Email: cqcmedisolutions@gmail.com
Telephone: 0800 689 1061
Whatsapp us: 07956776114
Privacy Policy
1. Who we are
CQC MediSolutions is a trading name of [Registered company name], a company registered in England and Wales (company number [number]), registered office [address]. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under number [ICO number].
CQC MediSolutions is an independent consultancy. We are not part of, or endorsed by, the Care Quality Commission.
Questions about this policy or your data: email [privacy email], call 0800 689 1061, or write to us at the address above.
2. What personal data we collect
- Contact details: name, phone number, email address, job title and business name.
- Enquiry details: the type of service you plan to register, the support you need, your preferred call time, and anything you tell us on calls or in messages.
- Client records: information needed to deliver our registration support, such as business details, registered manager details, policies and application documents.
- Payment and billing details: invoices and payment records. Card payments are handled by our payment provider; we do not store full card numbers.
- Webinar and event data: registration details and attendance.
- Technical data: IP address, browser and device type, and how you use our website, collected through cookies (see section 9).
We do not ask for health information about you through our forms or ads. If client work involves special category data, we handle it only as needed to deliver the service and with appropriate safeguards.
3. How we collect it
- Facebook and Instagram lead forms: when you submit one of our forms, Meta passes us the details you entered. If you choose to start a Messenger conversation, Meta also shares your public profile and the ad you responded to.
- Our website and webinar pages: when you fill in a form, book a call or register for a webinar.
- Directly from you: by phone, email, Messenger, WhatsApp or in meetings.
- When you become a client: through our MediComply portal and the documents you share with us.
4. How we use it and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Reply to your enquiry and call you at the time you chose | Steps before entering a contract, at your request |
| Deliver our CQC registration support and MediComply software | Performance of a contract |
| Invoice you and keep accounting records | Legal obligation |
| Send follow-ups and information about related services to business contacts | Legitimate interests (you can opt out at any time) |
| Send marketing emails to sole traders or personal email addresses | Consent, where required by PECR |
| Run webinars and send joining details and recordings | Performance of a contract or legitimate interests |
| Measure and improve our ads and website | Consent for non-essential cookies; legitimate interests otherwise |
We do not sell your personal data, and we do not make decisions about you using solely automated processing.
5. Who we share it with
We share personal data only with service providers who help us run the business, under contracts that require them to protect it:
| Provider | Purpose |
|---|---|
| Meta Platforms (Facebook, Instagram, Messenger, WhatsApp) | Lead forms, advertising and messaging |
| Zapier | Passing lead form details into our CRM |
| [CRM provider] | Managing enquiries and client records |
| [Email and calendar provider, e.g. Google Workspace or Microsoft 365] | Email and scheduling |
| [Webinar platform] | Hosting webinars |
| [Payment provider] and [accounting software] | Taking payments and keeping accounts |
| [Website host] | Hosting our website |
We may also share data with professional advisers, or where the law requires it. With your agreement, we share application information with the Care Quality Commission when we support your registration.
6. International transfers
Some of our providers, such as Meta and Zapier, process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK–US Data Bridge) or the ICO's International Data Transfer Agreement or Addendum to keep your data protected.
7. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't become clients | [24 months] after our last contact |
| Client records | [6 years] after the service ends |
| Invoices and accounting records | 6 years, as required by HMRC |
| Webinar registrations | [12 months] after the event |
| Marketing preferences and opt-outs | Kept so we can respect your choice |
After that we securely delete or anonymise the data.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted in certain circumstances
- restrict or object to how we use it, including objecting to direct marketing at any time
- receive your data in a portable format
- withdraw consent where we rely on it
To use any of these rights, contact us using the details in section 1. We will respond within one month and there is normally no charge.
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Cookies, security and changes
Cookies: our website uses essential cookies to work. With your consent it also uses analytics and advertising cookies, including the Meta Pixel, to measure and improve our ads. You can change your choice at any time through our cookie banner or your browser settings.
Security: we use access controls, encryption where available and trusted providers to protect your data. Only staff who need it can access it.
Changes: we may update this policy. The latest version will always be on this page.
Last updated: [date]