Privacy Policy

CareHomeGuide is operated by Digital Prime Ltd ("we", "us", or "our"), a company registered in England and Wales, company number 15199629. Digital Prime Ltd is the data controller for your personal data for the purposes of UK GDPR.

We are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our website at https://www.carehomeguide.uk.

What Data We Collect

Information You Provide

When you submit an enquiry form on our site, we collect:

• Your name
• Email address
• Phone number (if provided)
• Your message or enquiry details

Information Collected Automatically

When you visit our site, we may automatically collect:

• Pages you visit and how you navigate the site
• Your approximate location (country/region level)
• Device type and browser information
• Referring website (how you found us)

This information is collected through cookies and similar technologies. See our Cookie Policy for details.

How We Use Your Data

Enquiry Forms

When you submit an enquiry about a care home, we use your information to:

• Forward your enquiry to the relevant care home(s) so they can respond to you
• Send you a confirmation email
• Follow up to ensure you received a response

Analytics

We use Google Analytics to understand how visitors use our site. This helps us improve the user experience and create more helpful content. Analytics data is aggregated and does not personally identify you.

Email Communications

We use Brevo (formerly Sendinblue) to send transactional emails such as enquiry confirmations. We do not send marketing emails unless you explicitly opt in.

Legal Basis for Processing

Under UK GDPR, we process your personal data on the following bases:

• Consent: For analytics cookies (you can withdraw consent at any time via your browser settings or our cookie preferences)
• Legitimate interests: For processing enquiry form submissions to connect families with care homes
• Contract: To provide the service you requested when making an enquiry

Data Sharing

We share your data only in these circumstances:

• Care homes: When you submit an enquiry, we share your contact details and message with the care home(s) you're enquiring about
• Service providers: We use trusted third parties (Google Analytics, Brevo) to help operate our service. These providers are contractually bound to protect your data

We never sell your personal data to third parties.

Data Retention

We retain enquiry data for up to 24 months to handle any follow-up questions. Analytics data is retained in aggregated form. You can request deletion of your data at any time.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

Data Security

We use industry-standard security measures to protect your data, including HTTPS encryption, secure hosting, and access controls. However, no method of transmission over the internet is 100% secure.

Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect personal data from children.

Memory Companion

Memory Companion is a free tool provided by CareHomeGuide. It gives a person living with dementia a simple daily page showing the date, the day, the weather, and photographs of the people close to them. A family member sets it up and maintains it on their behalf.

Because Memory Companion holds information about a person who may not be able to give consent themselves, we set out separately how it works.

Who is responsible for your data

CareHomeGuide and Memory Companion are operated by Digital Prime Ltd, a company registered in England and Wales, company number 15199629. Digital Prime Ltd is the data controller for the purposes of UK GDPR.

For any question about how we handle data, contact [email protected].

What Memory Companion collects

When you create a Memory Companion account we collect:

• Your name and email address, and a password stored in hashed form
• The profile you create for your relative, which may include their first name, the names and relationships of family members, and other details you choose to add
• Photographs you upload
• Daily journal entries, if you use that feature

You decide what goes into the profile. Nothing is required beyond an email address and a first name for the person the page is for.

Our lawful basis

We process this data on the basis of your consent, given when you create an account and add information to a profile.

A profile about a person living with dementia may reveal information about their health. UK GDPR treats health information as special category data, which requires a higher standard. Our basis for processing it is your explicit consent, given on behalf of your relative in your capacity as the family member setting up and maintaining the page.

You can withdraw that consent at any time by deleting the profile, which removes the underlying data.

Where your data is held

Memory Companion's database and file storage are provided by Supabase, hosted in their eu-west-1 region in Ireland. Data is not transferred outside the European Economic Area. The United Kingdom's adequacy regulations cover the EEA, so this transfer is permitted without additional safeguards.

Photographs are held in a private storage bucket. They are not publicly addressable and are served only through short lived signed links to the account that uploaded them and to the daily page it belongs to.

Who we share it with

We do not sell Memory Companion data, share it with care homes, or use it for advertising. There is no advertising on the daily page.

We use Google Analytics across the site, including Memory Companion pages, to understand how the site is used in aggregate. It is not used to profile individuals and it does not have access to profile content, photographs, or journal entries. It does not run on the daily page itself, and it does not run at all unless you accept analytics cookies.

We use the following providers to operate the service. Each acts as a processor on our instructions and is bound by contract to protect the data:

• Supabase, for database and file storage
• Vercel, for hosting the website
• Cloudflare, for domain and network services
• Brevo, for account emails such as password resets
• Google Analytics, for aggregate site usage statistics

We will disclose data if required to do so by law.

How long we keep it

We keep Memory Companion data for as long as the account is in use.

You can delete a profile at any time from within Memory Companion. Deleting a profile is permanent: it removes the profile along with the family members, visit information, journal entries, and photographs stored against it, and we cannot recover it afterwards.

To have anything else removed, including your account or photographs you have uploaded, contact [email protected] and we will delete it.

Your rights

You have the same rights over Memory Companion data as set out elsewhere in this policy: to access it, correct it, delete it, object to how it is processed, receive a copy of it, and withdraw consent.

Where the data concerns your relative rather than you, those rights belong to them, and you may exercise them on their behalf where you have the authority to do so, whether as an attorney, deputy, or the family member responsible for their care.

To exercise any of these rights, contact [email protected].

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to This Policy

We may update this policy from time to time. We will post any changes on this page and update the "last updated" date.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us:

Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.