CareMatch Intelligence currently uses synthetic or fully anonymised demonstration information. Do not enter or upload names, dates of birth, addresses, case records or other information that could identify a child.
1. Who we are
CareMatch Intelligence Ltd is developing a decision-support platform for children’s social care placement matching. CareMatch Intelligence Ltd is the controller of personal information collected directly through this website and demonstration service.
This policy applies to website visitors, people requesting a demonstration account, approved demonstration users and people who contact us about a pilot or partnership.
2. Information we collect
We may collect:
- Account information: your name, email address, Google profile name and profile image where you choose Google sign-in, and a technical user identifier.
- Organisation information: organisation name, organisation type, role, work contact details, Ofsted URN, council or team identifier and the information supplied in an access request.
- Verification material: optional documents uploaded to support an organisation’s demo-access request.
- Communications: information you include in enquiries, feedback or pilot discussions.
- Technical and security information: sign-in activity, timestamps, audit events, device/browser information and information needed to prevent misuse and keep the service secure.
Google sign-in requests only the basic account information shown on Google’s consent screen, such as your name, profile image and email address. CareMatch Intelligence does not receive your Google password.
3. How and why we use information
We do not sell personal information and we do not use account information for unrelated advertising.
4. Children’s information
The public website and demo-account service are intended for authorised adult professionals, not for children to use directly. The current demonstration must use synthetic or properly anonymised information only.
CareMatch Intelligence will not accept live identifiable child information through the public demo. Any future live pilot involving children’s personal information would require a separate written agreement, documented controller/processor responsibilities, a data protection impact assessment where required, suitable lawful bases and special-category conditions, access controls, retention rules and approval by the participating organisation.
The platform provides decision support only. It does not make solely automated placement decisions, and qualified professionals remain responsible for every placement decision.
5. Who we share information with
We use carefully selected service providers to operate the current demo:
- Supabase for account authentication and secure sign-in;
- Google when you choose Google sign-in;
- OpenAI Sites and Cloudflare infrastructure for website hosting, storage, delivery and security; and
- professional advisers, regulators, law-enforcement bodies or public authorities where disclosure is required by law or necessary to protect legal rights.
Providers acting on our behalf may use information only to deliver their contracted services and must protect it appropriately.
6. International transfers
Some technology providers may process information outside the United Kingdom. Where personal information is transferred internationally, we rely on applicable adequacy regulations or approved contractual safeguards and supplementary protections as required.
7. How long we keep information
- Demo account and organisation records are normally kept while the account is active and for up to 12 months after closure or the final access decision.
- Optional verification documents are deleted when no longer needed for the access decision and normally within 12 months of that decision.
- Security and audit records are normally kept for up to 12 months.
- General business and pilot enquiries may be retained for up to 24 months after the last meaningful contact.
We may retain information for longer where required by law, to resolve a dispute or to establish, exercise or defend legal claims. We may keep anonymised information that can no longer identify anyone.
8. Security
We use role-based access, administrator approval, encrypted connections, secure third-party authentication, restricted storage and activity logging designed to protect information. No online service can guarantee absolute security. Please contact us immediately if you believe an account or document has been compromised.
9. Your data-protection rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information, receive certain information in a portable form, object to processing, and withdraw consent where consent is the basis used. You also have the right not to be subject to a solely automated decision producing legal or similarly significant effects.
To exercise a right, email us using the details below. We may need to verify your identity and will normally respond within one month.
10. Cookies and similar technology
The current website uses necessary cookies or equivalent browser storage to maintain secure Supabase authentication sessions, prevent fraud and remember essential service state. These are required for the service to work. We do not currently use advertising cookies or third-party behavioural tracking.
11. Complaints and contact
Please contact us first if you have a question, request or concern:
You may also complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. Visit ico.org.uk or call 0303 123 1113.
We may update this policy as the service develops. Material changes will be shown on this page with a new “last updated” date.