Privacy Policy — Hiscock & Co

Last updated: May 2026

This policy explains how we collect, use and protect your personal data when you use this website or contact us. We are committed to handling your information carefully and in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

The data controller is Care Franchising Limited, trading as Hiscock & Co (company number 16271445), registered at Unit 7, Badminton Court, Station Road, Yate, Bristol, BS37 5HZ. For any data protection question, contact hello@hiscockco.co.uk.

2. The personal data we collect

We collect only what we need:

When you contact us — your name, email address, telephone number, business or service name, sector, and the content of your message.
When you request the free CQC self-audit — your email address.
When you become a client — the business and contact details needed to deliver and administer your engagement.
Automatically — limited technical data (such as general usage information) collected by our hosting and form providers to keep the site secure and working.

3. How we use your data, and our lawful basis

To respond to your enquiry and discuss working together — on the basis of taking steps at your request before entering a contract, and our legitimate interest in answering enquiries.
To send you the free self-audit and occasional compliance updates — on the basis of your consent, which you can withdraw at any time.
To deliver, administer and invoice consultancy services — on the basis of our contract with you.
To meet our legal, accounting and regulatory obligations — on the basis of legal obligation.

4. Who we share it with

We do not sell your personal data. We share it only with trusted providers who help us run our business, including our email and marketing platform, our website hosting provider, our online shop platform, and our professional advisers — and only so far as they need it to provide their service to us. We may also disclose data where the law requires it.

5. International transfers

Some of our providers operate outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards (such as UK-approved contractual clauses or adequacy decisions) so your data remains protected.

6. How long we keep it

We keep enquiry data only as long as needed to deal with your enquiry and for a reasonable period afterwards. Client records are kept for the duration of the engagement and for as long as we are required to retain them for legal, tax and professional-indemnity purposes. Marketing data is kept until you unsubscribe.

7. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our use of it, to data portability, and to withdraw consent at any time. To exercise any of these rights, email hello@hiscockco.co.uk and we will respond within the statutory timeframe.

8. Cookies

This website uses only the cookies needed for it to work and to keep it secure. Our sign-up forms and email platform may set additional cookies when you interact with them. You can control cookies through your browser settings; blocking some may affect how parts of the site function.

9. Complaints

If you have a concern about how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

11. Contact

Any question about this policy or your personal data can be sent to hello@hiscockco.co.uk.