Privacy Policy

Website Privacy Statement

How we collect, use, protect and respect your personal information

Version 1.0  ·  Effective date: 15 June 2026  ·  www.empowerlifesupport.co.uk

1. Introduction and Who We Are

Empower Life Supported Living Limited (referred to as ‘Empower Life’, ‘we’, ‘us’, or ‘our’) is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.empowerlifesupport.co.uk, contact us through it, or interact with us in connection with the services we offer.

We are a CQC-registered supported living provider based in Mosborough, Sheffield, South Yorkshire, supporting adults aged 18–65 with mental health conditions, learning disabilities, autism, physical and sensory disabilities, dementia, and complex needs to live in their own home, build independence, and actively participate in their communities.

Empower Life Supported Living Limited is the data controller in respect of personal information collected through this Website. We are registered with the Information Commissioner’s Office (ICO) as a data controller.

Our legal basis for this statement

This Privacy Statement is produced in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (as amended), and all other applicable UK data protection legislation.

2. Information We Collect

We may collect and process the following categories of personal information when you use our website or contact us:

2.1 Information you provide directly to us

When you complete a contact form, send us an email, make a telephone enquiry, or otherwise communicate with us directly, we may collect:

• Your full name
• Your email address
• Your telephone number
• Your postal address or location
• The name and details of the person you are enquiring about, if you are a family member or professional acting on their behalf
• Details of the care and support needs you are enquiring about
• Your professional role and organisation, if you are a commissioner, social worker, or healthcare professional
• Any other information you choose to include in your communication with us

2.2 Information collected automatically

When you visit our website, we and our third-party technology providers may automatically collect certain technical and usage information, including:

• Your Internet Protocol (IP) address
• The type of device, browser, and operating system you are using
• The pages you visit on our website and the time you spend on them
• The website that referred you to ours, if applicable
• The date and time of your visit and clickstream data
• Technical errors encountered during your visit

2.3 Special category data

In the context of supported living enquiries, we may receive information that constitutes special category personal data under the UK GDPR, including information about a person’s health, disability, or medical conditions. We only collect this information where it is directly relevant to assessing or providing our supported living services, and only where we have a lawful basis for doing so.

Important note about third-party personal data

If you share personal information about another individual with us — for example a family member or a person you support in your professional capacity — you are responsible for ensuring you have the authority to share that information and that the individual has been informed (where appropriate) that their information is being shared with us for the purpose of a supported living enquiry.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

4. Our Legal Basis for Processing

Under the UK GDPR, we are required to have a lawful basis for processing your personal data. The legal bases we rely on are as follows:

4.1 Legitimate interests (Article 6(1)(f) UK GDPR)

We process general contact and enquiry information on the basis of our legitimate interests in operating our business, responding to enquiries, and providing information about our services. We have assessed that our legitimate interests are not outweighed by your rights and interests in these circumstances

4.2 Performance of a contract (Article 6(1)(b) UK GDPR)

Where you are seeking services from us, or where we are arranging a supported living placement, we process personal data as necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.

4.3 Compliance with a legal obligation (Article 6(1)(c) UK GDPR)

We process certain personal data to comply with our legal obligations, including our obligations as a registered care provider under the Health and Social Care Act 2008 and Regulated Activities Regulations 2014, our obligations under the Care Act 2014, and our obligations to the Care Quality Commission.

4.4 Consent (Article 6(1)(a) UK GDPR)

Where we send marketing communications or place non-essential cookies on your device, we will obtain your consent to do so. You have the right to withdraw consent at any time — see Section 7 (Your Rights) for details.

4.5 Special category data — additional legal bases

Where we process special category personal data, including health, disability, and medical information, we rely on the following additional legal bases:

• Article 9(2)(h) UK GDPR, processing necessary for the provision of health or social care treatment, or the management of health or social care systems and services.
• Article 9(2)(b) UK GDPR, processing necessary for carrying out obligations in the field of social protection law.
• Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018, processing for health and social care purposes.

5. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party. We may share your information in the following circumstances only:

5.1 Service delivery partners

We may share information with organisations directly involved in delivering or facilitating a supported living placement, including:

• Sheffield City Council Adult Social Care commissioning and brokerage teams
• NHS South Yorkshire Integrated Care Board
• Hospital discharge coordinators and community healthcare professionals
• Other local authorities acting as permitted purchasers under commissioning frameworks to which Empower Life is appointed, including East Riding of Yorkshire Council
• Landlords and property management parties associated with supported living properties
• Regulated health and social care professionals involved in an individual’s care

5.2 Regulatory and statutory bodies

We may share information with regulatory and statutory bodies where we are legally required or permitted to do so, including:

• The Care Quality Commission (CQC), in connection with our registration and inspection obligations
• The Information Commissioner’s Office (ICO), in connection with data protection obligations
• Local authority safeguarding teams, where a safeguarding concern arises
• The Police or other law enforcement agencies, where required by law or to prevent or detect crime
• HM Revenue and Customs, in connection with our tax obligations

5.3 Technology and service providers

We work with carefully selected third-party technology and service providers who process information on our behalf under binding data processing agreements. These may include website hosting providers, email service providers, analytics providers (including Google Analytics), cloud storage providers, and cybersecurity services

5.4 Professional advisors and business transfers

We may share information with our professional legal, financial, and insurance advisors where necessary. In the event of a merger, acquisition, or transfer of assets, personal data may be transferred as part of that transaction.

Our commitment on data sharing

We only share your personal data with third parties where there is a legitimate reason to do so, where we have a lawful basis under the UK GDPR, and where appropriate safeguards are in place. We do not share personal data for commercial advertising purposes.

6. Data Retention — How Long We Keep Your Information

We retain personal information only for as long as is necessary for the purposes for which it was collected, taking into account our legal obligations, the nature of the information, and the principles of data minimisation under the UK GDPR.

Where personal data is no longer required, we ensure it is securely deleted or anonymised so that it can no longer be associated with any individual.

7. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have a number of rights in relation to your personal information. These are set out below. To exercise any of these rights, please contact us using the details in Section 12.

Right of access (Subject Access Request)

You have the right to request a copy of the personal information we hold about you, together with information about how we use it. We will respond within one calendar month. We will not charge a fee in normal circumstances, although we may charge a reasonable fee if requests are manifestly unfounded or excessive.

Right to rectification

You have the right to ask us to correct any personal information we hold about you that is inaccurate or incomplete. We will respond within one calendar month.

Right to erasure (‘right to be forgotten’)

You have the right to request that we delete your personal information in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. This right is not absolute and does not apply where we are required to retain the information for legal or regulatory reasons.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, for example while the accuracy of the data is being contested, or where you have objected to processing and we are considering your objection.

Right to data portability

Where processing is based on consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.

Right to object

You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing of your personal data for direct marketing purposes, which we will honour immediately upon receipt of your objection.

Rights related to automated decision-making

We do not make automated decisions about individuals that produce legal or similarly significant effects. If this changes, we will inform you and provide the protections required by law.

Right to withdraw consent

Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

How to exercise your rights

To exercise any of the rights listed above, please contact us in writing:

By email: info@empowerlifesupport.co.uk

By post: Data Protection, Empower Life Supported Living Limited, 33 Ruby Lane, Mosborough, Sheffield, S20 5FH

We will respond to all valid requests within one calendar month. In complex cases we may extend this by a further two months and will inform you if this is the case.

We may need to verify your identity before processing your request.

8. Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Secure HTTPS encryption on our website
• Access controls ensuring that personal data is accessible only to authorised personnel with a genuine need to access it
• Password protection and, where appropriate, multi-factor authentication for systems holding personal data
• Regular review and updating of IT security measures
• Staff awareness of data protection obligations and their responsibilities under our internal policies
• Secure disposal of personal data and physical documents containing personal information
• Business continuity and data backup arrangements to protect against data loss

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. If you suspect that your personal information has been compromised, please contact us immediately using the details in Section 12

8.1 Data breaches

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of the breach, as required by Article 33 of the UK GDPR. Where the breach is likely to result in a high risk, we will also notify you directly without undue delay.

9. Cookies

Our website uses cookies and similar technologies. A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to remember your preferences.

9.1 Types of cookies we use

9.2 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymous information about how visitors use the Website. The information generated is transmitted to and stored by Google on servers which may be located outside the UK. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on available at: https://tools.google.com/dlpage/gaoptout

9.3 Managing your cookie preferences

When you first visit our website, you will be presented with a cookie consent banner. You can change your cookie preferences at any time by using the cookie consent settings on our website, or by adjusting your browser settings. Note that disabling all cookies may affect some functionality. For more information about cookies, please visit www.allaboutcookies.org

10. International Data Transfers

Empower Life Supported Living Limited is based in the United Kingdom and primarily processes personal data within the UK. However, some of our technology service providers, including Google (for analytics services), may process data outside the UK.

Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with Chapter 5 of the UK GDPR. These safeguards may include adequacy regulations, International Data Transfer Agreements, Standard Contractual Clauses, or binding corporate rules. If you would like further information about the specific safeguards in place for any international data transfer, please contact us using the details in Section 12.

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and external services, including our LinkedIn page, Facebook page, Instagram account, and Twitter/X account. These third-party platforms have their own privacy policies, which are entirely independent of this Privacy Statement.

We have no control over the content or privacy practices of third-party websites and accept no responsibility for any information collected by them. We encourage you to read the privacy policies of any third-party websites you visit via links on our website before providing any personal information to them.

Our website is built using the WordPress content management system with the Elementor page builder. These platforms may set their own cookies and collect certain technical data. For more information, please refer to the WordPress and Elementor privacy policies.

12. How to Contact Us and Make a Complaint

If you have any questions, concerns, or requests in relation to this Privacy Statement or the way we handle your personal information, please contact us:

Data Protection Contact — Empower Life Supported Living Limited

Name: Martina Nosakhare, Director & Nominated Individual

Address: 33 Ruby Lane, Mosborough, Sheffield, S20 5FH

Email: info@empowerlifesupport.co.uk

Telephone: 07516 608 555

Website: www.empowerlifesupport.co.uk

We aim to respond to all data protection queries within 5 working days, and to all formal Subject Access Requests within one calendar month.

12.1 Making a complaint to the ICO

You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with the way we have handled your personal information. While we would encourage you to contact us first, you can contact the ICO directly:

Information Commissioner’s Office

Website: www.ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Complaints must normally be submitted within three months of your last meaningful contact with us about the issue you are raising.

13. Children’s Privacy

Our Website is not directed at children under the age of 13 and we do not knowingly collect personal information from children under the age of 13 through our Website. If you believe that a child under the age of 13 has provided us with personal information without appropriate parental consent, please contact us immediately using the details in Section 12 and we will take prompt steps to address the matter.

In the context of our supported living services, we may receive information about young adults aged 18 and over who are transitioning into adult services. Where we work with individuals who are still minors, for example in the context of pre-transition planning conversations with Sheffield City Council’s Preparation for Adulthood team, we handle any personal data in accordance with the Children and Families Act 2014, the Care Act 2014, and the additional safeguards required for personal data relating to minors.

14. Changes to This Privacy Statement

We review this Privacy Statement regularly and reserve the right to update it at any time. We will notify you of any material changes by updating the ‘Effective date’ at the top of this document and, where appropriate, by placing a notice on our website or contacting you directly.

We encourage you to check this Privacy Statement periodically to stay informed about how we protect your personal information. Your continued use of our website after any changes are posted constitutes your acceptance of the updated Privacy Statement. Previous versions of this Privacy Statement are available on request.

Empower Life Supported Living Limited  |  Privacy Statement  |  Version 1.0  |  15 June 2026

33 Ruby Lane, Mosborough, Sheffield, S20 5FH  |  info@empowerlifesupport.co.uk  |  07516 608 555