Privacy Policy & Terms

Privacy Policy

Keystone Compliance ("we", "us") is committed to protecting your personal data. This policy explains what data we collect, why, and how we use it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data we collect

• Name and job title (when you submit our contact or discovery call form)
• Email address and phone number
• Name and CQC rating of your care home
• Any information you voluntarily share during discovery calls or email correspondence

Why we collect it

• To respond to your enquiry and book a discovery call
• To assess how Keystone's services may be relevant to your home
• To send service-related communications once you become a client

We do not use your data for unsolicited marketing without your consent, and we do not sell or share your data with third parties.

How long we keep it

Enquiry data is retained for up to 12 months. Client data is retained for the duration of the service agreement plus 12 months, after which it is securely deleted.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data at any time. To exercise any of these rights, contact us at nauman@keystonecqc.co.uk.

Cookies

This website does not use tracking cookies or third-party analytics tools.

Data Processing (Client Services)

Where Keystone processes personal data on behalf of a client care home as part of delivering our compliance services, we act as a Data Processor under UK GDPR. This is governed by a Data Processing Agreement (DPA) which forms part of every Client Service Agreement.

Data we process on behalf of clients

• Names and contact details of registered managers and care staff
• Anonymised incident data relating to residents (no direct resident identifiers)
• Internal compliance documentation provided by the client

Our commitments as Processor

• Process data only on documented instructions from the client
• Ensure all personnel with data access are bound by confidentiality
• Implement appropriate technical and organisational security measures
• Notify the client without undue delay in the event of a data breach
• Delete or return all personal data on termination of the agreement

All data is processed and stored within the UK. We do not transfer personal data outside the UK without prior written approval from the client.

Terms of Service

These Terms govern your use of keystonecqc.co.uk and any discovery calls or preliminary communications with Keystone Compliance prior to a formal Client Service Agreement.

No advice relationship

Information on this website and during discovery calls is general in nature. It does not constitute regulated legal, financial, or CQC compliance advice. Each home's situation is unique. Formal advice is provided only under a signed Client Service Agreement.

No guarantee of outcomes

Keystone Compliance makes no guarantee that its services will result in a specific CQC rating. CQC inspection outcomes are determined solely by the Care Quality Commission.

Intellectual property

All content on this website, including text, design, and documents, is owned by Keystone Compliance and may not be reproduced without written permission.

Governing law

These Terms are governed by the laws of England and Wales. Any disputes are subject to the exclusive jurisdiction of the courts of England and Wales.

Contact

For any legal or privacy-related queries: nauman@keystonecqc.co.uk