CareConnect ND Limited – Privacy Policy

Effective Date: 01-07-2025
Company: Care Connect ND Limited
Registered Address: 5 SOUTH CHARLOTTE STREET, Edinburgh, EH2 4A, Scotland, United Kingdom
Company Number: 79845
Contact Email: privacy@careconnect.co.uk
Platform: CareConnect App and www.careconnectnd.co.uk

1. Introduction

This Privacy Policy sets out how Care Connect ND Limited (“CareConnect”, “we”, “us”, “our”) processes your personal data when you use our platform and associated services. CareConnect is committed to protecting the privacy and rights of individuals in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable legal obligations.

By registering for, accessing, or using CareConnect’s platform (including our app or website), you confirm that you have read and understood this Privacy Policy and agree to the processing of your data in the manner described herein.

2. Identity of the Data Controller

Care Connect ND Limited is the data controller for the personal data collected through our platform. We determine the purpose and manner of processing your information and are responsible for ensuring compliance with applicable data protection laws.

For any privacy-related queries, you may contact our Data Protection Officer (DPO) via email at: ContactUs@careconnectND.co.uk

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and information you provide in your user profile.
• Contact Data: Email address, telephone number, home postcode, and any optional location data you choose to share.
• Sensitive Data: Health-related and neurodiversity information that you provide voluntarily to enable tailored support. This is only processed with your explicit consent.
• Usage Data: Information about how you interact with the platform, including requests for support, posts, messages, Care Token activity, and community engagement.
• Technical Data: IP address, device identifiers, browser type, app settings, and crash logs.
• Verification Data: Where relevant, records relating to background checks (e.g., DBS or PVG), safeguarding declarations, and volunteer engagement.

Example: If you request support with school transportation and indicate your child’s specific care needs, this constitutes sensitive data and is protected accordingly.

4. How We Collect Your Data

We collect data through the following means:

• Direct interactions: When you register, update your profile, post requests, or contact us.
• Automated technologies: Through your interaction with our platform and services.
• Third-party sources: For example, volunteer background verification, where applicable.

All data is collected lawfully and transparently, in accordance with Article 13 of the UK GDPR.

5. How and Why We Use Your Data

We use your personal data for the following purposes:

• To create and manage user accounts and user interactions.
• To facilitate safe, voluntary support exchanges between users.
• To match individuals and families based on compatibility and shared interests or needs.
• To conduct safeguarding checks where required and promote platform safety.
• To respond to queries, improve user experience, and develop new services.
• To comply with our legal obligations under UK law.

We rely on the following legal bases for processing:

• Consent: For special category data and communications preferences.
• Contractual necessity: To deliver the service you have registered for.
• Legal obligation: For compliance with safeguarding and data protection laws.
• Legitimate interests: For platform administration, improvement, and user protection.

6. Sharing Your Information

Your data will only be shared when necessary, with appropriate safeguards in place, and in the following circumstances:

• With your express and informed consent.
• With designated safeguarding authorities, where required by law.
• With contracted service providers who support our operations (e.g., data hosting, analytics), subject to strict confidentiality and data processing agreements.
• With other users of the platform to facilitate voluntary support—only in line with your privacy settings and actions.

Example: If you agree to a support exchange with another user, they may see your first name, general location, and contact method.

7. Data Security and Storage

We take reasonable and proportionate steps to ensure your data is secure, including:

• Use of encryption for data transmission (TLS) and storage (AES-256).
• Secure, access-controlled infrastructure based in the UK or EEA.
• Regular audits, monitoring, and staff training in data protection.

Data is retained only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Obtain a copy of your personal data.
• Rectification: Correct incomplete or inaccurate data.
• Erasure: Request deletion of data where applicable (“right to be forgotten”).
• Restriction: Temporarily halt processing of your data.
• Portability: Receive your data in a transferable format.
• Objection: Oppose processing based on our legitimate interests.
• Withdrawal of Consent: Revoke previously given consent at any time.

To exercise these rights, please contact: ContactUS@careconnectND.co.uk

9. Cookies and Analytics

We use cookies and tracking technologies to:

• Maintain secure user sessions.
• Improve the performance and functionality of the platform.
• Gather usage insights to improve the service.

Where required, we will seek your consent for non-essential cookies in accordance with the Privacy and Electronic Communications Regulations (PECR).

10. Children and Safeguarded Individuals

CareConnect is designed for use by individuals aged 18 and over. Use of the platform to support children or adults at risk must be undertaken only with appropriate authority, informed consent, and adherence to CareConnect’s safeguarding protocols.

We enforce heightened safeguards for:

• Children and minors under 18.
• Adults with disabilities or under care supervision.

11. Policy Updates

We reserve the right to update this Privacy Policy in line with changes to law or our operations. Any material changes will be clearly communicated to users via email or app notifications. We encourage regular review of this page.

12. Contact and Complaints

If you have any questions or concerns about this policy or how your data is handled, please contact us:

Care Connect ND Limited
Registered Address: 5 SOUTH CHARLOTTE STREET, Edinburgh, EH2 4A, Scotland, United Kingdom
Email: ContactUS@careconnectND.co.uk

You may also lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your rights have been infringed.