At Catharsis, maintaining the absolute privacy and discretion of our clients is fundamental. As the data controller, we are responsible for how your personal information is managed.
1. Information We Collect
To provide our elite level of bespoke care and Catharsis services, we may collect the following categories of information:
- Identity and Contact Data: Your name, home address, date of birth, contact details (including telephone number and email), and emergency contacts.
- Special Category Data: Allergies, medical, physical, or mental conditions, and specific care needs. This also includes lifestyle preferences such as religious beliefs, racial or ethnic origin, health, and sexuality, insofar as they relate to providing suitable care.
- Financial Data: Credit or direct debit details if you use these methods to pay for our services.
- Technical Data: Information sent by your browser when using our digital platforms, including your IP address, browser type, time zone setting, and URL clickstream data showing products viewed or page response times.
2. Sources of Information
We collect information directly when you visit our website, complete web forms, or subscribe to newsletters. We also obtain information from other trusted sources, including:
- External health care professionals, such as your GP, regarding your specific care needs.
- Your family, friends, nominated representatives, or your Attorney/Deputy.
3. How We Use Your Information
Your personal data is used to ensure the highest standard of personalized service. Specifically, we use it to:
- Prepare, review, and update a suitable care plan based on the services you have requested.
- Communicate with you and appropriate external professionals to personalize your service and make reasonable adjustments for your safety.
- Invoice you for our care and support services.
- Administer and improve our site through data analysis, troubleshooting, and statistical research.
- Provide marketing information about similar services, where permitted by your consent.
4. The Legal Basis for Processing
We process your data strictly under the following lawful bases:
- Performance of a Contract: Processing is necessary to provide you with care and support services.
- Legal and Regulatory Compliance: To demonstrate compliance with our regulatory framework.
- Health and Social Care: Processing special category data is necessary for the provision and management of social care systems.
- Consent: When you subscribe to our newsletters or opt-in to marketing communications.
5. Information Sharing and Discretion
Discretion is the cornerstone of our brand. We will not share, sell, or trade your personal information with third parties outside of the purposes outlined. We share information strictly on a "need to know" basis with:
- Appropriate external social or health care professionals (including your GP) to design the right care package.
- Selected business partners, suppliers, and sub-contractors required to deliver our services.
- Law enforcement or public bodies if required by law to ensure your safety or demonstrate regulatory compliance.
6. Data Retention and Storage
We only keep personal information for as long as necessary. By law, specific records adhere to minimum retention timelines; for example, adult social care records are typically kept for a minimum of 8 years. After this period, data is destroyed, erased, or anonymised. If your data is transferred outside the European Economic Area (EEA), we ensure your privacy rights are protected through appropriate safeguards such as Standard Contractual Clauses.
7. Your Rights
Under applicable data privacy laws, including the GDPR, you possess specific rights regarding your personal information. You have the right to request access to your data, request rectification of inaccuracies, and request the erasure of your personal information.