1. Who we are
CareBlueprint is an independent research platform. This policy explains what personal
data we collect when you use careblueprint.co.uk, why we collect it, how long we keep
it, and what rights you have over it. CareBlueprint is the data controller for the
personal data described in this policy.
2. What personal data we collect
We collect the following categories of personal data:
- Contact details: name and email address, when you download the free report, register interest in the professional tier, or contact us directly.
- Organisation details: organisation name and organisation type, when submitted via the professional interest form.
- Payment information: when you purchase a city report or the data supplement, payment is processed entirely by Stripe. CareBlueprint never directly receives or stores your card details. We may receive limited transaction metadata from Stripe (such as the product purchased and the email address used for the transaction) for order fulfilment and record-keeping.
- Technical data: standard web server logs (IP address, browser type, pages visited) generated by normal website operation.
3. Why we collect it
- To deliver the free report, purchased reports, or the data supplement you have requested.
- To notify you about the professional tier or other products you have registered interest in.
- To respond to enquiries sent through our contact form.
- To process payments securely via Stripe.
- To meet our legal and accounting obligations.
Our legal basis for processing this data is your consent (where you submit a form),
and our legitimate interest in operating and improving CareBlueprint, and in the case
of payment data, the performance of a contract with you.
4. How long we keep your data
We retain contact and organisation details for as long as necessary to fulfil the
purpose they were collected for, or until you ask us to delete them. Transaction
records are retained for as long as required by UK tax and accounting law (normally
six years). We do not retain payment card details ourselves — these are held by Stripe
under its own retention policy.
5. Third parties we work with
- Kit (ConvertKit): processes email addresses and names submitted for the free report download and email communications.
- Stripe: processes all payment data for report and data supplement purchases. Stripe is a PCI-DSS compliant payment processor; CareBlueprint does not access or store full payment card details.
- Airtable: may be used to store and organise interest-form and enquiry data internally.
We do not sell personal data to any third party. We do not share personal data with
care home operators or any party whose data appears in our research.
6. Your rights under UK GDPR
Under the UK General Data Protection Regulation, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate personal data.
- Request deletion of your personal data.
- Object to or restrict how we process your personal data.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Contact us about your data
To exercise any of the rights above, or for any question about how your data is
handled, contact info@careblueprint.co.uk
or use our contact form.