Home Wound Care Ltd — how we collect, use, retain and protect your personal data.
Last updated: 10 November 2025This Privacy Notice applies to patients, visitors, staff members, recruitment candidates, clinicians/consultants, contractors/agency staff, suppliers and visitors to the Home Wound Care Ltd website. It sets out your rights under the UK General Data Protection Regulation (UK-GDPR), alongside the Data Protection Act 2018.
Home Wound Care Ltd (also referred to as "we", "us", "our" in this Notice) is a leading private healthcare organisation working across the UK, delivering care for both NHS and private patients. Our purpose is the advancement of health and the relief of patients suffering.
We do this by:
Home Wound Care Ltd
Registered in England & Wales
Company Number: 14151207
Registered Office: Middleton House, Yapton Road, Middleton-on-Sea, Bognor Regis, PO22 6DU
Data Protection Authority: Information Commissioner's Office (ICO)
ICO Registration Number: ZB341420
To ensure that we process your personal information fairly and lawfully we are required to inform you about:
Within this policy we describe instances where Home Wound Care Ltd is the Data Controller (the organisation which decides what information we collect and how it is used), and where we direct or commission the processing of data to help deliver better healthcare or to assist the management of healthcare services.
There may be situations where Home Wound Care Ltd processes personal data on the instructions of another organisation (i.e., when Home Wound Care Ltd is acting as a "data processor"), but in those circumstances our use of data would be governed by that organisation.
We only collect and use your personal information according to the legal bases defined in the UK-GDPR and for the lawful purposes of administering the business of Home Wound Care Ltd. The legal bases are:
| Reason for Processing | Legal Basis |
|---|---|
| Accounting and auditing | Compliance with legal regulations |
| Advertising and PR | Consent |
| Conducting analysis and research activities | Consent |
| Consultancy and advisory services | Performance of a Contract |
| Education and training for staff members | Legitimate interest — we need to ensure staff have the correct competency to fulfil their role |
| Employment and staff administration | Performance of a Contract |
| Healthcare administration and services | Performance of a Contract |
| Invitation to meetings and other events | Consent |
| Medical records management | Compliance with legal regulations and contractual duties |
| Third party delivery of services | Performance of a Contract |
| Type of Personal Information | Individual Groups |
|---|---|
| Personal identity — title, name, marital status, date of birth, National Insurance number, NHS number | Patients, visitors, staff, recruitment candidates, clinicians/consultants, suppliers, agency staff/contractors |
| Contact details — addresses, telephone & mobile numbers, email address | Patients, staff, recruitment candidates, clinicians/consultants, suppliers |
| Family details — next of kin names, addresses, telephone numbers, relationships | Patients, staff, consultants |
| Financial details — bank sort code/account number, payment card number | Staff, suppliers, clinicians/consultants, agency staff/contractors |
| Employment details — salary, annual leave, pension, benefits, discipline, payroll, tax, performance, occupational health, security clearance | Staff, clinicians/consultants, contractors |
| Education and training — training records, qualification verification, employment history, CVs | Staff, clinicians/consultants, recruitment candidates |
| Health record | Patients |
| Lifestyle and social circumstances — smoking, drinking, general lifestyle | Patients |
| Responses to surveys | Patients, staff |
We also process special categories of information for patients and staff, which may include:
Your data may be used to:
The lawful basis for processing your personal data includes: UK-GDPR Article 9(2)(a) — explicit consent; Article 9(2)(h) — scientific or historical research purposes; and Article 6(1)(e) — performance of a task carried out in the public interest.
Your personal data may be used to:
We may disclose your personal information for a number of reasons, including our obligation to comply with current UK legislation, a contractual commitment to report statutory information, where you have provided consent, or where sharing will ultimately benefit you as the data subject.
In fulfilling our obligation to provide services we may share your data with:
We may from time to time be required to share your information with service providers outside the UK. The transfer of personal data internationally will be conducted with the appropriate legal mechanisms in place, such as an International Data Transfer Agreement or Special Contract Clauses.
From time to time, we may wish to contact you with information about our products, services, or events that we believe may be of interest to you. You have the right to opt out of receiving such marketing communications at any time. If you no longer wish to receive marketing emails, you can unsubscribe by following the instructions in the email or by contacting us directly.
We will use technical and organisational measures (TOMS) to safeguard your data, including access control by unique username and password, and storage of your data on secure servers. Technical and organisational measures include measures to deal with any suspected data breach.
We may also use two-factor authentication where the systems we use require it. Home Wound Care Ltd holds Cyber Essentials Plus certification, demonstrating our commitment to robust information security standards.
If you suspect any misuse, loss or unauthorised access to your data, please let us know immediately via [email protected].
We will keep your personal information in accordance with our Information Retention Policy and for only as long as is lawfully necessary to conduct our business with you, and/or in accordance with our legal obligations for data retention. We also recognise the NHS Records Management Code of Practice.
The UK-GDPR provides a number of rights over your data, subject to certain criteria being met:
It is important that the data we hold about you is accurate and current. Please keep us informed if your data changes during the period for which we hold it.
This website may from time to time provide links to other websites. We have no control over such websites and are not responsible for their content. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.
Home Wound Care Ltd is not a public authority and is not governed by the Freedom of Information Act.
We may revise this privacy policy from time to time. Any changes we make will be posted on this page. This policy was last updated on 10 November 2025. The last amendment was a correction to the company address.
Questions, comments and requests regarding this privacy policy are welcomed. Please contact our Data Protection Officer:
Home Wound Care Ltd
Middleton House, Yapton Road, Middleton-on-Sea, Bognor Regis, PO22 6DU
Email: [email protected]
Or use the contact form on our main site.
If you are not satisfied with our response or the way we are processing your personal information, you can contact the Information Commissioner's Office (ICO) at www.ico.org.uk. The ICO is the statutory body which oversees data protection law in the UK.