Privacy notice
What we collect, why we collect it, where it goes and how to get it back or have it deleted.
This notice covers this website and the enquiries and job applications made through it. Once someone becomes a client we give them a separate, fuller notice about care records, because that information is handled differently.
Who is responsible
Brume Healthcare Services Limited is the data controller. We are registered in England and Wales, company number company number — to be added, at 97 Rose Street, Chadderton, Oldham OL9 8ER.
The person responsible for data protection here is Anthony Onomuodeke. Anything in this notice can be raised with them at [email protected] or on 07399 691247.
We are registered with the Information Commissioner's Office under registration ICO registration number — to be added.
What we collect, and why
If you make an enquiry about care
The form asks for your name and phone number, and optionally your email, the postcode where care is needed, who the care is for, how it would be paid for, and a short description of what is happening. We use it to call you back and to work out whether we can help.
The message box is free text, so if you choose to tell us about someone's health we will have it. Information about health is special category data under UK GDPR, and we treat anything you write there as if it is. Please only tell us what you need to — the rest is better said on the phone.
Our lawful basis is Article 6(1)(b), taking steps at your request before entering a contract. Where a message contains health information, the additional basis is Article 9(2)(h), the provision of health and social care, and we handle it under the confidentiality duties that come with that.
If you apply to work with us
The application form asks for your name, phone number, email, postcode, whether you drive, your experience, your availability, and anything else you want to tell us. We use it to decide whether to invite you to talk to us.
Our lawful basis is Article 6(1)(b), steps before an employment contract, and for anything touching employment law, Article 9(2)(b). We do not ask for a CV on the form and we do not ask about health or criminal records at this stage. If we offer you work, DBS and right-to-work checks happen then, and we will explain them separately.
If you just read the site
Nothing. This website sets no cookies, stores nothing on your device and runs no analytics or advertising. There is more detail on the cookies page.
Where your information goes
When you submit a form it is saved to a database and an email is sent to us. We use two suppliers, and both act only on our instructions:
- Cloudflare hosts the website, runs the anti-spam check on the forms, and provides the database the submissions are written to. That database is located in Western Europe.
- Mailgun delivers the notification email to us. We use their European region, so the message is processed in the EU.
Both are data processors under a written agreement. We do not sell your information, we do not share it for marketing, and we do not transfer it outside the UK or EU. Nobody outside Brume reads your enquiry unless the law requires it, or unless there is a safeguarding concern — if we believe someone is at risk of harm we may have to tell the local authority or emergency services, and we would not need your permission to do that.
How long we keep it
- Enquiries: 24 months from your last contact with us.
- Applications from people we do not take on: 12 months, so we can come back to you if something suitable appears.
- If you become a client, care records are kept for the period required of care providers and covered by the separate notice we give you.
After that it is deleted automatically. You can ask us to delete it sooner.
Keeping it safe
The site is served over HTTPS only. Form submissions are checked for automated abuse before they are accepted, and are written to the database before any email is attempted, so nothing is lost if email fails. Our logs record that a submission happened, not what was in it. Access to enquiries and applications is limited to the people at Brume who need it.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of what we hold about you;
- correct anything that is wrong;
- delete it;
- stop or limit what we do with it;
- send it to you, or another provider, in a portable form;
- stop relying on legitimate interests, where that is our basis.
Email [email protected] or call us and we will deal with it within one month. There is no charge. We may ask you to confirm who you are first, so that we do not hand someone's details to the wrong person.
We do not make any decision about you by automated means, and we do not profile you.
If you are unhappy with how we have handled your information
Tell us first — [email protected]. If we do not put it right you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You can go to them at any point; you do not have to come to us first.
Changes
If we change what we do with your information we will update this page and change the date below. If the change is significant and we hold your details, we will tell you directly.
Last updated 24 September 2026.