Privacy Policy

Step Forward Living is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information in line with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Regulation and Inspection of Social Care (Wales) Act 2016

This policy applies to visitors to our website, individuals who contact us, and those who may receive or enquire about our services.

Step Forward Living is a supported living provider delivering domiciliary care and support services to adults.

We may collect and process the following types of personal data:

We use personal data to:

• Respond to enquiries and provide information about our services
• Manage referrals and initial assessments
• Improve our website and user experience
• Maintain records for administrative and regulatory purposes

We process personal data under the following lawful bases:

• Legitimate interests — to respond to enquiries and operate our service
• Legal obligation — where required by law or regulatory bodies (e.g. Care Inspectorate Wales)
• Consent — where you have provided clear consent, such as via contact forms

We may share information where necessary with:

• Local Authorities or Health Boards — for referral or safeguarding purposes
• Care Inspectorate Wales (CIW)
• Safeguarding agencies or the Police where required by law
• Professional advisors such as accountants and legal advisors

All sharing is done lawfully, securely, and only where necessary.

As a regulated care provider, Step Forward Living may be required to share information without consent where:

• There are safeguarding concerns relating to an individual
• There is a risk of harm to an individual or others
• We are legally required to do so by law or a regulatory body

We take appropriate measures to ensure your data is secure, including:

• Secure electronic systems and password protection
• Restricted access to authorised personnel only
• Secure storage of records
• Staff training in confidentiality and data protection

We will only retain personal data for as long as necessary. Retention periods depend on:

• The purpose for which the data was collected
• Legal and regulatory requirements applicable to our service

Where data is no longer required, it will be securely deleted or destroyed.

Under UK GDPR, you have the following rights in relation to your personal data:

Our website may use cookies to improve user experience. Cookies may:

• Help us understand how the website is used
• Improve site functionality

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the site.

Our website may contain links to other websites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing the privacy policy of any external site you visit.

This policy will be subject to regular review to ensure it remains effective, up to date, and reflective of best practice. Reviews will take place:

• At least annually
• Following incidents, safeguarding concerns, or audit findings
• In response to changes in legislation, regulation, or national guidance
• Where learning identifies the need for improvement

If you have any questions about this Privacy Policy or how your data is handled, please contact us: