Privacy policy

CareShed provides software to care providers. Each provider is the data controller for the information about its staff, clients and families; CareShed acts as their data processor and handles that data only on their instructions, in line with UK GDPR and the Data Protection Act 2018.

What we hold

• Account details: name, email, phone and role.
• Care records entered by providers: client profiles, care plans, visit notes, medication records and activity-space usage.
• Staff records: employment, training, DBS and payroll details.
• Messages sent through our contact form or newsletter sign-up.

How it’s protected

Passwords are hashed, sessions are encrypted, and each provider can only see its own data. Access within a provider is limited by role: carers see only the clients assigned to them, and family members see only the people they’re linked to.

Videos

Videos in the activity space are embedded from YouTube using its privacy-enhanced mode, which doesn’t set tracking cookies until a video is played.

Your rights

If you’re a client, carer or family member, contact your care provider first to access, correct or delete your information. You can also email hello@careshed.co.uk.