Privacy Notice

Serenity Supported Living AC&YP Ltd is the data controller for the personal information described in this notice. Company number 15317061 . Registered office: . ICO registration number: .

If you have any questions about this notice or your information, contact our data protection lead at or call 01274 442810.

When you contact us through this website, we may collect your name, email address, phone number, your role or organisation and the details you include in your message.

When a professional makes a placement enquiry, we collect non identifying information at first, such as the young person's age range, preferred area and a summary of support needs. If a placement is considered, we then collect fuller referral information through a secure process.

For young people we support, we hold information needed to provide safe support, such as contact details, support and care plans, risk assessments, education and employment information and records shared with social workers.

When you apply for a job, we collect the information in your application and CV.

When you visit our website, we collect limited technical information through cookies, but only with your consent for anything that is not essential. See our Cookie Policy.

Some information we hold about young people is more sensitive, such as information about physical or mental health, ethnicity or religion. We only collect this when it is necessary to provide safe and appropriate support, to meet our legal and regulatory duties or to protect someone's safety.

We handle this information under UK GDPR Article 9, relying mainly on the conditions for health and social care and for safeguarding children and individuals at risk, together with the relevant conditions in Schedule 1 of the Data Protection Act 2018 . We keep an appropriate policy document in place for this processing.

Please do not include medical records or detailed case histories in our website forms. We will arrange a secure way to share these when needed.

• To respond to enquiries and callback requests: legitimate interests in replying to people who contact us.
• To assess and manage placements and provide support: performance of a public task or contract with the placing local authority, and legal obligations .
• To meet regulatory, safeguarding and legal duties: legal obligation and, where someone is at risk, vital interests.
• To handle complaints and feedback: legitimate interests and legal obligation.
• To recruit staff: steps before entering a contract and legal obligation, including right to work and safer recruitment checks.
• To understand how our website is used: consent, given through our cookie banner.

We only share personal information when it is necessary and lawful. This may include placing local authorities, social workers and personal advisers, Ofsted and other regulators, health and education services, the police or children's services where someone may be at risk, and trusted suppliers who help us run our systems, such as our website host, form database and email provider. Our suppliers only act on our instructions and must keep information secure.

We never sell personal information.

Information is stored in secure systems with restricted access. Some of our suppliers may store data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contract clauses .

We keep information only for as long as we need it. Website enquiries that do not lead to a placement are kept for months. Records about young people we support are kept in line with the legal and regulatory retention periods set out in our retention policy . Unsuccessful job applications are kept for months.

You have the right to ask for a copy of your information, to ask us to correct it, to ask us to delete it or restrict how we use it, to object to how we use it and, in some cases, to ask us to transfer it. Where we rely on your consent, you can withdraw it at any time.

Young people we support can ask for their records. Care leavers can also request records held by children's services once they are 18.

To make a request, contact our data protection lead. We will respond within one month.

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We may update this notice from time to time. The latest version will always be on this page.