Last Updated: January 7, 2026

1. Introduction

Wisdom and Sons Care Limited (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company Details:

• Company Name: Wisdom and Sons Care Limited
• Registered Address: 2 Walsh Close, Newton-le-Willows, WA12 0AY, St Helens, Merseyside, United Kingdom
• Contact Email: info@wisdomandsonscare.com
• Contact Phone: +44 7404 022971

2. Data Controller

Wisdom and Sons Care Limited is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above.

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

For Training Applicants and Students:

• Full name
• Email address
• Phone number
• Date of birth
• Nationality and country of birth
• National Insurance Number
• Postcode and address
• Gender
• Ethnicity
• Disability information
• Previous healthcare training history
• Qualifications and certifications
• Employment history
• Uploaded documents (CVs, certificates, identification)

For Clients and Service Users:

• Contact information (name, email, phone)
• Medical and care needs
• Service preferences
• Payment information
• Emergency contact details

For Website Visitors:

• Name and email address (when you contact us)
• Newsletter subscription information
• Enquiry details

3.2 Information We Collect Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source
• Device information
• Cookies and similar tracking technologies

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent (e.g., subscribing to newsletters)
• Contract: To fulfill contractual obligations (e.g., providing training services)
• Legal Obligation: To comply with legal requirements (e.g., safeguarding, CQC regulations)
• Legitimate Interests: For our business operations, provided your rights are not overridden
• Vital Interests: To protect someone’s life or safety
• Special Category Data: Where necessary for healthcare provision, with your explicit consent or under legal obligations

5. How We Use Your Personal Data

We use your personal data for the following purposes:

5.1 Training and Education Services

• Processing training applications
• Delivering accredited training programs
• Assessing and certifying competencies
• Maintaining training records
• Communicating course information

5.2 Care Services

• Assessing care needs
• Planning and delivering care services
• Maintaining care records
• Safeguarding vulnerable individuals
• Quality assurance and improvement

5.3 Business Operations

• Responding to enquiries
• Managing customer relationships
• Processing payments
• Maintaining business records
• Improving our services
• Marketing (with consent)
• Legal and regulatory compliance

5.4 Website Functionality

• Providing website features
• Analyzing website usage
• Improving user experience
• Security and fraud prevention

6. Special Category Data

We process special category data (sensitive personal information) including:

• Health information
• Disability information
• Ethnic origin
• Biometric data (if applicable)

We process this data only when:

• You have given explicit consent
• It’s necessary for healthcare provision
• It’s required by law (e.g., equality monitoring, safeguarding)
• It’s necessary to protect vital interests

7. Who We Share Your Data With

We may share your personal data with:

7.1 Regulatory Bodies

• Care Quality Commission (CQC)
• Skills for Care
• Ofqual and awarding organizations
• Health and Safety Executive

7.2 Professional Bodies

• Relevant accreditation bodies
• Professional registration organizations

7.3 Service Providers

• IT service providers
• Payment processors
• Training platform providers
• Email marketing services
• Website hosting providers
• Document storage providers

7.4 Legal and Emergency Situations

• Law enforcement agencies (when legally required)
• Emergency services (to protect vital interests)
• Legal advisors and auditors
• Safeguarding authorities

7.5 Third Parties with Your Consent

• Employers (for training verification)
• References and background check providers
• Insurance providers

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

8. International Data Transfers

We primarily store and process data within the UK and European Economic Area (EEA). If we transfer data internationally, we ensure:

• Adequate protection through UK GDPR adequacy decisions
• Standard contractual clauses
• Appropriate safeguards are in place

9. Data Retention

We retain personal data only as long as necessary for the purposes outlined:

• Training Records: Minimum 3 years after course completion (or longer if required by accrediting bodies)
• Care Records: As required by CQC regulations (typically 6+ years)
• Financial Records: 6 years minimum for tax purposes
• Marketing Consent: Until you withdraw consent
• Website Analytics: Typically 26 months
• CCTV Footage: 30 days (if applicable)

After retention periods expire, we securely delete or anonymize your data.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

10.1 Right of Access

Request a copy of your personal data we hold (Subject Access Request)

10.2 Right to Rectification

Request correction of inaccurate or incomplete data

10.3 Right to Erasure (“Right to be Forgotten”)

Request deletion of your data in certain circumstances

10.4 Right to Restriction of Processing

Request we limit how we use your data

10.5 Right to Data Portability

Receive your data in a structured, machine-readable format

10.6 Right to Object

Object to processing based on legitimate interests or for direct marketing

10.7 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling. If this changes, we will update this policy.

10.8 Right to Withdraw Consent

Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at: info@wisdomandsonscare.com

We will respond within one month (extendable to three months for complex requests).

11. Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (SSL/TLS)
• Secure password protection
• Access controls and authentication
• Regular security audits
• Staff training on data protection
• Secure backup systems
• Firewall and anti-virus protection
• Confidentiality agreements with staff and contractors

12. Cookies and Tracking Technologies

Our website uses cookies to improve functionality and analyze usage. You can control cookies through your browser settings.

12.1 Types of Cookies We Use

Essential Cookies: Necessary for website operation Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics) Functional Cookies: Remember your preferences Marketing Cookies: Track effectiveness of marketing campaigns (with consent)

For detailed information, see our Cookie Policy.

13. Children’s Privacy

Our training services are for individuals aged 16 and over. We do not knowingly collect data from children under 16 without parental consent. If we become aware of such collection, we will delete the data promptly.

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will:

• Notify the Information Commissioner’s Office (ICO) within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to mitigate harm

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date. Significant changes will be communicated via email or prominent website notice.

16. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

17. Marketing Communications

With your consent, we may send marketing communications about:

• Training courses and opportunities
• Healthcare industry updates
• Company news and services

You can opt-out at any time by:

• Clicking “unsubscribe” in emails
• Contacting us at info@wisdomandsonscare.com
• Updating preferences in your account

18. Contact and Complaints

18.1 Contact Us

For questions about this Privacy Policy or data protection:

Email: info@wisdomandsonscare.com Phone: +44 7404 022971 Address: 2 Walsh Close, Newton-le-Willows, WA12 0AY, St Helens, Merseyside

18.2 Complaints

If you’re unhappy with how we’ve handled your data, you have the right to complain to:

Information Commissioner’s Office (ICO)

• Website: www.ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.