KPMSUK Ltd provides trauma-informed residential and supported accommodation services for children and young people in care. This Privacy Notice explains how we handle your personal data lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

We process personal data for a wide range of individuals including young people, families, applicants, staff, service users, and professionals. In most cases, KPMSUK Ltd is the Data Controller, but in some instances, we act as a Data Processor on behalf of another authority (e.g., Local Authorities).

KPMSUK Ltd
Park Lane Business Centre Unit 6,
Park Lane, Langham, Colchester,
Essex, England, CO4 5NL

Email: info@kpmsuk.com

You also have the right to contact the Information Commissioner’s Office (ICO) at www.ico.org.uk. However, we encourage you to reach out to us first to resolve any concerns.

You have rights under data protection law, which may include:

- Right to be informed
- Right of access (subject access requests)
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time

To exercise your rights, email info@kpmsuk.com.

We may collect:

- Identity and Contact Data
- Sensitive/Special Category Data (health, ethnicity, etc.)
- Profile and Technical Data (e.g., job title, browsing data)
- Usage Data from interactions with our website
- Communications and marketing preferences

Data is collected through:

- Direct interactions (referrals, employment, communication)
- Website forms and online systems (hosted on Wix)
- Public sources (e.g. Companies House)
- Partner agencies and third-party providers

We use personal data based on one or more lawful bases:

- Consent
- Contractual necessity
- Legal obligation
- Legitimate interest
- Vital interest

Uses include providing care, managing staff, communicating with referrers, safeguarding, improving services, and meeting legal duties.

We may share personal data with:

- Local Authorities, health and social care professionals
- IT providers and hosting platforms (e.g., Wix)
- Legal, financial, and regulatory authorities

All recipients are required to handle your data securely and legally.

We protect your data using technical and organisational measures. Access is limited to authorised personnel and processors, all of whom are required to maintain confidentiality and security.

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, and in accordance with legal, contractual, or regulatory obligations.

Our website may contain third-party links. We are not responsible for their privacy practices.

We use cookies via Wix to improve user experience and monitor site activity. You can manage cookies via browser settings.

This Privacy Notice may be updated. We recommend reviewing it periodically.