1. Introduction

Welcome to CarePaddy, a digital platform operated by Techbase IT Ltd. 

We are committed to protecting and respecting your privacy and Personal Data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your data, as well as your rights under applicable data protection laws.

2. Data Controller

Techbase IT Ltd is the Data Controller responsible for your Personal Data.

If you have any questions about this policy or your data, you can contact us at:

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

3. Personal Data We Collect

We may collect and process the following categories of data:

3.1 Identity & Contact Data

Name

Email address

Phone number

3.2 Account & Usage Data

Login credentials 

Platform activity

Preferences and interactions

3.3 Transactional Data

Payment records

Subscription details

3.4 Technical Data

IP address

Device and browser type

Usage analytics

3.5 Resident Data (Limited)

First Name or alias

Room Number

Associated care home

Important:

We do not collect special category data, including medical or health information.

4. Legal Basis for Processing

We process your data under the following lawful bases:

Contractual necessity  to provide the platform services

Legitimate interest  to improve and operate the platform

Legal obligation  to comply with applicable laws

Consent  where required (e.g. marketing communications)

5. How We Use Your Data

We use your Personal Data to:

Provide access to the CarePaddy platform

Manage supply requests and approvals

Process payments and subscriptions

Send notifications (including SMS updates) 

Maintain audit logs and system security

Improve platform performance and user experience

6. Data Sharing

We may share your data with:

Payment processing providers

SMS and notification service providers

Care homes (where relevant to supply requests)

Legal or regulatory authorities where required

We do not sell or trade your personal data.

7. Data Security

We implement appropriate technical and organisational measures, including:

Secure servers and encrypted storage

Role-based access controls

Audit logging and monitoring

Restricted internal access

However, no system is completely secure, and data transmission is at your own risk.

8. Data Retention

We retain Personal Data only as long as necessary:

Account data  while active

Transaction data  for legal and financial compliance

Audit records for operational and compliance purposes

Data may be deleted upon request, subject to legal obligations.

9. Your Rights

Under UK GDPR, you have the right to:

Access your Personal Data

Request correction of inaccurate data

Request deletion (where applicable)

Restrict or object to processing

Request data portability

To exercise your rights,

10. Third-Party Links

Our platform may contain links to third-party services.

We are not responsible for the privacy practices of those services.

11. Data Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place in line with UK GDPR.

12. Changes to This Policy 

We may update this Privacy Policy from time to time.

Any updates will be posted on our website, and continued use of the platform constitutes acceptance of the updated policy.

13. Contact

For any privacy-related queries:

Company: Techbase IT Ltd