Privacy Policy

Step Forward Living is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information in line with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Regulation and Inspection of Social Care (Wales) Act 2016

This policy applies to visitors to our website, individuals who contact us, and those who may receive or enquire about our services.

Step Forward Living is a supported living provider delivering domiciliary care and support services to adults.

Organisation Details

Service Provider: SF Living Ltd.
Trading Name: Step Forward Living
Data Controller: Step Forward Living

Registered Office

Office 19
Business Development Centre
Main Avenue
Treforest Industrial Estate
CF37 5UR

We may collect and process the following types of personal data:

Information you provide directly

• Name
• Contact details (email address, phone number)
• Enquiry details or messages submitted via the website
• Referral or service enquiry information

Information collected automatically

• IP address
• Browser type and version
• Pages visited on our website
• Date and time of visits

This information is collected through cookies or analytics tools. See Section 11 for details.

We use personal data to:

• Respond to enquiries and provide information about our services
• Manage referrals and initial assessments
• Improve our website and user experience
• Maintain records for administrative and regulatory purposes

We may share information where necessary with:

• Local Authorities or Health Boards — for referral or safeguarding purposes
• Care Inspectorate Wales (CIW)
• Safeguarding agencies or the Police where required by law
• Professional advisors such as accountants and legal advisors

All sharing is done lawfully, securely, and only where necessary.

As a regulated care provider, Step Forward Living may be required to share information without consent where:

• There are safeguarding concerns relating to an individual
• There is a risk of harm to an individual or others
• We are legally required to do so by law or a regulatory body

We will only retain personal data for as long as necessary. Retention periods depend on:

• The purpose for which the data was collected
• Legal and regulatory requirements applicable to our service

Where data is no longer required, it will be securely deleted or destroyed.

Under UK GDPR, you have the following rights in relation to your personal data:

• Access your personal data
• Request correction of inaccurate information
• Request erasure where appropriate
• Restrict or object to processing
• Request data portability

Our website may use cookies to improve user experience. Cookies may:

• Help us understand how the website is used
• Improve site functionality

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the site.

Our website may contain links to other websites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing the privacy policy of any external site you visit.

This policy will be subject to regular review to ensure it remains effective, up to date, and reflective of best practice. Reviews will take place:

• At least annually
• Following incidents, safeguarding concerns, or audit findings
• In response to changes in legislation, regulation, or national guidance
• Where learning identifies the need for improvement

If you have any questions about this Privacy Policy or how your data is handled, please contact us: