GDPR Compliance

Last updated: 9th June 2026

Our Commitment to GDPR Compliance

At Mountbatton Care, protecting the privacy, dignity, and personal information of the people we support is fundamental to everything we do.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation. As a care provider, we recognise the responsibility that comes with handling sensitive personal and health-related information, and we take that responsibility seriously.

Our approach to data protection is built on transparency, accountability, security, and respect for individual rights.

 

How We Protect Personal Information

We have implemented appropriate technical and organisational measures to ensure personal data is protected against unauthorised access, loss, misuse, alteration, or disclosure.

These measures include:

  • Secure electronic systems and protected storage environments
  • Access controls ensuring information is only available to authorised personnel
  • Regular staff training on data protection and confidentiality
  • Policies and procedures designed to support GDPR compliance
  • Ongoing monitoring and review of our data protection practices

 

Lawful Processing of Personal Data

We only collect and process personal information when we have a valid legal basis to do so.

Depending on the circumstances, this may include:

  • Providing and managing care services
  • Fulfilling contractual obligations
  • Meeting legal and regulatory requirements
  • Protecting the health, safety, and well-being of service users
  • Obtaining consent where required

Where we process special category data, such as health information, we apply additional safeguards in accordance with UK GDPR requirements.

 

Your Data Protection Rights

Under UK GDPR, individuals have a number of important rights regarding their personal information, including the right to:

  • Access the personal data we hold about them
  • Request correction of inaccurate or incomplete information
  • Request erasure of personal data where appropriate
  • Restrict or object to certain types of processing
  • Withdraw consent where processing is based on consent
  • Request information about how their data is being used
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

We are committed to responding to all legitimate requests in accordance with applicable legal timeframes.

 

Working with Trusted Partners

In order to deliver high-quality care services, we may share information with healthcare professionals, local authorities, regulators, and carefully selected service providers where necessary and lawful to do so.

Any third parties who process personal data on our behalf are required to meet strict data protection and confidentiality standards.

 

Accountability and Continuous Improvement

Data protection is an ongoing responsibility. We regularly review our systems, policies, staff training, and security measures to ensure we continue to meet our legal obligations and maintain the trust of our service users, families, staff, and partners.

 

Contact Us

If you have any questions about how Mountbatton Care processes personal information or wish to exercise your data protection rights, please contact us.

Mountbatton Care Ltd
62–68 Strand Road
Bootle, Merseyside
L20 4BG

Telephone: 0151 920 5797
Email: info@mbcare.org