Privacy Policy

Last updated: June 2026

ICO Registered — Data Protection

Registration reference: ZC192483

Registered: 7 July 2026 · Expires: 6 July 2027

ico.org.uk

1. Who We Are

Care Hub is a community platform connecting families who use Direct Payments with independent support workers. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Care Hub is registered with the Information Commissioner's Office (ICO) in the United Kingdom.

For data protection queries, contact us through the Care Hub platform.

2. What Data We Collect

We collect the following categories of personal data:

Registration data: your name, email address, and role (carer, family, agency, or training provider)

Profile data: location, profile photo, biography, qualifications, specialties, availability, and hourly rate

Care and health-related data: support needs, care requirements, and related information necessary for matching carers with families (this is special category data processed with your explicit consent)

Communications: messages sent between users through the platform

Usage data: how you interact with the platform (pages visited, features used)

Payment data: membership payment records (payment card details are processed securely by Stripe and are not stored by Care Hub)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

•Contract: to provide the Care Hub service you have registered for

•Legitimate interests: to improve the platform, prevent misuse, and ensure safety

•Legal obligation: to comply with applicable laws and safeguarding duties

•Consent: where you have explicitly agreed

For special category data (care and health-related information), we rely on your explicit consent as the lawful basis under UK GDPR. By creating a profile and using the platform, you give us this consent. You can withdraw consent at any time by deleting your account or contacting us.

4. How We Use Your Data

Your data is used to:

•Create and manage your Care Hub account

•Display your profile to other platform users

•Facilitate messaging between users

•Process membership payments

•Send service-related notifications and updates

•Investigate reports of misuse or safeguarding concerns

•Improve the platform's features and user experience

5. Who We Share Data With

We do not sell your personal data. We may share data with:

•Stripe: for secure payment processing

•Base44: our platform infrastructure provider, who process data on our behalf under a data processing agreement

•Regulatory or law enforcement authorities: where required by law or to protect the safety of individuals

We do not share your personal data with third parties for marketing purposes.

6. Data Retention

We retain your personal data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or safeguarding reasons.

Messages may be retained for a period after account closure to support safeguarding investigations if required.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

•Right of access: request a copy of the data we hold about you

•Right to rectification: request correction of inaccurate data

•Right to erasure: request deletion of your data ("right to be forgotten")

•Right to restriction: request we limit how we process your data

•Right to data portability: request your data in a structured, machine-readable format

•Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us through the platform. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

Care Hub uses essential cookies to keep you logged in and to maintain your session. We do not use tracking or advertising cookies. By using the platform, you consent to the use of essential cookies.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections. Access to personal data is restricted to those who need it to operate the platform.

No method of transmission or storage is 100% secure. If you become aware of a security concern, please report it to us immediately via the platform.

10. Children's Data

Care Hub is intended for use by adults aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has registered, please contact us immediately so we can remove their data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Continued use of Care Hub after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For any data protection queries or to exercise your rights, please contact us through the Care Hub platform.

Last updated: June 2026