to time, for example if we add new services to the website. The latest version will always be on this page.
Last updated: 25th September 2026
