Privacy policy

GoodFolk Care Ltd: Privacy Policy
Effective Date: 14 January 2026

At GoodFolk Care Ltd, we are committed to protecting the privacy and security of our clients ("Service Users") and their families. This policy explains how we collect, use, and protect your personal data.

1. Who We Are
GoodFolk Care Ltd is a companionship and befriending service based in Attleborough, Norfolk. For the purposes of data protection law, we are the "Data Controller."

Company No: 16952801
Email: [email protected]

2. The Data We Collect
We may collect and process the following information:

Contact details: Names, addresses, telephone numbers, and email addresses of the Service User and their emergency contacts.
Health Information: Notes regarding wellbeing, mobility, or cognitive conditions (e.g., Dementia) to ensure our companionship is safe and effective.
Financial Information: Billing addresses and payment records for invoicing.

3. How We Use Your Data
We use your information to:

Provide personalized companionship and befriending services.
Maintain "Service User Plans" and daily activity logs.
Manage billing and payments via our Tide business account.
Comply with legal and insurance requirements.

4. Legal Basis for Processing
Under the UK GDPR, we rely on the following legal bases:

Contract: To fulfill our Service Commencement Contract with you.
Legal Obligation: To keep financial records for HMRC.
Legitimate Interests: To provide the best possible social support and ensure client safety.

5. Sharing Your Data
We never sell your data. We only share information with:

Emergency Services: If a client’s health is at immediate risk.
Professional Advisors: Such as our accountants or insurers.
Family/Advocates: Only as agreed upon in the Service User Plan.

6. Data Security and Retention
We store your data securely (using encrypted digital storage and locked physical files). We keep client records for 6 years following the termination of a contract to comply with UK financial and legal standards.

7. Your Rights
You have the right to:

Access a copy of the data we hold about you.
Ask us to correct any mistakes.
Request that we delete your data (subject to legal retention requirements).