Privacy Policy

Ample Care Ltd ("Ample Care","we","us") is a health promotion and workplace wellbeing consultancy working with care and healthcare providers in the United Kingdom.

For the purposes of UK data protection law, our contact details are: hello@amplecare.co.uk / 0333 577 2070. Our registered office is at the address shown in the footer of this website.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Where we process personal data on behalf of a care provider — for example, staff responses to a wellbeing assessment — that provider is the data controller and Ample Care acts as data processor under a written data processing agreement.

Where we process data for our own purposes — for example, responding to an enquiry from your website form — we act as data controller.

Enquiry data: your name, organisation, role, approximate staff count, email address, phone number, and anything you choose to tell us in the message field.

Client and contract data: contact details for the people we work with at your organisation, plus the records needed to deliver and invoice a programme.

Wellbeing assessment data: responses provided by your staff. This may include information about how individuals feel about their work, their workload and their health. Some of this may constitute special category data concerning health, which we handle with additional safeguards.

Website data: basic technical information such as pages visited and approximate location, where analytics are in use.

This is the part care providers ask us about most, so we set it out plainly.

Participation is voluntary. No member of staff is required to take part in a wellbeing assessment, and choosing not to take part has no consequences for them.

Individual responses are never shared with your management team. We report findings in aggregate only.

We apply a minimum group size before reporting any breakdown, so that results cannot be traced back to an individual. Where a team is too small to report on safely, we say so rather than publishing a figure that would identify someone.

Staff are told, before they take part, what we are collecting, why, who will see it, and how long it will be kept.

Assessment data is held within the United Kingdom, and is deleted or returned to you at the end of the engagement in line with the data processing agreement.

If a response discloses a risk of serious harm to the individual or to someone in their care, we will follow the safeguarding escalation route agreed with you in advance. This is the one circumstance in which confidentiality may be limited, and it is disclosed to staff before they take part.

Legitimate interests: responding to business enquiries and communicating with client organisations about work in progress.

Contract: delivering the services we have agreed with your organisation.

Consent: where staff choose to take part in a wellbeing assessment, and for any optional marketing communications.

Legal obligation: retaining records where accounting, tax or other law requires it.

Where we process special category health data, we do so on the basis of explicit consent, or on another applicable Article 9 condition set out in the data processing agreement with the controller.

We do not sell personal data, and we do not share it for advertising.

We use a small number of service providers to run our business — for example email hosting, secure survey tooling, and accounting software. Each is bound by a contract that restricts them to processing data on our instructions.

We will disclose personal data where we are legally required to, or where safeguarding obligations apply as described above.

Enquiries that do not lead to work: kept for a limited period and then deleted.

Client records: kept for the duration of the engagement and then for the period required by accounting and limitation law.

Wellbeing assessment data: kept only as long as needed to deliver and evaluate the programme, then deleted or returned to the controller.

You have the right to ask what personal data we hold about you, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent where consent is our lawful basis.

To exercise any of these rights, contact us at hello@amplecare.co.uk. We will respond within one month.

If your data was provided as part of an assessment commissioned by your employer, your employer is the controller and you may also exercise your rights directly with them. We will support them in responding.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

We use access controls, encryption in transit, and role-based restrictions so that only the people who need access to data have it. Assessment responses are separated from identifying information as early in the process as is practicable.

We will update this page when our practices change, and will note the date of the most recent revision below.