Privacy Policy

Cascade (Group Services) Ltd.

1. Introduction

This privacy policy describes how Cascade Ltd. processes your personal data. It explains how we collect, use, store, and protect your information and outlines your rights under the UK General Data Protection Regulation (UK GDPR) and related laws.

We are committed to protecting the privacy of individuals who interact with us and ensuring that personal data is handled securely and transparently.

Our policies follow Plain English guidelines for clarity and accessibility.

We promise to:

Be transparent about why and how we collect personal data.
Only collect necessary data to deliver services effectively.
Keep data accurate, secure, and up to date.
Explain our legal basis for processing your data.
Tell you how long we keep your data.
Clarify if your data will be shared or transferred outside the UK.
Confirm if we use automated decision-making or profiling.

By providing your personal data to us, using our services, or visiting our website, you acknowledge and accept the terms of this Privacy Policy.
We may update this policy from time to time, and the latest version will always be available in this document. The last update date is at the end of this policy.

2. Legal Compliance:

As a Data Controller, we comply with:
The Data Protection Act 2018.
The UK General Data Protection Regulation (UK GDPR).
The Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

3. Who we are

In this policy, all references to “Cascade Ltd.,” “we,” “us,” and “our” include Cascade Ltd.
and each of its independent Residential Homes and Schools listed below.
These entities operate under this Privacy Policy as Independent Data Controllers, with ICO
registration numbers and contact details provided in Annex A.

Residential Homes:
Armfield House
Banks House
Bonetti House
Charlton House
Cohen House
Felix House
Hurst House
Moore House
Peters House
Stiles House
Wilson House
Schools:
Banks House School
Felix House School

Our UK GDPR Lead:
Matthew Beaton – Cascade (Group Services) Limited, Kirkham House, 5 Whiffler Road Norwich, NR3 2AG

Email: gdpr@cascade-care.com

Our Data Protection Officer (DPO):
Jade Nelson - Ahead In HR

Email: jade@aheadinhr.co.uk

4. What information do we collect?

We collect personal information about you to enable us to provide the services or fulfil a role with us. This could include:
Name and address
Email address and telephone numbers
Details of services you may have received from us
Payment information (e.g., credit card or bank details) you give when you make a payment to us
The result of any credit or anti-fraud checks we have made on you(Team members) In addition to the information above, we may also need to collect further information about you:

Details of your employment
Your full name and address
Date and country of birth
National Insurance number
Passport number
Personal bank details
Personal email address
Personal contact number

5. How do we collect Personal Information?

How do we collect Personal Information?
We collect personal information in the following ways:
When you make contact to enquire about our services
When you provide information by filling in a form on registration or information provided at any other time
Through the provision of our services to you
When you participate in discussion forums or other social media on our site or sites managed by us
When you contact us by email, telephone, social media or any other way
When you visit our website
When you sign in and out of our premises (visitors log).

6. How we use the information and why we need it

We use personal data to provide services and support to our residents, staff, and professional colleagues, in accordance with the Caldicott Principles and all applicable data protection laws.

We process personal data for the following purposes:

Contractual Obligations – To deliver services you have requested or agreed to.
Consent – Where required, we seek your explicit consent for data processing (which you can withdraw at any time).
Public Interest – Where processing is necessary for public interest tasks, such as social care services.
Vital Interests – Where processing is necessary to protect life, health, or well-being.
Legal Obligations – Compliance with employment law, safeguarding duties, and regulatory requirements.
Defending Legal Claims – To respond to legal disputes.
Employment Purposes – For recruitment, HR, payroll, and compliance.
Marketing (Where Applicable) – Providing relevant information about services (only with your consent).

We always ensure that only the minimum necessary data is used, access is restricted, and data is processed securely.

We do not use automated processing at all.

7. Legitimate interests

Cascade Ltd. may also process your Data when it is in our legitimate interest to do this and
when these interests do not override your rights. These legitimate interests include:
Keeping our records up to date
Statistical research and analysis to enable us to monitor and improve services
Sharing your personal information with people or organisations to comply with legal
or regulatory obligations or enable us to run our organisation
To comply with applicable laws and regulatory requirements that apply to us and the
third parties we engage with.
To take part in or be the subject of any merger, sale or purchase of all or part of our
business
Managing our relationships with you and third parties who assist us in providing you services.

8. Who will see the information?

Your information will only be accessible to our team members and only where appropriate regarding the role they are carrying out. We will never sell your information or let other organisations use it for their purposes. We will only share your personal information:

Where consent is necessary, we will have obtained your consent to us doing so and will provide information for the specific reason your consent was given. You will have the opportunity to withhold consent when you complete the form on which we collect the Data, or you can also contact us at the address on page two at any time
Where it is necessary to protect your vital interest (i.e. your life or health)
Organisations or people whom we must share your personal information with by law or regulations
The police or other law enforcement agencies for them to perform their duties if we must do this by law or under a court order
Where (for team members) we use other organisations to provide services on our behalf for processing, such as Payroll, pension accountancy and other outsourced HR administration
When using auditors and professional advisors and with your pension administrator
With our Shareholders
If we merge with another organisation, form a new entity, sell our business, or purchase a business
Where a third-party Data processor is used, we ensure they operate under a contract that includes confidentiality and security of personal data and their obligations under the Data Protection legislation.

9. Security

The security of your personal information is very important to us. We protect all personal data we hold and ensure we have appropriate organisational and technical measures in place to prevent unauthorised access or unlawful processing of personal data and to prevent Data from being lost, destroyed, or damaged.
All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone at Cascade Ltd. or their website.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your Data before it reaches our site.
Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access.
Personal data is processed in the UK; your information may be stored outside the UK for IT hosting and maintenance. Where data is stored outside the UK, we ensure appropriate safeguards are in place.

10. Your rights

You have the following rights concerning your personal data:
Right to be informed – Transparency about how we process your data.
Right of access – Request a copy of the data we hold about you.
Right of rectification – Request correction of inaccurate or incomplete data.
Right to restrict processing – Ask us to limit data processing in certain circumstances.
Right to object – Object to processing in some cases, including marketing.
Right to be forgotten – Request deletion of your personal data (where applicable).
Right to data portability – Request your data in a structured format.
Right not to be subject to automated decisions – We do not conduct automated decision-making or profiling.

You can contact us concerning any of your rights at: jade@aheadinhr.co.uk

To protect your privacy, we may ask you to prove your identity before we formally respond to any request. There is no charge for a request, and we will respond to the request within one month.

If you are dissatisfied with how we deal with your request, contact the Information Commissioners Office at 0303 123 1113 or their website, www.ico.org.uk.

11. Cookies

Our website uses Cookies to distinguish you from other users of our website. This helps us provide a good experience when you browse our website and allows us to improve our site.

More information concerning our use of cookies can be found on our Cookies Policy

12. Retention of Information

We keep your information only for as long as necessary for each purpose we use it. We use the following guidelines:
Any time limits set by law or recommended by regulators, professional bodies, or associations
For as long as we have a reasonable need to manage our relationship with you.

13. How to contact us

If you have any questions about how we collect, store, and use personal information, or if you have any other privacy-related questions, please get in touch with us by any of the following means:

Email: jade@aheadinhr.co.uk

In writing: Cascade (Group Services) Limited, Data Protection Officer, 5 Whiffler Road, Norwich NR3 2AL

ANNEX A – DATA PROTECTION AND CONTACT INFORMATION

GDPR Lead for All Establishments
For matters relating to data protection compliance across all establishments, the designated GDPR lead is: GDPR Lead Contact Details: Matthew Beaton Cascade, Kirkham House, 5 Whiffler Road, Norwich, NR3 2AG
Email: gdpr@cascade-care.com
Data Protection Officer (DPO) Contact Details
The appointed Data Protection Officer (DPO) is responsible for overseeing compliance with data protection laws and this Privacy Policy. You may contact the DPO for any queries regarding the processing of personal data or to exercise your rights under the UK GDPR.
DPO Contact Details:
Jade Nelson - Ahead In HR
Email: jade@aheadinhr.co.uk
Telephone: 07704 175770

Registered Entities and ICO Registration Numbers
Each of the following entities operates under Cascade Group Services Ltd. as an Independent Data Controller, with the corresponding ICO registration numbers:

Cascade (Group Services) Ltd.
ICO Registration Number: ZA460035
Registered Address: Unit 2, Therm Road,
Hull, HU8 7BF

Cascade (Banks House) Limited
ICO Registration Number: ZA542582
Registered Address: Unit 2, Therm Road,
Hull, HU8 7BF
Also trading as:
Banks Cascade School
Felix House
Felix Cascade School

Cascade (Charlton House) Limited
ICO Registration Number: ZA458794
Registered Address: Unit 2, Therm Road,
Hull, HU8 7BF
Also trading as:
Hurst House
Moore House
Peters House

Cascade (Cohen House) Limited
ICO Registration Number: ZA459245
Registered Address: Unit 2, Therm Road, Hull, HU8 7BF
Also trading as:
Bonetti House
Armfield House

Cascade (Stiles House) Ltd.
ICO Registration Number: ZA459266
Registered Address: Unit 2, Therm Road, Hull, HU8 7BF
Also trading as:
Wilson House

Last updated: 30.06.2025