Privacy Policy

Policy Ref: 053

Last Reviewed: October 2026

Approved By: Board of Directors

1. Purpose of This Notice

This Privacy Notice explains how St. Mary’s Care Home (Stone) Limited collects, uses, stores, and protects your personal data in accordance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice applies to prospective and current residents, family members, visitors, suppliers, and job applicants.

2. About Us (Data Controller)

St. Mary’s Care Home (Stone) Limited is the 'Data Controller' responsible for deciding how your personal information is held and processed.

Registered Entity: St. Mary's Care Home (Stone) Limited
Address:St. Mary's Care Home (Stone) Limited, Margaret Street, Stone, Staffordshire, ST15 8EJ
Telephone: 01785 813894
Email: info@stmarysstone.com

We have appointed a designated Data Protection Lead to oversee data protection compliance. If you have any questions regarding this notice, please contact us using the details in Section 10.

3. How we may collect your personal data

We collect personal information when:

You enquire about our residential, nursing, respite, or dementia care services.
A resident or their legally appointed representative (e.g., Power of Attorney) engages us to provide care services.
You contact us via our website (stmarysstone.com), phone, email, or contact forms.
We receive referrals from healthcare partners, including Local NHS Trusts, GP practices, adult social care teams, or hospital discharge coordinators.

9. Contact Us & ICO Complaints

If you have questions about this privacy notice or how we handle your data, please contact our Data Protection Lead:

Email: info@stmarysstone.com
Telephone: 01785 813894
Post: St Mary's Home, Margaret Street, Stone, Staffordshire, ST15 8EJ

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113 | Website: ico.org.uk

4. The Information We Hold About You

We may collect, store, and process the following categories of information:

Basic Personal Details: Name, postal address, email address, telephone number, date of birth, and emergency contacts.
Care & Financial Details: Care plans, billing records, funding arrangements, and correspondence regarding care provision.
Special Category Data (Health Data): Medical history, dietary needs, GP details, medication records, and clinical assessments necessary to deliver safe, tailored care.

5. How We Use Your Personal Data

We process your personal data under the following lawful bases:

Contractual Necessity: To perform our care agreement with you or your legal representative.
Legal & Regulatory Obligations: To comply with Care Quality Commission (CQC) standards, health and safety laws, and safeguarding legislation.
Legitimate Interests: To maintain site security, improve our facilities, respond to feedback, and manage business operations.
Vital Interests: To protect a resident's life or health in emergency medical situations.

6. Data Sharing

We do not sell your data. We share personal information only when legally required or necessary to deliver safe care:

Healthcare Professionals: GP Practices, NHS Trusts, hospitals, pharmacy suppliers, and district nurses.
Regulatory Bodies: Care Quality Commission (CQC), Local Authorities, and Social Services.
Third-Party Service Providers: Secure IT hosting providers, cloud software vendors, and professional advisory services bound by strict confidentiality.

7. Data Security & Retention

We maintain physical, technical, and administrative security measures to protect your personal information against unauthorized access, loss, or misuse.

Personal data is retained only for as long as necessary to fulfill care requirements, satisfy legal and regulatory retention periods (such as medical record retention laws), and settle financial accounts.

8. Your Data Rights

Under UK GDPR, you have the right to:

Request Access: Obtain a copy of the personal data we hold about you.
Request Correction: Ask us to rectify inaccurate or incomplete records.
Request Erasure: Ask us to delete personal data where there is no legal requirement for us to keep it.
Object / Restrict Processing: Object to or restrict processing based on legitimate interests.

To exercise any of these rights, please email us at info@stmarysstone.com.

Contact

St. Mary's Care Home (Stone) Limited

Margaret Street,

Stone,

Staffordshire,

ST15 8ER

Tel: +44 (0)1785 813894

Email: info@stmarysstone.com

Cookie Policy

Website Terms & Conditions

Accessibility Statement

CQC Statement of Purpose

st mary's care home