Privacy Notice
Last updated: May 2026
This privacy notice explains how South East Social Care Alliance (SESCA), an operating name of Care Association Alliance South East Limited (company number 15686972), collects and uses personal data. We are the data controller for the purposes of UK GDPR.
Contact: hello@sesca.org.uk | sesca.org.uk
1. What personal data we collect
Information you provide: If you submit a contact or enquiry form, we collect your name, email address, and the content of your message.
Website usage data: When you visit our website, we may collect anonymised technical data including your truncated IP address, browser type, pages visited, and time of visit. This does not identify you individually.
2. Why we collect it and our lawful basis
We only process personal data where we have a lawful basis under Article 6 UK GDPR.
| Purpose | Data | Lawful basis |
|---|---|---|
| Responding to enquiries | Name, email, message | Legitimate interests |
| Website analytics | Usage data, truncated IP | Consent |
| Website security | Technical logs | Legitimate interests |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
3. Cookies and analytics
We use Google Analytics to understand how people use our website. Analytics cookies are only placed after you give consent via our cookie notice. IP addresses are anonymised before processing. You can opt out at any time using the Google Analytics opt-out browser add-on.
See our Cookie Policy for full details.
4. Sharing your data
We do not sell personal data. We use trusted third-party processors (including our website host and Google Analytics) who are contractually required to handle data only on our instructions. We may disclose data where required by law.
5. International transfers
Google Analytics may process data outside the UK. Where this occurs, we rely on appropriate safeguards, including International Data Transfer Agreements (IDTAs) or the UK Addendum to EU Standard Contractual Clauses.
6. How long we keep your data
- Contact enquiries: up to 12 months after resolution
- Website analytics: up to 14 months
- Security logs: up to 6 months
7. Your rights
Under UK GDPR you have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; and data portability. To exercise any right, contact us at hello@sesca.org.uk.
8. Complaints
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk | 0303 123 1113. We encourage you to contact us first.
9. Changes to this notice
We may update this notice. Changes will be published on this page with a revised date.
