Privacy Policy
Last updated: December 2024
1. About Us
Care Directory is operated by NE26 Limited, a company registered in England and Wales.
- Company Number: 16030871
- Registered Address: First Floor Office, 3 Hornton Place, London, United Kingdom, W8 4LZ
- Email: [email protected]
2. Information We Collect
We collect the following types of personal information:
For Care Seekers (Families)
- Name and email address when you create an account
- Phone number (optional) when submitting enquiries
- Messages and enquiry content sent to care providers
- Search preferences and browsing activity on our platform
For Care Providers
- Business contact information (name, email, phone)
- Care home/service details (address, services, pricing)
- CQC registration information (publicly available)
- Payment information processed securely via Stripe
3. How We Use Your Information
We use your personal data to:
- Connect families with suitable care providers
- Process and forward enquiries to care providers
- Send transactional emails (account confirmations, enquiry notifications)
- Process subscription payments for care providers
- Improve our services and user experience
- Comply with legal obligations
4. Legal Basis for Processing
We process your data under the following legal bases:
- Contract: To provide our services when you create an account or submit enquiries
- Legitimate Interests: To improve our platform and communicate relevant updates
- Consent: For marketing communications (you can opt out at any time)
- Legal Obligation: To comply with UK laws and regulations
5. Data Sharing
We share your data with:
- Care Providers: Your enquiry details are shared with providers you contact
- Payment Processors: Stripe processes payments securely (they have their own privacy policy)
- Email Service: Resend delivers our transactional emails
- Analytics: Google Analytics helps us understand site usage (anonymised)
We never sell your personal data to third parties for marketing purposes.
6. Data Retention
We retain your data for:
- Account data: Until you request deletion
- Enquiry data: 3 years from submission
- Payment records: 7 years (legal requirement)
- Marketing preferences: Until you withdraw consent
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a portable format
- Object: Object to certain processing activities
- Withdraw Consent: For any consent-based processing
To exercise these rights, email us at [email protected]
8. Cookies
We use cookies to improve your experience. Our cookie banner allows you to manage your preferences. Essential cookies are required for the site to function. Analytics and marketing cookies are optional.
See our cookie settings by clicking "Cookie Settings" in the footer.
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication systems
- Regular security reviews
- Access controls and staff training
10. Contact Us
For privacy-related queries or to exercise your rights:
- Email: [email protected]
- Post: NE26 Limited, First Floor Office, 3 Hornton Place, London, W8 4LZ
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.