Privacy Policy

CareCentral is a trading name of Select Choice Community Support Ltd, a company registered in England and Wales (company number 13052737). Our registered office is 87a Skipton Road, Harrogate, North Yorkshire, HG1 4LF.

We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZB328921.

For any question about this policy or your personal data, email admin@carecentral.app.

For the information in the sections on enquiries, purchases, marketing and our website, we are the controller: we decide how and why it is used.

For information about learners — the staff an organisation enrols on our training — the organisation that buys the training is the controller. We handle learner information on that organisation's behalf, to deliver the training it has bought.

When you contact us — by email, or using the enquiry form on our website — we receive the details you choose to send, typically your name, organisation, email address, telephone number and your message. The enquiry form opens a message in your own email app; our website does not store what you type.

We use this to reply to you and, if you ask, to discuss or provide our services. Our lawful basis is our legitimate interests in responding to enquiries, or taking steps at your request before entering into a contract.

Training credits and Unlimited subscriptions are bought through a checkout provided by Shopify. At checkout you give your name, email address, billing address and payment details, and you may give your organisation and telephone number.

Payments are processed by Shopify. We do not see or store your full card details. We receive your order details so that we can provide the training you have bought, manage your subscription, invoice you, and keep the financial records the law requires.

Our lawful bases are contract (providing what you have bought) and legal obligation (keeping tax and accounting records). Shopify's handling of personal data is described in its privacy policy.

When an organisation buys training, it gives us the names and email addresses of the staff who need learner accounts. We use these only to set up and manage those accounts for that organisation.

Our learning platform is provided by Flexebee Ltd. The platform records each learner's course progress, results and certificates, and the learner's organisation can see these to manage its training and evidence compliance. Flexebee's handling of personal data on the platform is described in its privacy policy.

If you are a learner, your organisation is responsible for how your training information is used. You can contact your organisation or us about it, and we will help your organisation respond.

We may email customers and people who have enquired with us about our training, new courses and offers. Our lawful basis is our legitimate interests in promoting our services to the care organisations we work with.

Every marketing email lets you unsubscribe, or you can email admin@carecentral.app at any time. We will stop straight away, and keep only the minimum needed to make sure we do not contact you again. We do not sell your information, or share it with anyone for their own marketing.

Our website does not use cookies, analytics or advertising trackers. Like any website, our hosting provider records technical information such as your IP address, browser type and the pages requested, which is used to deliver the site and keep it secure. Our lawful basis is our legitimate interests in running a secure website.

Links to other sites — Shopify checkout, the learning platform, and our reviews on Google — are covered by those organisations' own privacy policies and cookies once you follow them.

We share personal information only as needed to run our service, with:

• Shopify — checkout, payments and subscriptions;
• Flexebee Ltd — the learning platform;
• Vercel — hosting for our website;
• our email provider, which holds our correspondence;
• professional advisers such as our accountants, and HMRC or other authorities where the law requires it.

We never sell personal information.

Some of these providers, including Shopify and Vercel, may process information outside the UK, for example in the United States or Canada. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

• Enquiries: up to two years after our last contact, unless you become a customer.
• Customer and order records: six years from the end of the financial year they relate to, as tax law requires.
• Learner accounts: for as long as the organisation's training is active, then deleted or returned as the organisation instructs. How long the platform keeps records is set out in Flexebee's privacy policy.
• Marketing: until you unsubscribe, after which we keep only a record not to contact you.

We limit access to personal information to the people who need it, use providers that protect the information they process for us, and never ask for or store card details ourselves.

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to our use of it where we rely on legitimate interests — and to stop marketing at any time;
• ask for information you gave us in a portable format.

To use any of these rights, email admin@carecentral.app. We will respond within one month. Some rights have limits — for example, we must keep financial records for as long as the law requires.

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

We will update this policy when how we use personal information changes. The date at the top shows when it was last updated.