Introduction
Welcome to the privacy notice for Arcus Capital (Management) Ltd trading as Arcus Capital Ltd (“Arcus Capital”, “we”, “us”, “our”).
We are committed to protecting your personal data and respecting your privacy. This notice explains how we collect, use, store, and protect your personal data when you visit our websites, contact us, enquire about our services, or interact with us in any way, as well as your legal rights under the UK General Data Protection Regulation (“UK GDPR”).
This privacy notice applies to all services operated by Arcus Capital Ltd, including care homes and associated services managed by us.
This privacy notice covers:
- Who we are
- The data we collect about you
- How your data is collected
- How we use your data
- Sharing your data
- International transfers
- Data security
- Data retention
- Your legal rights
- Cookies
1. Who We Are
Controller
Arcus Capital (Management) Ltd trading as Arcus Capital Ltd is the data controller responsible for your personal data.
Legal Entity
Arcus Capital (Management) Ltd t/a Arcus Capital Ltd
Company Number
16589875
Registered Address
1st Floor Prospect House
Rouen Road
Norwich
England
NR1 1RE
Contact Email
You have the right to make a complaint at any time to the UK Information Commissioner’s Office (“ICO”), the UK regulator for data protection matters. We would, however, appreciate the opportunity to address your concerns before you approach the ICO.
2. Changes to This Privacy Notice
We keep this privacy notice under regular review to ensure ongoing compliance with UK GDPR, the Data Protection Act 2018, and other applicable laws and regulations.
Last updated:
May 2026
It is important that the personal data we hold about you is accurate and current. Please inform us if your personal information changes during your relationship with us.
3. Third-Party Links
Our websites may include links to third-party websites, plugins, or applications, including regulators, review platforms, social media platforms, and partner organisations.
Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control third-party websites and are not responsible for their privacy notices or practices. We encourage you to read the privacy policies of any external websites you visit.
4. The Data We Collect About You
Personal data means any information relating to an identified or identifiable individual.
We may collect, use, store, and transfer different types of personal data, including:
a) Identity & Contact Data
- Full name
- Date of birth
- Gender
- Postal address
- Email address
- Telephone numbers
- Emergency contact details
b) Care-Related & Special Category Data (where applicable)
- Health conditions and medical information
- Care and support needs
- Care preferences and routines
- Lifestyle information, likes and dislikes
- Life history and wellbeing information
- Healthcare professional details (such as GP information)
- End-of-life preferences
- Medication and treatment information
This information is classified as “special category data” under UK GDPR and is processed lawfully for the provision of health and social care services.
c) Financial Data
- Payment information
- Billing details
- Financial circumstances where relevant to funding or care arrangements
d) Media & Security Data
- CCTV footage for safety, security, safeguarding, and incident prevention
- Photographs and videos where consent has been provided where required
e) Technical Data
When you visit our websites, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Operating system
- Time zone and location data
- Website access information
f) Usage Data
- Information about how you use our websites, services, and communications
g) Marketing & Communications Data
- Your communication preferences
- Enquiry and brochure request information
- Responses to surveys, promotions, or campaigns
5. How Your Personal Data Is Collected
We collect personal data in several ways:
a) Direct Interactions
You may provide personal data by:
- Completing website enquiry forms
- Contacting us by telephone, email, social media, or post
- Requesting brochures or information
- Applying for employment opportunities
- Visiting one of our care homes
- Providing feedback or testimonials
b) Automated Technologies
When you use our websites, we may automatically collect Technical Data through:
- Cookies
- Server logs
- Website analytics tools
c) Third Parties
We may receive personal data from:
- Healthcare professionals and referral sources
- Family members or representatives
- Local authorities and NHS services
- Website analytics providers
- Advertising and social media platforms
- Recruitment agencies
6. How We Use Your Personal Data
We only process your personal data where we have a lawful basis to do so.
Our lawful bases include:
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests
- Consent
- Provision of health or social care services
- Safeguarding obligations
We may use your personal data to:
- Respond to enquiries and requests
- Deliver care and support services
- Manage admissions and resident relationships
- Communicate with residents, families, and professionals
- Improve our services and websites
- Maintain safety, safeguarding, and security
- Meet legal, regulatory, and contractual obligations
- Manage recruitment and employment processes
- Send relevant communications where permitted by law
7. Marketing
We may send you marketing communications where:
- You have requested information from us, or
- You have consented to receive updates, and
- You have not opted out of receiving communications
You can opt out of marketing communications at any time by:
- Using unsubscribe links, or
- Contacting us directly
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
8. Sharing Your Personal Data
We may share your personal data with trusted third parties where necessary, including:
- Website hosting and IT providers
- Marketing and communications providers
- Professional advisers including legal, financial, and insurance advisers
- Regulators, local authorities, and government bodies
- Healthcare professionals and organisations involved in care provision
- Contractors and service providers supporting our operations
All third parties are required to respect the security of your personal data and process it lawfully and confidentially.
9. International Transfers
We do not routinely transfer personal data outside the United Kingdom.
Where a service provider processes data outside the UK, we will ensure appropriate safeguards are in place to protect your personal data in accordance with UK GDPR requirements.
10. Data Security
We have implemented appropriate technical and organisational security measures designed to protect your personal data from:
- Unauthorised access
- Accidental loss
- Misuse
- Alteration
- Disclosure
These measures include:
- Access controls and permissions
- Secure systems and password protection
- Staff confidentiality obligations
- Cybersecurity protections and monitoring
- Secure storage of records
We also have procedures in place to deal with suspected personal data breaches and will notify affected individuals and regulators where legally required.
11. Data Retention
We retain personal data only for as long as reasonably necessary to:
- Fulfil the purposes we collected it for
- Meet legal, regulatory, tax, safeguarding, and accounting requirements
- Maintain accurate care and business records
Retention periods vary depending on the type of information involved. Further information regarding retention periods is available upon request.
12. Your Legal Rights
Under UK GDPR, you have rights relating to your personal data, including the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request deletion of your personal data where applicable
- Object to processing
- Request restriction of processing
- Request transfer of your data
- Withdraw consent where processing is based on consent
You will not usually have to pay a fee to exercise your rights.
To exercise any of your rights, please contact us using the details below.
13. Cookies
Our websites use cookies and similar technologies to:
- Ensure website functionality
- Improve website performance and user experience
- Analyse website traffic and usage
You can manage your cookie preferences through your browser settings or through our website cookie banner where applicable.
For more information, please refer to our Cookie Policy.
14. Contact Us
If you have any questions about this privacy notice or how we process your personal data, please contact:
Arcus Capital (Management) Ltd t/a Arcus Capital Ltd
Email: admin@arcuscapital.org
Registered Address:
1st Floor Prospect House
Rouen Road
Norwich
England
NR1 1RE
