1. Who We Are

ElderBridge provides non-medical companionship services to elderly individuals in the UK. We are not a care provider and do not collect health data.

2. What Data We Collect

We collect only the following data from companions and clients:

• Identity Data: Name, date of birth (age verification only).
• Contact Data: Address, email address, phone number.
• Scheduling Data: Visit dates, times, duration, location.
• Emergency Contact: Name and phone number of a nominated person.
• Companion Data: DBS check status, references, training records.

3. Legal Basis for Processing (UK GDPR)

We process your data under the following lawful bases:

• Contract (Article 6(1)(b)): To provide companionship services you request.
• Legitimate Interests (Article 6(1)(f)): To ensure companion safety, manage cancellations, and prevent fraud.
• Legal Obligation (Article 6(1)(c)): To comply with UK employment and safeguarding laws.

4. How We Use Your Data

• To match companions with clients based on location and availability.
• To communicate visit confirmations, changes, or cancellations.
• To contact emergency contacts if a client is unresponsive or at risk.
• To comply with DBS and safeguarding requirements for companions.

5. Data Retention

6. Data Sharing

We do not sell your data. We share only:

• With emergency services (999) if there is a serious safety concern.
• With legal authorities if required by UK law (e.g., court order).
• With our scheduling software provider (GDPR-compliant Data Processing Agreement in place).

7. Your Rights (UK GDPR)

You have the right to:

• Access – Request a copy of your data (free, within 30 days).
• Rectification – Correct inaccurate data.
• Erasure – Request deletion (unless legally required to retain).
• Restrict – Limit how we use your data.
• Object – Object to legitimate interests processing.
• Portability – Transfer your data to another provider.

To exercise any right, email: elderbridgecompanion@gmail.com

8. Data Security

We implement:

• Encrypted storage for all personal data.
• Access restricted to authorised staff only.
• Regular security audits and staff training.

9. International Transfers

All data is stored within the UK/EU. We do not transfer your personal data outside the United Kingdom.

10. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO): www.ico.org.uk