Privacy Policy
Last updated: 1 February 2026
1. Introduction
CareChecked Ltd (“CareChecked”, “we”, “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
CareChecked Ltd is the data controller. Our ICO registration number is ZA000000. Our Data Protection Officer can be contacted at dpo@carechecked.co.uk.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, telephone number, postal address
- Provider verification documents: DBS certificates, professional qualifications, insurance documents, photo identification
- Profile information: Biography, experience, qualifications, availability, photographs
- Payment information: Card details (processed securely via our payment provider; we do not store full card numbers)
- Communications: Messages sent through the Platform, enquiries, reviews, and support correspondence
2.2 Information We Collect Automatically
- Usage data: Pages visited, features used, search queries, time spent on pages
- Device information: Browser type, operating system, screen resolution, IP address
- Location data: Approximate location based on IP address (for local search results)
- Cookies and similar technologies: See our Cookie Policy for full details
3. How We Use Your Information
We use your personal data for the following purposes:
- To create and manage your account
- To verify provider credentials and maintain the integrity of the registry
- To connect families with suitable care providers
- To process subscription payments
- To send important service communications (e.g., verification updates, payment confirmations)
- To improve and develop the Platform
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations
4. Legal Basis for Processing
We process your data under the following lawful bases:
- Contract: Processing necessary to provide the services you have requested
- Legitimate interests: Improving our Platform, preventing fraud, ensuring safety
- Legal obligation: Complying with applicable laws and regulations
- Consent: Where you have given specific consent (e.g., marketing communications)
5. Data Sharing
We may share your data with:
- Other users: Provider profiles are visible to families; family enquiry details are shared with the contacted provider
- Service providers: Payment processors, hosting providers, email delivery services, and analytics tools
- Regulatory bodies: Where required by law or in response to a valid legal request
- DBS verification services: To verify Enhanced DBS certificates via the Update Service
We do not sell your personal data to third parties.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the services. If you close your account, we will delete or anonymise your data within 90 days, unless we are required to retain it for legal or regulatory purposes. Provider verification records are retained for 6 years after the account is closed in accordance with regulatory requirements.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (subject to legal retention requirements)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, please contact us at privacy@carechecked.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, regular security assessments, and staff training. While we take all reasonable precautions, no method of transmission over the internet is entirely secure.
9. International Transfers
Your data is primarily stored within the United Kingdom and European Economic Area. Where data is transferred outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Platform.
11. Contact
For any questions about this Privacy Policy, please contact our Data Protection Officer at dpo@carechecked.co.uk.
Important notice: CareChecked verifies documentation but does not employ carers or provide care services. CareChecked Ltd acts as a marketplace connecting families with independently verified care providers. All care relationships are directly between the family and the provider.