Privacy Policy

Last Updated: 22.01.2026

1. Introduction

Welcome to the CareJetty Privacy Policy.

CareJetty (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, and share data when you use the CareJetty mobile application (the “App”) and our website (the “Site”).

Because we deal with the care of vulnerable individuals, we hold ourselves to the highest standards of data privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is the Data Controller? CareJetty Ltd is the “Data Controller” of your personal data.

  • Registered Office: [Insert Address]

  • Company Number: [Insert Number]

  • ICO Registration Number: [Insert Number]

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

A. For All Users (Families, Carers, Agencies)

  • Identity Data: First name, last name, date of birth, and gender.

  • Contact Data: Billing address, care location address, email address, and telephone numbers.

  • Technical Data: Internet Protocol (IP) address, login data, device type, time zone setting, and operating system.

  • Usage Data: Information about how you use our App, services, and how you interact with other users (e.g., chat logs).

B. For Care Seekers & Care Recipients

  • Special Category Data (Health Data): To facilitate safe care, we collect sensitive information regarding the care recipient’s health conditions, medication needs, mobility, allergies, and GP details. We process this data only with your explicit consent or where necessary for the provision of health or social care systems.

  • Access Info: Key safe codes or entry instructions provided for Carers.

C. For Care Professionals

  • Employment & Vetting Data: CV/work history, qualifications, National Insurance number, proof of “Right to Work” in the UK, and details from your Enhanced DBS (Disclosure and Barring Service) certificate.

  • Location Data: GPS data to verify “Check-in” and “Check-out” times at a care visit.

  • Financial Data: Bank account details for payouts.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  1. Performance of a Contract: To register you as a new user, process bookings, and handle payments.

  2. Legal Obligation: To verify identities, conduct anti-money laundering checks, and comply with tax laws.

  3. Legitimate Interests: To improve our App, prevent fraud, and ensure the safety of our community.

  4. Consent: Explicit consent is required for processing sensitive Health Data. You may withdraw this consent at any time, but it may prevent us from providing care services.

4. Disclosures of Your Personal Data

To provide our service, we may share your data with:

  • Between Users:

    • Carers will see the Care Recipient’s profile, health needs, and address only after a booking is confirmed or during the interview stage.

    • Families will see the Carer’s full name, photo, qualifications, and reviews.

  • Service Providers: Third parties who provide IT and system administration services (e.g., cloud hosting, chat functionality).

  • Payment Processors: We use [e.g., Stripe] to process payments. We do not store full credit card details on our servers.

  • Background Check Providers: To process DBS checks and identity verification.

  • Professional Advisers & Regulators: Lawyers, auditors, insurers, HM Revenue & Customs, and the Care Quality Commission (CQC) if required.

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

  • All data is encrypted in transit (SSL/TLS) and at rest.

  • Access to your personal data is limited to employees and partners who have a business need to know.

  • We have procedures to deal with any suspected personal data breach and will notify you and the ICO (Information Commissioner’s Office) of a breach where we are legally required to do so.

6. Data Retention

How long will you use my personal data for? We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Account Data: Retained while your account is active.

  • Financial Data: By law, we must keep basic information about transactions for tax purposes for six years.

  • Health Data: Retained only as long as necessary to provide care services or to comply with liability insurance requirements.

7. International Transfers

We strive to store your data within the UK or the European Economic Area (EEA). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring specific safeguards (such as UK International Data Transfer Agreements) are implemented.

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including:

  • Request access to your personal data (a “Data Subject Access Request”).

  • Request correction of the personal data that we hold about you.

  • Request erasure of your personal data (“Right to be Forgotten”).

  • Object to processing of your personal data.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or a third party.

  • Withdraw consent at any time where we are relying on consent to process your data.

If you wish to exercise any of the rights set out above, please contact us.

9. Contact Details

If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection Officer (DPO):

  • Email: privacy@carejetty.co.uk

  • Postal Address: [Insert Address]

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

Table of Contents

Light