Privacy Policy

1. Who we are

Elizabeth Care Consulting provides compliance and governance software to care providers. We are the controller of the personal data described in this policy. You can contact us at support@elizabethcareconsulting.co.uk.

2. Data we collect

Depending on how you use the service, we may collect:

• Account details such as your name, email address, password (stored as a secure hash), organisation, and role.
• Compliance records and content you enter into the suite, which may include information about your staff and services.
• Technical data such as IP address, browser type, device information, and pages visited.
• Communication data when you contact support or respond to emails.

3. How we use your data

We use personal data to:

• Create and manage accounts and provide the service you have requested.
• Maintain the security and integrity of the platform.
• Respond to enquiries and provide customer support.
• Improve features, performance, and usability using aggregated or de-identified information.
• Meet legal, regulatory, and contractual obligations, including compliance record-keeping.

4. Legal basis for processing

Under the UK GDPR, we rely on contract where processing is necessary to provide the service, on legitimate interests for security and service improvement, on consent for optional cookies and marketing communications, and on legal obligation where we must retain or disclose information.

5. Cookies and similar technologies

We use necessary cookies to operate the site, including keeping you signed in and protecting forms. With your consent, we also use analytics, preference, and marketing cookies. The cookie banner shown on your first visit lets you accept all cookies or choose individual categories. You can withdraw consent at any time by clearing the ecc_cookie_consent cookie and reloading the site, or through your browser settings. See our Terms and Conditions for the cookie categories we use.

6. Sharing your data

We do not sell personal data. We may share it with trusted service providers who support hosting, email delivery, and payment processing, and only to the extent needed to provide those services. We may also disclose data where required by law or to protect our legal rights.

7. Data retention

We keep personal data only for as long as necessary for the purposes described above, including any period required by law or contract. When data is no longer needed, we securely delete or anonymise it.

8. How we protect your data

We use technical and organisational measures to protect personal data, including encrypted connections, hashed passwords, access controls, tenant isolation, and regular review of our security practices. No method of transmission or storage is completely secure, but we work to protect your information against unauthorised access, loss, or alteration.

9. Your rights

You may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to request portability or withdraw consent. To exercise a right, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO).

10. Contact us

For privacy questions or requests, email support@elizabethcareconsulting.co.uk.