Privacy Policy
Last updated: 17 June 2026
CarerCore (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
CarerCore is a home care platform connecting individuals seeking care with professional carers across Northern Ireland. We act as the data controller for all personal data collected through our website at www.carercore.com.
If you have any questions about how we handle your data, you can contact us at: support@carercore.com
2. Personal Data We Collect
We collect the following categories of personal data depending on how you use CarerCore:
- Identity data: first name, last name, date of birth, gender.
- Contact data: email address, phone number.
- Account data: login credentials (managed via Better Auth), account role (user or carer), onboarding status.
- Care preference data: care recipient information, funding method, care start date, preferred carer gender, weekly budget (for direct payment enquiries), HSC Trust selection.
- Carer profile data: professional biography, years of experience, services offered, skills, languages spoken, qualifications, availability, pet-friendliness, profile photo.
- Booking data: booking details, booking status, contract information.
- Usage data: pages visited, interactions with the platform, device and browser type (collected via Google Analytics where consent is given).
- Communications data: messages sent via our contact form or email.
We do not collect special category data (such as detailed health records or medical diagnoses) directly. Care needs are described in general terms during the screening process.
3. How We Use Your Data & Legal Basis
We process your personal data on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract performance (Art. 6(1)(b)) |
| Matching you with suitable carers | Contract performance (Art. 6(1)(b)) |
| Sending OTP verification emails | Contract performance (Art. 6(1)(b)) |
| Processing bookings and care requests | Contract performance (Art. 6(1)(b)) |
| Sending transactional emails (booking confirmations) | Contract performance (Art. 6(1)(b)) |
| Preventing fraud and ensuring platform security | Legitimate interests (Art. 6(1)(f)) |
| Improving our platform and services | Legitimate interests (Art. 6(1)(f)) |
| Analytics and usage tracking (Google Analytics) | Consent (Art. 6(1)(a)) |
| Responding to enquiries and contact form messages | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Data Sharing & Third Parties
We do not sell your personal data. We share data only with trusted third-party processors as necessary to operate our platform:
- Neon (database hosting): Your data is stored in a PostgreSQL database hosted on Neon's serverless infrastructure. Data is held within the EU/EEA.
- Resend (email delivery): We use Resend to send transactional emails such as OTP codes and booking confirmations.
- Mapbox: Location and map data is processed by Mapbox when displaying care location information.
- Google Analytics: Used to understand how visitors interact with our platform. Only activated with your cookie consent. Google may transfer data to the US under the EU-US Data Privacy Framework.
- Better Auth: Authentication sessions are managed securely server-side. Session tokens are stored in cookies on your device.
We may also disclose personal data to law enforcement or regulatory authorities where required by law.
5. How Long We Keep Your Data
- Account data: Retained for the duration of your account and for up to 7 years after account closure, in line with UK financial record-keeping requirements.
- Session data: Authentication sessions expire after 30 days of inactivity.
- Care request data: Retained for 7 years to support any disputes or regulatory requirements related to care services.
- Contact form messages: Retained for 2 years.
- Analytics data: Google Analytics data is retained for 14 months per Google's default retention period.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Ask us to correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where there is no legitimate reason for continued processing.
- Right to restrict processing: Ask us to pause processing of your data in certain circumstances.
- Right to data portability: Request your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you may withdraw at any time via our Cookie Settings.
To exercise any of these rights, contact us at support@carercore.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. These include encrypted database connections, HTTPS across all pages, secure session management, and access controls.
However, no method of transmission over the internet is completely secure. If you believe your data has been compromised, contact us immediately at support@carercore.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically.
10. Contact Us
If you have any questions, requests, or concerns about your privacy or this policy, please contact us at: support@carercore.com
© 2026 CarerCore. All rights reserved.