Effective Date: 20 April 2025
At Denehurst & Stockton Lodge Care Homes, we are committed to protecting the privacy and confidentiality of our residents, their families, staff, and visitors to our website. This Privacy Policy outlines how we collect, use, store, and protect personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or providing personal information to us in any format, you agree to the terms of this Privacy Policy.
Denehurst & Stockton Lodge Care Homes operate two care facilities in County Durham. We provide high-quality residential and nursing care services, including specialist care for individuals with dementia and challenging behaviours.
Our registered offices are located in County Durham, UK. For the purpose of the Data Protection Act 2018 and UK GDPR, we are the data controller responsible for the processing of your personal data.
We collect different types of information depending on how you interact with us — whether you’re a resident, a family member, an employee, a job applicant, or a visitor to our website.
a. Information You Provide
Name, address, telephone number, and email address
Emergency contact details
Medical history and care needs (for residents)
Employment history, DBS checks, and qualifications (for job applicants)
Feedback or correspondence you send to us
b. Automatically Collected Information (Website Use)
IP address
Browser type and version
Pages you visit and time spent on the site
Device type and operating system
Cookie data (see our Cookie Policy section below)
We will only use your personal data when the law allows us to. Most commonly, we will use your data in the following ways:
To provide and manage care services for residents
To contact families or emergency contacts where necessary
To recruit and manage staff and volunteers
To comply with legal and regulatory obligations
To respond to enquiries submitted through our website or email
To improve the quality and usability of our website
To send newsletters or updates if you have opted in to receive them
We do not sell, rent, or trade your personal information to third parties.
Under UK GDPR, we rely on the following legal bases for processing personal data:
Consent: Where you have given us clear permission (e.g. newsletter sign-ups)
Contract: Where processing is necessary for a contract we have with you
Legal obligation: Where we must comply with the law (e.g. CQC regulations)
Vital interests: To protect someone’s life (e.g. medical emergencies)
Public task: For official functions or tasks in the public interest
Legitimate interests: For our general business operations, where these do not override your rights
We may need to share your information with the following:
Healthcare professionals and GP surgeries
Local authorities and social services
CQC and other regulatory bodies
Payroll and HR management services
Legal advisers or safeguarding agencies (if required)
IT service providers and website hosting services
All third parties we work with are required to maintain the confidentiality and security of your data and only use it for the specific purpose it was shared.
We retain personal data only for as long as necessary to fulfil the purpose it was collected for, including for the purposes of satisfying legal, accounting, or reporting requirements.
For example:
Resident records: Kept for a minimum of 8 years after the individual leaves the care home
Employment records: Kept for 6 years after employment ends
Enquiry data: Retained for up to 12 months after communication
After the relevant period, data will be securely deleted or anonymised.
Under data protection law, you have rights including:
Right to access – You can request copies of your personal data
Right to rectification – You can ask us to correct inaccurate or incomplete information
Right to erasure – You can ask us to delete your data in certain circumstances
Right to restriction of processing – You can ask us to limit processing
Right to object – You can object to processing based on legitimate interests
Right to data portability – You can request data be transferred to another provider
To exercise any of these rights, please contact us using the details at the end of this policy. We may require proof of identity before fulfilling your request.
We are committed to ensuring your personal information is secure. We have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the data we collect.
These include:
Secure servers and encrypted communications
Restricted access to sensitive information
Regular audits and staff training
Secure disposal of confidential data
Our website uses cookies to improve user experience and analyze traffic. Cookies are small text files placed on your device when you visit our website.
Cookies we use may:
Store your preferences and settings
Help us understand how the website is used
Improve content and layout based on usage patterns
You can control or delete cookies through your browser settings. Disabling cookies may limit certain functionality on the site. For more details, see our Cookie Policy.
We may update this Privacy Policy from time to time to reflect changes in legislation or how we handle personal data. The most current version will always be posted on our website.
If you have any questions or concerns about this Privacy Policy or how we handle your data, please get in touch:
Denehurst Nursing Home
[Insert Address]
Email: [Insert Email]
Phone: [Insert Phone Number]
Stockton Lodge Care Home
[Insert Address]
Email: [Insert Email]
Phone: [Insert Phone Number]
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you are not satisfied with our response.
Our Homes in County Durham offer trusted nursing, dementia, challenging behaviour and residential care in two warm, welcoming locations.
