Effective Date: 24 June 2025
Brandso Ltd (Company No. 15970239), together with its affiliated trading entities Find Carers (find-carers.co.uk), PolicyBase, CareBridge Academy, and Brandso Studios (collectively, the "Brandso Group," "we," "us," or "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites, use our platforms, or engage with our services.
1. Data Controller
Brandso Ltd (Company No. 15970239) is the data controller for personal data processed through Find Carers, PolicyBase, CareBridge Academy, and Brandso Studios. Our registered office is:
[Insert Registered Address]
Email: privacy@brandso.co.uk Phone: 0333 335 5919
2. Scope
This Policy applies to all personal data we process in relation to:
- Clients: Individuals or organisations seeking care services.
- Carers: Individuals or entities providing care services.
- Visitors: Users browsing our websites.
- Subscribers: Users with active subscriptions or accounts on our platforms.
3. Personal Data We Collect
3.1. Data You Provide
- Account Registration: Name, email, phone number, address, date of birth, login credentials.
- Profile Information: Qualifications, certifications, specialisms, insurance details (for carers); care needs assessments (for clients).
- Payment Information: Billing address, payment card or bank details (processed via our PCI-compliant gateways).
- Communication: Messages, support tickets, feedback, and survey responses.
3.2. Data Collected Automatically
- Usage Data: IP address, browser type and version, operating system, pages visited, time and date of visit, referral URL.
- Cookies & Tracking: Session cookies, persistent cookies, and similar technologies (see Section 6).
3.3. Data from Third Parties
- Background Checks: DBS checks and compliance verifications via PolicyBase.
- Training Records: Course completions and CPD logs from CareBridge Academy.
- Marketing Data: Analytics and campaign performance from Brandso Studios.
4. Purposes & Legal Bases for Processing
| Purpose | Data Category | Legal Basis |
|---|---|---|
| Account setup and authentication | Account Registration | Contractual necessity |
| Service delivery and matching | Profile, Usage Data | Legitimate interests (efficient service) |
| Payment processing | Payment Information | Contractual necessity; legal obligation (tax) |
| Compliance, background checks | Background Data | Legal obligation; consent |
| Training administration | Training Records | Contractual necessity |
| Marketing & newsletters | Contact, Usage Data | Consent; legitimate interests |
| Analytics & service improvement | Usage Data | Legitimate interests (improvement) |
| Legal compliance & fraud prevention | All relevant data | Legal obligation; legitimate interests |
7. International Data Transfers
User data may be transferred to and stored on servers outside the UK and European Economic Area (EEA). Where transfers occur, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
8. Data Retention
We retain personal data for as long as necessary to fulfil the purposes set out in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:
- Account Data: Duration of the user's active account + up to 7 years for legal compliance.
- Transaction Records: 7 years (tax and audit requirements).
- Marketing Consents: Until consent is withdrawn + 2 years.
9. Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including:
- Encryption in transit (TLS) and at rest.
- Access controls and multi-factor authentication for internal systems.
- Regular security audits and vulnerability assessments.
10. Your Rights Under GDPR
As a data subject, you have the right to:
- Access your personal data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase data ("right to be forgotten"), subject to legal obligations.
- Restrict or object to processing for certain purposes.
- Data portability to another controller.
- Withdraw consent at any time (where processing is based on consent).
To exercise any rights, contact us at privacy@brandso.co.uk. We will respond within one month of receipt.
11. Children's Privacy
Our services are intended for users aged 18+. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us to request deletion.
12. Changes to This Policy
We may update this Policy periodically. We will notify you of material changes by email or via prominent notice on our platforms. Continued use after updates signifies acceptance.
13. Contact Us
For questions or concerns about this Privacy Policy, please contact:
Data Protection Officer
Brandso Ltd (Company No. 15970239)
Email: privacy@brandso.co.uk
Address: 6 Orion Drive Nottingham Ng8 4EJ
Phone: 0333 335 5919