JTA Residential Care (“JTA”, “we”, “us”, “our”) provides Ofsted‑regulated children’s residential care services in England and is a service of J T A Health Care Limited. We respect your privacy and are committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Notice explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have. Please read it carefully.
1) Who this notice covers
We process personal information relating to (but not limited to):
• Children and young people in our care (and prospective placements)
• Parents, carers, guardians and wider family networks
• Placing authorities and professionals (e.g., social workers, IROs, health and education professionals)
• Staff and applicants (employees, bank staff, agency and contractors)
• Visitors, suppliers and stakeholders
• Users of our website and digital services
We are usually the Data Controller for the information we hold about the above groups. In some cases we act as a Data Processor on behalf of another controller (for example, a Local Authority or NHS provider) and follow their documented instructions.
2) How to contact us
Data Protection Lead – JTA Residential Care
Telephone: 0333 335 6268
Email: info@jtaresidentialcare.co.uk
Website: www.jtaresidentialcare.co.uk
We are registered with the Information Commissioner’s Office (ICO). You can also complain to the ICO via ico.org.uk, but please contact us first so we can try to resolve your concern.
3) Your data protection rights
Subject to conditions and exemptions, you may have the following rights: to be informed; access; rectification; erasure; restriction; objection; data portability; and to withdraw consent where relied upon. To exercise your rights, contact us using the details above. We may need to verify your identity.
4) What information we collect
The information we collect depends on your relationship with us. It may include:
• Identity and contact details – name, date of birth, address, phone, email, relationship to a child/young person.
• Placement and care information – assessments, plans, risk and behaviour information, education details, family and professional networks.
• Health and safeguarding information (special category data) – physical/mental health, disabilities/needs, GP and clinical notes shared with us, incident and safeguarding records.
• Criminal offence data – DBS results, police or court information where lawful and necessary.
• Employment data – CVs, right‑to‑work details, references, training, supervision records, payroll and HR data.
• Financial and payment data – invoices, remittances, bank details where required.
• CCTV and visitor logs – for site safety and security.
• Technical and usage data – IP address, device and browser type, pages visited, cookie identifiers.
• Marketing preferences – your choices about receiving updates.
We may also create aggregated or anonymised data (which is not personal data) for reporting and service improvement.
5) Where we get your information
• Directly from you (forms, calls, emails, meetings, visits, job applications).
• Referrers and placing authorities (e.g., Local Authorities, NHS, schools).
• Professionals involved in care and safeguarding.
• Previous providers/employers and referees (with appropriate authority).
• Public sources where appropriate (e.g., professional registers).
• Website analytics and cookies (see Cookies and similar technologies).
6) Why we use your information and our lawful bases
We only use your personal data where a lawful basis applies. Depending on context, we rely on:
• Legal obligation – to comply with the Children Act 1989/2004, Children’s Homes (England) Regulations 2015, Ofsted requirements, employment law, safeguarding, health and safety, taxation and other laws.
• Public task – delivering services that support children and young people where we are working with public authorities.
• Vital interests – to protect someone’s life or prevent serious harm.
• Contract – to enter into or perform a contract with you (e.g., employment, supplier arrangements).
• Legitimate interests – operating, improving and securing our services where these interests are not overridden by your rights (e.g., site security, service analytics, quality assurance, management reporting).
• Consent – for specific, optional activities such as certain marketing communications or where required by law. You can withdraw consent at any time.
Special category & criminal offence data
Where we process special category data (e.g., health) or criminal offence data, we do so under UK GDPR Articles 9/10 and Data Protection Act 2018, Schedule 1 conditions, such as: safeguarding of children and individuals at risk, social protection, employment/management, preventing or detecting unlawful acts, medical purposes, or establishing/exercising/defending legal claims.
7) How we use your information (illustrative purposes)
• To assess and provide safe, high‑quality residential care and support.
• To plan, review and evidence outcomes; manage incidents and safeguarding.
• To communicate with children/young people, families and professionals.
• To recruit, train and manage our workforce; meet HR and payroll obligations.
• To manage placements, invoicing and payments.
• To run and secure our sites, systems and website; prevent and detect fraud.
• To meet statutory reporting and inspection requirements (e.g., Ofsted).
• To analyse and improve our services and user experience.
• To send updates you have requested and manage your preferences.
We will only use your personal data for the purposes we collected it for unless we reasonably consider another compatible purpose. If we need to use it for an unrelated purpose, we will explain the legal basis and provide notice where required.
8) Sharing your information
We may share personal data with:
• Placing authorities and relevant professionals involved in care, safeguarding, education and health.
• Regulators and authorities (e.g., Ofsted, Police, ICO, HMRC and other government bodies) where required by law.
• Professional advisers (e.g., lawyers, auditors, insurers and bankers) who provide consultancy, legal, insurance, accounting and banking services under duty of confidentiality.
• Service providers who support our operations (e.g., secure IT, email, cloud hosting, HR, payroll, DBS checks). These parties act under contract and must protect your data.
We do not sell personal data. If any processing involves transfers outside the UK, we will ensure appropriate safeguards (e.g., the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses).
9) Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss. Access is restricted to those with a legitimate need, under confidentiality duties. We have incident response processes and will notify you and the ICO of certain personal data breaches where legally required.
10) How long we keep your information
We keep personal data only for as long as necessary for the purposes described above, including to meet legal, regulatory and safeguarding requirements, to resolve disputes and to enforce agreements. Retention periods vary by data type and context and are set by our internal retention schedule and applicable law.
11) Children and young people’s data
We handle children’s information with particular care and confidentiality. Where appropriate, we will explain to children and young people, in an age‑appropriate way, how their information is used and their rights.
12) Cookies and similar technologies
Our website uses cookies and similar technologies to operate, remember preferences and improve your experience. Some cookies provide anonymised analytics about site use. You can change your browser settings to refuse or remove cookies; doing so may affect site functionality. For more detail, see our Cookie Notice or contact us.
13) Marketing
We may send you updates you have requested (for example, service updates or newsletters). You can opt out at any time by using the unsubscribe link or contacting us. Opting out does not affect service‑related communications (e.g., placement or regulatory notices).
14) Third‑party links
Our website may contain links to other websites. We are not responsible for the privacy practices of those sites. We recommend you read the privacy information of every site you visit.
15) Automated decision‑making
We do not carry out decisions based solely on automated processing that produce legal or similarly significant effects. If this changes, we will inform you and explain your rights.
16) Changes to this notice
We may update this Privacy Notice from time to time. The most current version will be posted on our website with the effective date above. Significant changes may be notified by email or website notice where appropriate.
Contact us
If you have questions or would like to exercise your data rights, contact our Data Protection Lead at info@jtaresidentialcare.co.uk or 0333 335 6268.
Cookie Notice
Last updated: 6 September 2025
This Cookie Notice explains how JTA Residential Care uses cookies and similar technologies on our website. It should be read alongside our Privacy Notice.
What are cookies?
Cookies are small text files placed on your device by a website. They help the site work, improve security and performance, and enable certain features and insights. “First‑party” cookies are set by us; “third‑party” cookies are set by other providers (for example, analytics or embedded content providers).
Legal basis
• Strictly necessary cookies – used on the basis of our legitimate interests in delivering a secure, functional site (and under UK PECR they do not require consent).
• All other cookies (e.g., analytics, functionality, or advertising) – used only with your consent via our cookie banner/preferences tool. You can withdraw consent at any time using “Cookie Settings” in the footer.
Types of cookies we may use
• Strictly necessary – core functionality such as page navigation, session management, security, load balancing, and cookie preference storage.
• Performance/analytics – help us understand how visitors use the site (pages viewed, time on page, navigation paths) so we can improve it.
• Functionality – remember choices (e.g., forms progress) to provide enhanced features.
• Advertising/targeting – if enabled, may be set by us or our partners to show relevant content or measure campaign performance.
Illustrative cookies
• jta_session (first‑party) – maintains secure session – strictly necessary – session
• cookie_consent (first‑party) – stores preferences – strictly necessary – 6–12 months
• _ga / _ga_* (Google) – analytics – performance – up to 13 months
• _gid (Google) – analytics – performance – 24 hours
Managing cookies
• Consent settings – use “Cookie Settings” in the footer to review or withdraw consent for non‑essential cookies.
• Browser controls – you can block or delete cookies via your browser settings (may affect functionality).
• Third‑party cookies – embedded content providers may set their own cookies; review their notices.
Changes to this Cookie Notice
We may update this notice from time to time. Material changes may be signposted on the site.
—
Privacy at a glance (summary)
• Who we are – JTA Residential Care (a service of J T A Health Care Limited), providing Ofsted‑regulated children’s residential care in England.
• What we collect – Identity/contact details; placement and care information; health and safeguarding data (where necessary); employment and HR data; CCTV/visitor logs; technical and usage data; and marketing preferences.
• Why we use it – To provide safe, high‑quality care and fulfil legal/regulatory duties; manage placements and workforce; secure and improve our services; communicate with you; and send updates you request.
• Our legal bases – Legal obligation, public task, vital interests, contract, legitimate interests, and consent (for optional activities like certain marketing or non‑essential cookies).
• Sharing – With placing authorities and professionals; regulators/authorities where required by law; and trusted service providers under contract. We do not sell personal data. International transfers (if any) use UK‑approved safeguards.
• How long we keep it – Only as long as necessary for the purposes above and to meet legal, regulatory, and safeguarding requirements.
• Your rights – Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent (where applicable).
• Contact – info@jtaresidentialcare.co.uk | 0333 335 6268.
Last updated – 6 September 2025.
We’d love to connect with you – whether you’re seeking a nurturing home for a young person or looking to join our compassionate team. As an OFSTED-registered provider, we create supportive family-style environments where young people thrive through personalized care and meaningful relationships. Join us in making a difference as a valued team member or a family finding the right placement for your young person’s brighter future.
