Privacy Policy

1. Introduction

RightCareHome ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our care home assessment services. We are registered as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Personal details: name, email address, telephone number, and postal address
• Care requirements: location preferences, type of care needed, mobility and medical needs
• Budget information: funding sources and available budget ranges
• Payment details: billing information for professional services (processed securely via our payment provider)
• Communications: enquiries, feedback, and correspondence with our support team

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Device information: IP address, browser type, operating system
• Usage data: pages viewed, time spent on pages, navigation paths
• Cookies and similar technologies (see our Cookie Policy for details)

3. How We Use Your Information

We use the information we collect to:

• Provide and deliver our care home assessment services and personalised recommendations
• Process your transactions and send related information, including invoices and receipts
• Communicate with you about our services, including technical notices, updates, and support messages
• Respond to your enquiries, comments, and questions
• Analyse usage patterns to improve our services and develop new features
• Detect, prevent, and address technical issues, fraud, or security concerns
• Comply with legal obligations and enforce our Terms of Service

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To fulfil our agreement to provide assessment services
• Legitimate Interests: To improve our services, ensure security, and analyse usage
• Consent: For marketing communications (you may withdraw consent at any time)
• Legal Obligation: To comply with accounting, tax, and regulatory requirements

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Payment processors, email services, and hosting providers who assist in operating our services
• Professional Advisers: Lawyers, accountants, and auditors where necessary
• Regulatory Authorities: When required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third parties are required to maintain the confidentiality and security of your information and use it only for the purposes we specify.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure password-protected databases
• Regular security assessments and updates
• Limited staff access on a need-to-know basis
• Secure data backup and recovery procedures

Whilst we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent for processing at any time
• Right to Lodge a Complaint: Contact the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at privacy@rightcarehome.com. We will respond within one month of receiving your request.

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account information: Retained whilst your account is active and for 7 years thereafter for legal and accounting purposes
• Assessment data: Retained for 3 years to provide ongoing support and improve our services
• Marketing data: Retained until you unsubscribe or request deletion
• Analytics data: Anonymised and retained indefinitely for statistical purposes

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information is primarily stored and processed within the United Kingdom. If we transfer your data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK ICO
• Adequacy decisions confirming equivalent data protection standards
• Other legally approved transfer mechanisms

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: