Privacy Policy

Last updated: 25 August 2026

1. Introduction

CareShed ("we", "us", "our") provides care management software to UK care providers. This Privacy Policy explains how we collect, use, and protect personal data when you use our platform (the "Service"), whether as a care provider, support worker, service user, or guardian account.

We are committed to handling personal data responsibly and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Depending on your role on the platform, we may collect:

• Account details: name, email address, phone number, and password.
• Organisation details: company name, CQC registration information, and address, for care provider accounts.
• Care-related information: care plans, visit and interaction logs, scheduling data, and safeguarding notes, entered by care providers and support workers in the course of delivering care.
• Special category data: health, medical, and care-related information about service users, which is processed under strict safeguards as it is necessary for the provision of care.
• Usage data: log-in times, IP address, and general usage of the Service, used to maintain security and improve the platform.

3. How We Use Your Information

We use personal data to: provide and maintain the Service; authenticate accounts and manage access by role; enable care providers to create and manage care plans, schedules, and visit records; communicate with you about your account or the Service; and meet our legal and regulatory obligations.

4. Sharing Your Information

We do not sell personal data. We may share data with: sub-processors who help us run the Service (such as hosting and email providers), under contracts requiring them to protect your data; regulators or authorities where required by law; and other users within your care organisation, according to their role-based access (for example, a support worker sees only the service users assigned to them).

5. Data Security

We use industry-standard measures to protect personal data, including encrypted connections, hashed passwords, and role-based access controls. No system is completely secure, and we continually review our safeguards.

6. Data Retention

We retain personal data for as long as your account is active, and afterwards only as long as necessary to comply with our legal obligations (including care record retention requirements), resolve disputes, and enforce our agreements.

7. Your Rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to request a copy of your data in a portable format. To exercise these rights, contact us using the details below.

8. Cookies

We use cookies to keep you signed in and to understand how the Service is used. See our Cookie Policy for details.

9. Children's Privacy

The Service is intended for use by care organisations and their staff. Where care plans relate to a minor, data is processed on the instruction of the care provider acting as data controller.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date above.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@careshed.co.uk.