PRIVACY & DATA PROTECTION
Your Privacy Matters
to Us
We believe privacy should be clear and straight forward. This notice explains how CareCompass AI collects, uses, and protects personal information when you use our website or contact us.
Clear about your data
Privacy-conscious
Your choices respected
PRIVACY POLICY
How We Handle Your Information
This Privacy Policy explains how CareCompass AI collects, uses, stores, and protects personal information when you visit our website, contact us, request a free risk audit, or book a demonstration.
- Last updated
8 September 2026
- Website
carecompassai.co.uk
YOUR PRIVACY INFORMATION
Everything in One Place
Use the sections below to understand what information we collect, why we use it, and the choices you have.
ON THIS PAGE
01
Who We Are
CareCompass AI provides technology and digital services designed to help UK care providers identify potential compliance risks earlier, improve oversight and reduce administrative workload.
For personal information collected through the CareCompass AI website, CareCompass AI is responsible for deciding how and why that information is used. In data protection terms, this means we act as the data controller for that information.
This Privacy Policy applies to personal information collected when you visit our website, contact us, submit an enquiry, request a Free Care Quality Risk Audit or book a demonstration.
02
Information We Collect
The information we collect depends on how you interact with CareCompass AI. You may provide personal information directly when you complete a form, contact us, request a Free Care Quality Risk Audit or book a demonstration.
Information you provide may include:
- Your name
- Organisation name
- Work email address
- Telephone number, where provided
- Type of care service
- Enquiry type
- Information about your organisation or compliance challenges
- Information you include in messages or form submissions
- Information required to arrange a demonstration or respond to an enquiry
We may also collect limited technical information about how our website is accessed and used where necessary for website operation, security or, where enabled, analytics. Where non-essential cookies or analytics technologies require consent, we will provide appropriate choices before using them.
03
How We Use Your Information
We use personal information only where we have a clear business or legal reason to do so.
We may use your information to:
- Respond to questions and general enquiries
- Arrange and provide requested demonstrations
- Carry out or respond to requests for a Free Care Quality Risk Audit
- Understand your organisation’s requirements and provide relevant information
- Provide customer support
- Operate, maintain and protect our website
- Understand and improve our website and services, where appropriate
- Maintain records of enquiries and communications
- Comply with legal and regulatory obligations
- Send marketing communications where permitted by law and where you have not opted out, where applicable
We do not use information collected through our website to make solely automated decisions about individuals that produce legal or similarly significant effects.
04
Our Lawful Bases
We only use personal information where we have a lawful basis for doing so. The lawful basis we rely on depends on why we are using the information.
Depending on the circumstances, we may rely on:
- Contract — where using your information is necessary to take steps at your request before entering into a contract, or to provide services under a contract with you.
- Legitimate interests — where using your information is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
- Legal obligation — where we need to use or retain information to comply with a legal requirement.
- Consent — where we have asked for and received your consent for a particular use of your information.
Where we rely on legitimate interests, those interests may include responding to and managing business enquiries, improving and securing our website and services, maintaining appropriate business records, and communicating with business contacts where permitted by law.
05
How We Share Information
We do not sell personal information. We may share information with trusted service providers where this is necessary to operate our website, manage enquiries, provide requested services, and support our business operations.
This may include providers that help us with:
- Website hosting and technical infrastructure
- Website forms and enquiry management
- Email and business communications
- Customer relationship management, where used
- Website security and maintenance
- Analytics and website performance, where enabled
- Professional services such as legal, accounting or compliance support
Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that the information is handled securely and only for the purposes for which it has been provided.
We may also disclose personal information where required by law, to establish or defend legal claims, or where necessary to protect our rights, users or services.
06
How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where needed to respond to enquiries, provide requested services, maintain appropriate business records or meet legal, accounting or regulatory requirements.
When deciding how long to keep information, we consider:
- Why the information was collected
- How long it is needed for that purpose
- The nature and sensitivity of the information
- Whether there are legal or regulatory requirements that apply
- Whether the information is needed to establish, exercise or defend legal claims
When personal information is no longer required, we will delete it or anonymise it where appropriate.
07
How We Protect Information
We take the security of personal information seriously and use appropriate technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure.
Our approach to protecting information may include:
- Limiting access to personal information to those who need it
- Using appropriate security measures for our website and systems
- Keeping software and systems maintained and updated
- Using reputable service providers and reviewing how they handle information
- Taking reasonable steps to prevent unauthorised access, loss or misuse
- Reviewing our security arrangements as our services develop
While no method of transmitting or storing information can be guaranteed to be completely secure, we take reasonable and proportionate steps to protect the personal information entrusted to us.
08
Your Data Protection Rights
Under UK data protection law, you may have certain rights in relation to your personal information. Which rights apply can depend on the circumstances and the lawful basis on which we use your information.
Depending on the circumstances, your rights may include:
- Right of access — you can ask for access to the personal information we hold about you.
- Right to rectification — you can ask us to correct inaccurate or incomplete personal information.
- Right to erasure — you can ask us to delete your personal information in certain circumstances.
- Right to restrict processing — you can ask us to restrict how we use your information in certain circumstances.
- Right to data portability — in certain circumstances, you can ask to receive personal information you provided to us in a structured, commonly used and machine-readable format, or ask for it to be transferred to another organisation where technically feasible.
- Right to object — you can object to certain uses of your personal information, including direct marketing.
- Right to withdraw consent — where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.
Your right to object
You have the right to object to the use of your personal information for direct marketing at any time. You may also have the right to object to other processing based on legitimate interests, depending on the circumstances.
You also have rights relating to certain solely automated decisions that have legal or similarly significant effects. As explained above, we do not currently use personal information collected through our website to make decisions of this kind.
To exercise any of your data protection rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before responding to a request.
09
Cookies & Analytics
Our website may use cookies and similar technologies to support its operation, remember preferences, improve security and, where enabled, help us understand how visitors use the website.
These technologies may include:
- Essential technologies — used where necessary for the website to function properly, provide requested features or maintain security.
- Preference technologies — used, where applicable, to remember choices or settings.
- Analytics technologies — where enabled, these may help us understand how visitors find and use our website so that we can improve its performance and content.
Where consent is required for non-essential cookies or similar technologies, we will ask for your choice before using them. You will also be able to change or withdraw your choices where applicable.
As our use of website technologies develops, we will update the information we provide about the technologies in use, their purposes and any choices available to you.
10
International Transfers
Some of the service providers we use may process or store personal information outside the United Kingdom. Where this involves a restricted transfer of personal information, we take appropriate steps to ensure that the transfer complies with UK data protection law.
Depending on the circumstances, this may include relying on:
- UK adequacy regulations
- Appropriate contractual or other safeguards recognised under UK data protection law
- Another permitted mechanism or exception where applicable
Where appropriate safeguards are required, we take reasonable steps to ensure that personal information continues to receive an appropriate level of protection.
11
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, the technologies we use, our business practices or applicable legal and regulatory requirements.
When we make changes, we will update the “Last updated” date shown at the top of this Privacy Policy. Where appropriate, we may also take additional steps to bring significant changes to your attention.
12
Contact Us
If you have questions about this Privacy Policy, how we use your personal information, or if you would like to exercise any of your data protection rights, please contact us.
CareCompass AI
Email: enquiry@carecompassai.co.uk
Website: carecompassai.co.uk
You can also contact us through our website Contact page
13
Complaints
If you have a concern about how we have handled your personal information, please contact us first so that we have an opportunity to review and respond to your concern.
You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
You can find information about making a data protection complaint on the ICO website.
