Privacy Policy

At Gurkha Health & Services Ltd, we are committed to protecting the privacy of our clients and website visitors. This notice explains how we collect, use, and protect your personal information in line with UK data protection law, including the UK GDPR.

1. Information We Collect

We only collect the information we need to provide our health and care services to you, which may include:

• Personal Data – such as your name, contact details, and address.
• Health Data (Special Category Data) – such as relevant medical history or information about your care and support needs.
• Technical Data – such as IP address and basic website usage information collected via cookies or similar technologies.

2. How We Use Your Data

We use your personal data for the following purposes and legal bases:

• Contract – to assess your needs, deliver the care and services you have requested, and manage our relationship with you.
• Consent – for specific activities, such as certain health data processing or optional marketing communications. You can withdraw your consent at any time.
• Legal Obligation – to meet our responsibilities under UK healthcare, safeguarding, and safety regulations.
• Legitimate Interests – to improve our services, respond to enquiries, and keep our website secure and functional, where this does not override your rights.

3. Sharing Your Data & Security

We do not sell your personal data to anyone. We may share your information only when necessary with:

• Trusted healthcare partners or regulators – such as the NHS, local authorities, or the Care Quality Commission (CQC), where this is required for your care or by law.
• Service providers – such as IT, hosting, or system support providers who help us operate our services and who are required to keep your data secure and confidential.

We use appropriate technical and organisational measures, including encrypted connections (SSL) and secure storage, to protect your information from loss, misuse, or unauthorised access.

4. How Long We Keep Your Data

We keep your personal data only for as long as is necessary for the purposes described in this notice, or as required to meet legal, regulatory, or professional obligations. Retention periods may vary depending on the nature of the service and the type of record.

5. Your Rights

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct any inaccurate or incomplete information.
• Request the deletion of your data in certain circumstances.
• Restrict or object to certain types of processing.
• Withdraw consent where we rely on consent as the legal basis for processing (this does not affect past processing carried out before consent was withdrawn).

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding to your request.

6. Contact & Complaints

If you have any questions about this privacy notice or how we handle your data, please contact our data protection lead: