Easy Read
Envico
Portal LoginMake a Referral →

Privacy Policy

Last updated: March 2026

1. Who We Are

Envico Supported Living LTD is the data controller for personal data collected through this website and our services. Our registered office is at 59 Commonwealth Avenue, Hayes, Middlesex, UB3 2PN.

For data protection enquiries, contact us at: info@envicosl.co.uk or call 020 8797 9974.

Envico Supported Living LTD is registered with the Information Commissioner's Office (ICO) as required under UK GDPR and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect the following categories of personal data:

  • Name, date of birth and contact details (referral enquiries)
  • Details of care and support needs, diagnoses and medical history (referrals)
  • Employment information (job applications)
  • Communication data (emails, contact form submissions)
  • Technical data (IP address, browser type, cookies — see Cookie Policy)
  • Portal login credentials (family portal users)

We treat health and care-related information as special category data under UK GDPR Article 9 and apply additional safeguards accordingly.

3. How and Why We Use Your Data

We process personal data for the following purposes:

  • Processing referrals and enquiries about our care services
  • Delivering care services and maintaining care records
  • Communicating with families, carers and local authority commissioners
  • Recruiting and employing staff
  • Meeting our legal obligations (CQC, safeguarding, Health & Safety)
  • Improving our website and services

Our lawful basis for processing is typically: legitimate interests, contract performance, legal obligation, or — for special category data — explicit consent or social care provision under Schedule 1 of the DPA 2018.

4. How We Store and Protect Your Data

Personal data is stored on secure, password-protected systems. We use industry-standard encryption for data in transit and at rest. Access is restricted to authorised personnel only.

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Care records are retained in line with NHS/social care retention guidelines (typically 8 years for adults).

We do not sell, rent or share your personal data with third parties for marketing purposes.

5. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion where data is no longer needed
  • Right to restrict processing
  • Right to data portability
  • Right to object — object to processing based on legitimate interests
  • Rights related to automated decision-making

To exercise any of these rights, contact us at info@envicosl.co.uk. We will respond within one calendar month.

6. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

7. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website or services following any changes constitutes acceptance of the updated policy.

Chat on WhatsApp