Privacy notice

CompliCare (“we”, “us”), a product of KOP Technology, is the controller of personal data collected through complicareapp.com (the “site”). This notice explains what we collect when you visit the site or submit an enquiry, why we collect it, who we share it with, and your rights under the UK GDPR and the Data Protection Act 2018. It does not cover data processed once you become a customer and use the CompliCare product itself — that is governed by your subscription agreement and a separate data processing agreement.

Who we are

CompliCare is operated by KOP Technology, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any privacy question, contact info@koptechnology.co.uk.

Data we collect

• Enquiry details you submit through the Contact or Book a Demo forms: name, work email, phone number, organisation, number of homes, preferred time to talk and any message you write.
• Consent record — whether you agreed to us processing your enquiry, and when.
• Staff account data, if you are a CompliCare team member with access to our admin portal: your email address, authentication details and actions you take within the portal.
• Technical data such as IP address and browser information, collected automatically by our hosting and security infrastructure to keep the site secure and prevent abuse (for example, rate-limiting repeated form submissions).
• Aggregate usage data collected by our privacy-friendly, cookieless analytics (Vercel Web Analytics) — anonymous page-view and referrer counts. It sets no cookies, does not track you across sites, and does not collect personal data.

We do not run advertising cookies or third-party tracking on this site. Our analytics is cookieless, so it needs no consent banner; if we ever introduce anything that does require consent, we will only load it after you agree via the cookie banner and will update this notice and our cookie policy first.

Why we process it, and our legal basis

• To respond to your enquiry and arrange a demo — necessary to take steps at your request before entering a contract (Article 6(1)(b) UK GDPR).
• To keep the site secure and prevent spam or abuse of our forms — our legitimate interest in protecting the service and other users (Article 6(1)(f)).
• To meet our legal and regulatory obligations, for example responding to lawful requests from authorities (Article 6(1)(c)).
• Where you have separately agreed to receive marketing or product updates — your consent (Article 6(1)(a)), which you can withdraw at any time.

Who we share it with

We use a small number of trusted service providers (“processors”) to run the site, and we only share what each of them needs to do their job:

• Supabase — our database, authentication and file storage provider, used to securely store enquiry records and admin portal accounts.
• Brevo — our transactional email provider, used to send you a confirmation when you submit an enquiry and to notify our team internally. Brevo does not use your details for its own marketing.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. Where a processor is located or processes data outside the UK, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum.

Retention

We keep enquiry data for up to 24 months from your last contact with us, after which it is deleted unless you become a customer — in which case retention is governed by your subscription agreement. Staff account data is retained for the duration of employment plus a short period required for legal and audit purposes, then deleted.

Automated decisions

We do not use your personal data to make any decision about you solely by automated means without human involvement.

Children’s data

This site is intended for care home operators and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

Your rights

Under the UK GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, where there is no legal reason for us to keep it;
• restrict or object to certain processing;
• receive your data in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email info@koptechnology.co.uk. We will respond within one month. If you are unhappy with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Hosting and security

Personal data is hosted on infrastructure operated by our processors, protected in transit by TLS encryption and behind role-based access controls so that only authorised staff can view enquiry data. Access to the admin portal is restricted to accounts explicitly granted an administrator role.

Cookies

This site uses a small number of strictly necessary cookies and local storage entries. Details of what is set, and why, are in our cookie policy.

Changes to this notice

We may update this notice from time to time, for example if we change service providers or add new features. The “last updated” date at the top of this page will always reflect the most recent version.