Privacy policy

Carepad ("we", "us", or "our") provides care management software to organisations in the United Kingdom. This privacy policy explains how we collect, use, store, and protect personal information when you visit our website, request a demo, or use the Carepad platform.

We process personal data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Carepad is the data controller for personal information collected through this website and for platform accounts where we provide the service directly. If you use Carepad through your employer or care provider, that organisation may also act as a data controller for information entered about people receiving care.

For privacy enquiries, contact us at [email protected].

We may collect the following types of information:

• Website and marketing: name, email address, phone number, organisation name, and any message you send when requesting a demo or contacting us.
• Account and platform use: login details, role and permissions, audit logs, and content you or your organisation enters into Carepad, which may include information about staff and people receiving care.
• Technical data: IP address, browser type, device information, and usage data collected through cookies and similar technologies (see our cookie policy).

We use personal information to:

• provide, operate, and improve the Carepad platform;
• respond to demo requests and support enquiries;
• manage accounts, billing, and security;
• meet legal, regulatory, and safeguarding obligations;
• analyse website usage and maintain service reliability.

Depending on the context, we rely on one or more lawful bases under UK GDPR, including performance of a contract, legitimate interests (such as operating and securing our services), legal obligation, and consent where required (for example, for non-essential cookies).

We do not sell personal data. We may share information with trusted service providers who help us deliver Carepad (such as hosting, email, and payment providers), professional advisers, regulators or law enforcement where required by law, and other parties with your organisation's authorisation.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK international data transfer agreements or equivalent protections.

We keep personal information only for as long as necessary for the purposes described in this policy, including to meet legal, accounting, and safeguarding requirements. Retention periods may vary depending on the type of data and your organisation's contract with us.

Under UK data protection law, you may have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability where applicable. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

To exercise your rights, contact [email protected]. If your organisation uses Carepad, some requests may need to be handled by your employer or care provider as the data controller for care records.

We implement appropriate technical and organisational measures to protect personal information, including access controls, encryption in transit, and audit logging. No method of transmission or storage is completely secure, and we encourage organisations using Carepad to follow good security practices.

We may update this privacy policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Significant changes will be communicated where appropriate.