Who is responsible?
Nefid Personnel Ltd is the data controller for enquiries made to us through this website. Company number 12430317. Our registered office is Unit 40 Burly Trading Hill, Burley Hill Trading Estate, Leeds, LS4 2PU. ICO registration reference ZB287524.
For a privacy question or rights request, use , call 07380 153362, or write to our registered office marked “Data protection”. We may need to verify identity before responding to a request.
What information is collected?
The enquiry form collects your name, email address, optional phone number and postcode, selected service and the message you choose to send. Technical information needed to operate and protect the service can include IP addresses, request times, browser information and security/session tokens.
The form does not accept attachments and is not intended for health histories, diagnoses, identity documents or detailed safeguarding information. Please provide only a general enquiry. If you volunteer sensitive information, we restrict its use to handling the enquiry appropriately; we will agree a suitable method before requesting detailed care records.
Why we use it and the lawful basis
We use general enquiries to understand your request and respond. Our legitimate interests are providing requested service information and operating a safe, reliable website. Where you ask about entering a care arrangement, processing may also be necessary to take steps at your request before a contract. We may process information to meet legal obligations or handle legal claims where applicable.
We do not use the enquiry form to sign you up to marketing. Reading the privacy notice is not consent to advertising. Any later care, employment or special-category processing requires the appropriate legal basis and information for that activity; this notice does not replace the separate information provided during assessment or recruitment.
Who receives information?
Authorised Nefid Personnel staff and our hosting, email and technical service providers may process the information needed to handle the enquiry and run the site. Information may be shared with relevant authorities or professional advisers where legally required or appropriately necessary. We do not sell website enquiry information.
Some technical or email suppliers may process data outside the UK. Applicable safeguards, such as adequacy arrangements or approved contractual protections, are required where relevant. Contact us for information about the suppliers and safeguards that apply to your information.
How long information is kept
Enquiry correspondence is kept only as long as reasonably needed to respond, deal with follow-up, maintain a necessary business record or address a complaint or legal requirement. If an enquiry becomes a care or employment record, the relevant retention schedule applies. Records are then deleted or securely disposed of when no longer required. Ask us for the retention criteria applying to your enquiry.
The form’s security token expires after 30 minutes. Its abuse-prevention records contain a hashed network identifier and timestamps rather than enquiry content; expired files are removed during subsequent housekeeping. Server and email logs are managed under the hosting provider’s arrangements.
How the enquiry form is protected
The live site is designed to use HTTPS between your browser and the website. The form uses server-side validation, request-forgery protection, Cloudflare Turnstile token verification, a hidden bot trap, submission timing checks and rate limits. General enquiries are then delivered to our team by email. This is not end-to-end encrypted messaging and no internet or email service can promise absolute security.
Please keep health records and sensitive case details out of the initial form. We do not place enquiry content in website analytics or public files.
Your rights and choices
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. Some rights have exceptions. You can also raise a concern with us or complain to the Information Commissioner’s Office.
No automated eligibility or care decisions are made by this website. Optional fields may be left blank; we need a name, email address and general message to respond through the form.
Cloudflare security checks and WhatsApp
When you open the enquiry form, Cloudflare Turnstile processes technical security signals such as network and browser information to distinguish legitimate enquiries from automated abuse. Our server validates the resulting token with Cloudflare before processing an enquiry. We do not include your message or contact details in that verification request. This security service is used to protect the requested enquiry function, rather than for advertising.
The WhatsApp button opens a conversation with our company number on WhatsApp only when you select it. WhatsApp/Meta then handles information under its own privacy terms. Please use a general initial message, keep health records and sensitive case details out of chat, and call the emergency services for an emergency. A chat link does not promise an immediate response.
External services, images and updates
External directory links take you to independent websites with their own privacy notices. The live CQC widget loads only if you choose to enable it; the linked rating summary is available without doing so. The site uses no advertising or analytics trackers by default. See our cookie information.
Service photographs are illustrative AI-generated images of fictional people, not images of actual service users or employees. We may update this notice as the website or processing changes; the review date appears above.