Last updated: August 2026
1. Who we are
HLTH Compliance ([legal entity name and company number]) provides CQC and Ofsted compliance, governance, and risk assurance services. We are the data controller for the personal data described in this policy. You can contact us about anything in this policy at hello@hlth-compliance.com or on 0161 241 3163.
2. The information we collect
Website visitors: technical information such as browser type, IP address, and pages visited, collected through cookies and analytics tools (see section 8), plus any details you submit through our contact forms.
Clients and prospective clients: names, job titles, contact details, and business information needed to provide our services and manage our relationship.
Individuals involved in client engagements: where we support a client’s CQC or Ofsted registration or compliance work, we process personal data about individuals named in that work, such as registered managers and nominated individuals. This typically includes name, date of birth, professional qualifications, work history, and application content. Where DBS details form part of an application we handle them under strict controls, and we do not process health information about service users in our application work.
3. How we use it and our lawful bases
We use personal data to deliver our contracted services, including preparing and supporting regulatory applications (performance of a contract with our clients, and legitimate interests where the individual is not our direct client); to manage enquiries and our client relationships (legitimate interests); to meet our legal and regulatory obligations (legal obligation); and to send marketing about our services where permitted (legitimate interests or consent, and you can opt out at any time).
4. Our use of artificial intelligence
We use one approved AI tool, Claude by Anthropic, to assist with drafting and analysis in our work. It operates under commercial terms which mean our data is not used to train AI models. Every AI-assisted output is reviewed by a qualified member of our team, and AI does not make decisions about any individual. We never input DBS or criminal record information, or health information, into AI tools. Our use of AI is governed by our internal AI policies, and our client AI transparency statement is available on request.
5. Who we share it with
Regulators such as the CQC and Ofsted, when submitting or supporting applications on a client’s instruction; service providers who process data on our behalf under contract, including Anthropic (AI processing) and our IT and website providers; and professional advisers where necessary. We do not sell personal data.
6. International transfers
Some of our service providers process data outside the UK. Anthropic processes data in the United States, safeguarded by the EU Standard Contractual Clauses and the UK International Data Transfer Addendum incorporated in its data processing agreement.
7. How long we keep it
We keep client engagement records, including application documents, for 6 years after the engagement ends, unless a longer period is required by law. Conversations in our AI tool that contain client personal data are deleted once an engagement concludes, and deleted conversations are purged by the provider within approximately 30 days. Website enquiry data is kept only as long as needed to handle the enquiry.
8. Cookies, analytics, and advertising
Our website uses cookies and similar technologies for functionality, analytics, and advertising. Non-essential cookies are used only with your consent, which you can give or withdraw through the cookie choices offered on our site or via your browser settings.
We use Google services for analytics and for remarketing, which means we may show advertisements on third party websites (including Google) to previous visitors to our site. Third party vendors, including Google, use cookies to serve ads based on past visits. You can manage how Google advertises to you through the Google Ad Preferences page, or opt out of interest-based advertising entirely. We may also collect aggregated, non-identifying statistics about visitor behaviour to understand how our site is used; these do not identify you personally.
Our website may contain links to external sites we do not operate. We are not responsible for the content or privacy practices of third party sites and recommend reviewing their privacy policies.
9. Your rights
Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to our processing (including direct marketing), and to data portability. To exercise any right, contact hello@hlth-compliance.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We review this policy at least annually and will post any changes on this page.