Privacy policy

Last updated: September 19, 2026

Privacy Policy

Who we are

GoodCompany Connections LTD, trading as GoodCompany, provides non-care support for independent older adults.

We are the controller of personal information used to manage our enquiries, services, recruitment and Access Fund.

Company number: 16933075
Email: hello@goodcompanyuk.co.uk
Correspondence address: 137 Station Road, London, NW4 4NJ

This policy covers website visitors, enquiries, clients, family contacts, referrals, companion applicants, and Access Fund sponsors and applicants.

Information we collect

Depending on your interaction with us, we may collect:

  • Your name, contact details and correspondence.

  • The location where support would take place.

  • Interests, preferences, availability and visit arrangements.

  • Your relationship to someone you are introducing or arranging support for.

  • Agreements, invoices and payment records.

  • Information supplied about sponsorship or a request for funded support.

  • Companion application information, including experience, interests and availability.

  • Relevant interview, reference and verification information during recruitment.

  • Feedback, complaints and information needed to review a concern.

  • Website and advertising information, such as device, browser, IP address and interactions with our website.

Please do not send medical records, identity documents, DBS certificates or detailed financial documents with an initial enquiry.

If further information is needed, we explain what we require and how it will be handled.

Where information comes from

We receive information through our website, application forms, email, telephone, text messages, WhatsApp and conversations.

We may also receive information from family members, referrers, reference providers, companions, and providers supporting our website and advertising.

Please only share another person’s information where you have permission or another appropriate authority to do so.

Where we receive information about someone indirectly, we provide appropriate privacy information within the applicable legal timeframe, subject to relevant exceptions.

Why we use information

We use information to:

  • Respond to enquiries and discuss suitable support.

  • Understand preferences, match companions and coordinate visits.

  • Communicate with clients and agreed contacts.

  • Review companion applications and suitability.

  • Manage agreements, payments and administration.

  • Consider Access Fund enquiries and administer sponsorship.

  • Review feedback, complaints and safety concerns.

  • Meet applicable legal and record-keeping obligations.

  • Operate and protect our website.

  • Run Google advertising and measure its performance.

Some information is necessary to assess an enquiry or deliver the requested service. If you choose not to provide it, we explain whether this prevents us from proceeding.

Our lawful bases

The basis depends on the purpose and whose information is involved.

Contract: where information is necessary to take steps you request before entering an agreement, or to carry out an agreement with you.

Legitimate interests: for proportionate activities such as responding to referrals, coordinating support, assessing applications, managing business relationships and reviewing concerns. Our interests are in running a reliable service and protecting those involved. We consider the impact on people’s privacy.

Legal obligation: where we must use, retain or disclose information to comply with the law.

Consent: for optional uses where consent is required, including advertising cookies and similar technologies, and publishing identifiable photographs or testimonials. Consent can be withdrawn.

A family member paying for support does not automatically provide a contractual basis for using the older person’s information. We consider each person’s information separately.

Sensitive information and recruitment checks

Health information and criminal-record information require additional legal safeguards.

We do not ask for full medical histories as part of an initial enquiry. Before using sensitive information where necessary, we must identify the relevant lawful basis and additional legal condition, and explain the purpose and handling arrangements.

Permission from a relative is not automatically the older person’s consent.

During companion recruitment, we explain the identity and DBS verification process separately before requesting relevant information.

Who receives information

Where necessary, we share relevant information with:

  • The companion delivering the agreed support.

  • Agreed family members or other authorised contacts.

  • Shopify for our website.

  • IONOS for business email.

  • Google for application forms and our Google advertising connection.

  • WhatsApp for communications.

  • GoCardless for payments.

  • Professional advisers and insurers where needed.

  • Appropriate authorities where disclosure is legally required or otherwise lawfully justified.

Companions receive the information needed for their role, rather than unrestricted access to client records.

Some providers also process information for their own purposes, as explained in their privacy notices.

We do not sell personal information.

Access Fund privacy

We use information about funded-support enquiries to discuss suitability and administer an agreed place.

Sponsors receive reporting about the support their contribution has funded. Reporting is intended to be anonymised. Identifiable stories, photographs or testimonials require separate, appropriate permission.

Declining publicity does not affect eligibility for funded support.

Storage and international processing

Our records are held within the services used for our website, application forms, communications and payments.

Some providers may process information outside the UK. Where this involves a restricted international transfer, an appropriate transfer mechanism is required, such as UK adequacy regulations or approved contractual safeguards.

You can contact us for information about the providers, destinations and safeguards relevant to your information, including how to obtain a copy of applicable safeguards.

How long information is kept

We keep information for the period needed for its purpose. When determining retention, we consider:

  • Whether an enquiry, application or service arrangement remains active.

  • Whether information is needed for ongoing support or an unresolved concern.

  • Applicable accounting and other legal record-keeping requirements.

  • Relevant insurance requirements and potential claims.

  • Whether a less detailed record would meet the remaining need.

Different records may require different retention periods. Practical support information should not automatically be retained for as long as financial or contractual records.

These considerations apply to messages and emails as well as separate documents. Information should be deleted or anonymised when it is no longer needed.

Contact us to ask about the retention period or criteria applying to a particular record.

Cookies and advertising

Our website is hosted by Shopify, and we run Google advertising through our Google & YouTube connection.

Shopify and Google may process information about your device, browser and website activity to operate the website and measure advertising performance. Depending on your consent and the settings enabled, information may also be used to personalise advertising.

Our Google connection includes browser-based and server-based event sharing. Server-based sharing means information can be sent from systems supporting the website directly to Google.

Where consent is required, optional advertising cookies and related processing should only take place with that consent. Server-based sharing does not remove applicable consent requirements.

You can accept or decline optional cookies and manage your choices through the website’s cookie controls. Your browser also provides controls for stored cookies. Blocking some cookies may affect website functions.

You can manage Google advertising preferences through Google My Ad Center.

For more information about Google’s handling of information, see Google’s Privacy Policy.

Contact us if you need help accessing or changing your website privacy choices.

Marketing communications

We advertise GoodCompany through Google, as described above.

We do not currently send email marketing campaigns. If we introduce them, we will explain your choices and provide a way to unsubscribe.

Messages about your enquiry, application, visits or payments are service communications and are separate from marketing.

Your rights

Depending on the circumstances, you can ask us to:

  • Provide access to your personal information.

  • Correct inaccurate or incomplete information.

  • Delete information.

  • Restrict its use.

  • Provide certain information in a portable format.

  • Stop processing based on legitimate interests.

You can object at any time to the use of your personal information for direct marketing.

Where processing relies on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

These rights are subject to legal conditions and exceptions. We may need to confirm your identity before responding.

Email hello@goodcompanyuk.co.uk to make a request.

Concerns and complaints

Please contact us if you are concerned about how we use your information.

You also have the right to complain to the Information Commissioner’s Office through its complaints page.

Updates to this policy

We review this policy when our services or information-handling practices change and show the revision date when an updated version is published.

Contact GoodCompany