Privacy Policy

Last Updated: April 2026

This Privacy Policy explains how Hartley Care (a trading name of Dueready Ltd) collects, uses, stores, and protects your personal data when you use our website and services.

We are committed to handling your data transparently and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Hartley Care is a care advisory and coordination service supporting individuals and families across the UK. We help clients navigate care decisions and manage care arrangements.

Legal Entity: Dueready Ltd
Company Number: 16546398
Registered Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE
ICO Registration: ZB924306

2. What Personal Data We Collect

We may collect and process the following:

Identity & Contact Data

  • Name
  • Email address
  • Phone number

Source: Provided directly by you via contact forms or communication.

Care Situation Information

  • Details about care needs
  • Family circumstances
  • Preferences and requirements

Source: Provided by you during enquiries or engagement.

Website Usage Data

  • IP address
  • Browser and device information
  • Website interaction data

Source: Automatically collected via cookies and analytics tools.

3. How We Collect Your Data

We collect data through:

Direct interaction

When you submit a form, contact us, or engage our services.

Automated technologies

We may collect technical data via cookies and analytics tools.

4. How We Use Your Data

We use your data to:

  • Understand your situation
  • Provide advisory and coordination services
  • Communicate with you
  • Improve our services

We do not sell your data.

5. Legal Basis for Processing

We process your data under:

  • Legitimate interest: to respond to enquiries and deliver services
  • Consent: when you submit information voluntarily
  • Contractual necessity: when engaged as a client

5a. Special Category Data

Some of the information you share with us relates to health conditions, care needs, and the circumstances of vulnerable individuals. Under UK GDPR, this is known as "special category data" and requires additional protection.

We process special category data:

  • With your explicit consent
  • Where necessary for the provision of care coordination services
  • Where necessary to protect the vital interests of an individual

We only process what is necessary and handle it with particular care. You can withdraw consent at any time by contacting us.

5b. Data About Other People

When you engage our services, you will typically share information about other people, usually the person who needs care, and sometimes other family members, medical professionals, or advisors.

Where you share information about another person, you confirm that:

  • You have their consent where required, or
  • You have legal authority to share on their behalf (e.g. as an attorney under Power of Attorney), or
  • The information is necessary for their care and it is in their legitimate interests to share it

We handle third party information with the same care as your own data.

6. Sharing Your Data

We may share your data with:

  • Care providers (with your consent)
  • Relevant professionals (e.g. solicitors, advisers)
  • Service providers (e.g. CRM, email systems)

We only share what is necessary. We do not share data for marketing purposes.

6a. Our Service Providers

We use trusted third-party services that may process personal data on our behalf:

  • Email and communications: Google Workspace
  • Website analytics: Google Analytics
  • Website hosting: Cloudflare Pages
  • Form submissions: Formspree
  • Advertising: Google Ads

All are GDPR-compliant and process data only on our instructions. This list will be updated as our service providers change.

7. Data Security

We take appropriate measures to protect your data, including secure systems, restricted access, and confidential handling.

8. Data Retention

We retain personal data for the following periods:

  • Enquiry data (where no engagement follows): 12 months from last contact
  • Client data (active engagements): duration of engagement plus 6 years (for accounting and professional record purposes)
  • Website usage data: 26 months (standard analytics retention)

After these periods, data is securely deleted or anonymised.

9. Your Rights

You have the right to:

  • Access your data
  • Correct inaccuracies
  • Request deletion
  • Restrict or object to processing
  • Withdraw consent

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Cookies

We use cookies to improve website functionality and understand usage patterns. You can control cookies through your browser settings.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to active clients by email. The date at the top of this document shows when it was last updated. Continued use of our services after an update constitutes acceptance of the revised policy.

12. Contact

If you have any questions:

Email: hello@hartleycare.co.uk

Dueready Ltd
3rd Floor, 86-90 Paul Street
London, EC2A 4NE