Privacy policy
How we collect, use and protect personal information, and the rights you have over it.
Last updated October 2026
Who we are
Grafton Lodge is a residential care home at 40 Goddington Road, Strood, Rochester, Kent ME2 3DE. It is run by Sathya Care Ltd (company number 11499368), registered office Unit 3, Ilex House, 94 Holly Road, Twickenham TW1 4HF. Sathya Care Ltd is the data controller for the personal information we hold about residents, their families and representatives, people who enquire with us, and visitors to this website. This policy explains what we collect, why, how we keep it safe, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Information we collect
- Call-back requests: your name, phone number and best time to call, your email address if you give it, the kind of care you're looking for, and anything you choose to tell us in your message.
- Enquiries by phone or email: what you tell us about the care someone needs and how a stay would be funded.
- Residents' care information: health, medical and support needs, shared with consent so we can provide safe care.
- Website data: our website host records basic technical information, such as IP addresses and the pages requested, to keep the site secure and working.
Please don't include detailed health information in the website form. We'll talk about care needs when we call you.
How we use your information
We use personal information only for reasons connected with running our care home:
- Replying to enquiries and arranging visits, respite stays and admissions.
- Providing and coordinating residents' care, including with GPs, district nurses and other professionals.
- Keeping accurate care and medication records, as the Care Quality Commission requires.
- Keeping families and representatives informed about their relative's wellbeing.
- Meeting our legal, safeguarding and regulatory responsibilities.
For website enquiries, our lawful basis is that you've asked us to contact you (steps taken at your request before entering into a contract) and our legitimate interest in answering enquiries. Where we handle health information, we treat it as special category data, with the extra protections the UK GDPR requires. We don't sell your information or use it for marketing.
International transfers
Our website host and email delivery service may process data outside the UK. Where they do, it is covered by the safeguards UK data protection law requires for international transfers.
How long we keep it
We keep website enquiries for up to 12 months. If you or your relative go on to use our services, the information becomes part of the care record and is kept for as long as the law requires for care records.
How we protect it
Access to personal information is limited to staff who need it for their role, records are stored securely, and our team is trained in confidentiality and data protection.
Your rights
Under UK data protection law you have rights over the information we hold about you:
- Access: see the personal information we hold about you.
- Correction: ask us to put right anything inaccurate or incomplete.
- Erasure or restriction: ask us to delete or limit how we use your information, where the law allows.
- Objection: object to how we use your information, or withdraw consent you have given.
To make a request, or to ask anything about how we handle your information: Email info@graftonlodge.co.uk or call 01634 722621. We will respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd always encourage you to speak to us first so we can try to put things right.
Changes to this policy
We may update this policy to reflect changes in the law or in how we work. The current version is always on this page.
