CAREBLUEPRINT ASSOCIATES LTD

Privacy Policy

Last updated: 11/03/2026

1. Who We Are

CareBlueprint Associates Ltd is an independent social care professional-led assessment service. We help families make more informed decisions about care home placement for their loved ones by providing professional suitability assessments and ongoing monitoring services.

Company number: 17047628
ICO registration: C1887939
Website: www.careblueprint.co.uk
Email: info@careblueprint.co.uk

CareBlueprint Associates Ltd is the data controller for the personal information we collect and process. This means we are responsible for deciding how and why your personal data is used, and for keeping it safe.

If you have any questions about this privacy policy or how we handle your personal information, please contact us at info@careblueprint.co.uk.

2. What This Policy Covers

This privacy policy explains:

What personal information we collect about you and the person you are acting on behalf of
Why we collect it and what we use it for
Who we share it with
How long we keep it
Your rights in relation to your personal data
How to contact us if you have concerns

This policy applies to personal information collected through our website at www.careblueprint.co.uk, our lead magnet download form, our booking platform, our email communications, and in the course of delivering our assessment services.

We are committed to being transparent about how we use your information and to handling it responsibly. We will never sell your personal data to third parties.

3. What Information We Collect

3.1 Information you give us directly

When you interact with CareBlueprint Associates Ltd, you may provide us with the following information:

Contact and identity information:

Your full name
Your email address
Your telephone number
Your location or postcode

Information about the person you are acting on behalf of:

Their name
Their age and date of birth
Their current address or location
Their medical conditions, diagnoses, and care needs
Their cognitive and physical abilities
Their mobility, behavioural patterns, and vulnerabilities
Their cultural, religious, and personal preferences
Any other information relevant to assessing their care home suitability

This information about the person you are acting on behalf of constitutes special category data under UK GDPR because it relates to health. We explain our lawful basis for processing this information in Section 5 of this policy.

Service and communication information:

The details of the care homes you are considering
Your preferred location and timeline for placement
Information you share during your discovery call
Your responses to our intake form
Any correspondence between us by email or telephone

3.2 Information we collect automatically

When you visit our website, we may collect certain technical information automatically. At the time of writing, we do not use website analytics tools. However, we do use the Facebook Pixel on our website, which may collect:

Pages you visit on our website
Actions you take, such as downloading our guide or clicking a booking link
Your IP address and browser type
Information about how you arrived at our website

The Facebook Pixel is operated by Meta Platforms Ireland Ltd. Information collected by the Pixel may be used to measure the effectiveness of our advertising and to show relevant advertisements to people on Facebook and Instagram. You can opt out of this tracking through your Facebook advertising preferences or by using a browser ad blocker. For more information, please see Meta's Privacy Policy at www.facebook.com/privacy/policy.

4. How We Collect Your Information

Lead magnet form

When you download our free guide from our website, we collect your name and email address.

Booking platform

When you book a discovery call through Calendly, we collect your name, email address, and any information you provide in the booking form.

Intake form

Before your discovery call, we send you a short intake form to understand your situation. The information you provide here forms the basis of our assessment.

Discovery call

During your free consultation call, we collect information about your loved one's needs and your care home requirements.

Assessment commission

When you formally commission an assessment, we collect all information necessary to conduct a thorough suitability assessment.

Email communications

When you reply to our emails or contact us directly, we retain that correspondence.

Facebook Pixel

Automatically collected when you visit our website, as described in Section 3.2.

5. Our Lawful Basis for Processing Your Information

UK GDPR requires us to have a lawful basis for processing your personal information. We rely on the following lawful bases:

5.1 Contract

Where you have commissioned an assessment from us, we process your personal information because it is necessary for the performance of our contract with you. This includes processing information needed to conduct the assessment, produce our written report, and deliver our service.

5.2 Legitimate interests

We process some personal information on the basis of our legitimate interests as a business. This includes:

Sending you our email nurture sequence after you download our free guide, as you have expressed interest in our service by requesting the guide

Improving our service based on client feedback

Maintaining records of our assessments for quality assurance purposes

Where we rely on legitimate interests, we have considered your interests and rights and are satisfied that our use of your data does not override them. You have the right to object to processing based on legitimate interests at any time - see Section 9.

5.3 Consent

Where we send you marketing communications beyond our initial email sequence, we will ask for your explicit consent. You can withdraw your consent at any time by clicking the unsubscribe link in any of our emails or by contacting us directly.

5.4 Special category data — health information

The health and care-related information about the person you are acting on behalf of is special category data under UK GDPR and requires an additional lawful basis for processing. We rely on the following:

Explicit consent: Before we process any health or care-related information about the person being assessed, we require the commissioning family member to confirm the following:

"I confirm that I have the consent of the individual named in this assessment, or hold appropriate legal authority to share their personal and health information with CareBlueprint Associates for the purpose of this assessment."

This confirmation is obtained through our intake form before any assessment work begins.

Where a family member holds a Lasting Power of Attorney for health and welfare, or has another form of legal authority to make decisions on behalf of the individual, this satisfies our requirement for appropriate legal authority to process that person's health information.

6. How We Use Your Information

We use the information we collect for the following purposes:

Delivering our service
To conduct suitability assessments, produce written reports, and deliver audio summaries where applicable.

Discovery calls
To understand your situation and provide relevant professional guidance during your free consultation.

Email communications
To send you our email sequence following your guide download, and to communicate with you about your assessment.

Service improvement
To improve the quality of our assessments and communications based on client feedback and engagement.

Marketing
To send you relevant information about our services where you have consented or where we have a legitimate interest in doing so.

Facebook advertising
To measure the effectiveness of our Facebook advertisements and to reach people who may benefit from our service through the Facebook Pixel.

Legal compliance
To comply with our legal obligations, including UK GDPR, and to maintain records required for professional indemnity purposes.

Dispute resolution
To maintain records that may be needed in the event of a dispute about our service.

7. Who We Share Your Information With

We do not sell your personal data to any third party. We share your information only with the following categories of recipient, and only to the extent necessary for the purpose described:

7.1 Technology and platform providers

We use the following third party platforms to operate our service. Each acts as a data processor on our behalf and is required to handle your data in accordance with UK GDPR:

MailerLite

Our email marketing platform. Used to send our email sequence and communications. MailerLite is GDPR-compliant and processes data in accordance with a Data Processing Agreement. Privacy policy: www.mailerlite.com/legal/privacy-policy

Calendly

Our appointment booking platform. Used to schedule discovery calls. Calendly is GDPR-compliant and processes data in accordance with a Data Processing Agreement. Privacy policy: www.calendly.com/privacy

Stripe

Our payment processing platform. Used to process payments for our services securely. Stripe is PCI-DSS compliant and GDPR-compliant. Privacy policy: www.stripe.com/gb/privacy

Meta (Facebook)

The operator of the Facebook Pixel installed on our website. Information collected by the Pixel is processed by Meta in accordance with their privacy policy: www.facebook.com/privacy/policy

7.2 Licensed healthcare professionals

Where an assessment requires input from a licensed healthcare professional - such as a registered nurse - we may share relevant information about the person being assessed with that professional for the purpose of informing our assessment. We will always inform you before doing so and will only share the minimum information necessary.

7.3 Legal and regulatory requirements

We may disclose your personal information to law enforcement agencies, regulatory bodies, or other third parties where we are legally required to do so, or where we believe disclosure is necessary to protect the safety of any individual, including the person being assessed.

7.4 Safeguarding obligations

Our assessors have professional obligations in relation to safeguarding. If, in the course of conducting an assessment, we identify a concern about the safety or well-being of a vulnerable individual, we may be required to share information with the relevant local authority safeguarding team or other statutory body. We will always inform you if we make such a referral unless doing so would put any individual at further risk.

8. How Long We Keep Your Information

We retain your personal information for as long as necessary to fulfil the purposes described in this policy and to comply with our legal obligations.

Assessment records

Six years from the date of the assessment. This aligns with the Limitation Act 1980, which sets the time limit for bringing a contract claim, and ensures we can respond to any dispute or complaint about our service.

Client correspondence

Six years from the end of our engagement with you.

Email marketing data

Until you unsubscribe from our communications, or for two years from your last engagement with our emails, whichever is sooner.

Discovery call records

Six months from the date of the call if you do not proceed to commission an assessment. Six years if you do.

Website data (Pixel)

In accordance with Meta's data retention policies. Please refer to Meta's privacy policy for further information.

Payment records

Seven years, in accordance with HMRC requirements for financial records.

When your data is no longer needed, we will delete it securely or anonymise it so that it can no longer be associated with you.

9. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights in relation to your personal data. We will respond to all valid requests within one calendar month.

Right to be informed
You have the right to be told how we use your personal data. This privacy policy fulfills that obligation.

Right of access
You have the right to request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR).

Right to rectification
You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to erasure
You have the right to ask us to delete your personal data in certain circumstances — for example, if we no longer need it for the purpose it was collected.

Right to restrict processing
You have the right to ask us to temporarily stop using your personal data in certain circumstances — for example, if you contest its accuracy.

Right to data portability
Where we process your data by automated means on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, machine-readable format.

Right to object
You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object to processing for direct marketing purposes.

Rights related to automated decision-making
We do not make decisions about you solely by automated means. All assessments and recommendations involve human professional judgement.

To exercise any of these rights, please contact us at info@careblueprint.co.uk. We may need to verify your identity before responding to your request.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. How We Keep Your Information Secure

We take the security of your personal information seriously, particularly given the sensitive nature of the health information we process. We have implemented the following measures to protect your data:

All email communications containing sensitive information are sent via encrypted channels

Assessment reports and client records are stored in password-protected, access-controlled systems

Payment information is processed exclusively through Stripe, which is PCI-DSS compliant. We do not store your payment card details

Access to personal data is restricted to those who need it to deliver our service

We review our security practices regularly and update them as necessary

While we take all reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. If you have reason to believe that your personal information has been compromised, please contact us immediately at info@careblueprint.co.uk

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of it, and will notify you directly where required to do so.

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. A cookie is a small text file that is placed on your device when you visit a website.

11.1 Essential cookies

These cookies are necessary for our website to function properly. They cannot be switched off. They do not collect any information that could be used to identify you.

11.2 The Facebook Pixel

We use the Facebook Pixel, a tracking technology operated by Meta Platforms Ireland Ltd. The Pixel places a cookie on your device when you visit our website and tracks certain actions you take, such as downloading our guide or clicking our booking link.

This information is used to:

Measure the effectiveness of our Facebook and Instagram advertisements

Build audiences of people who have visited our website so we can show them relevant advertisements on Facebook and Instagram

Understand how visitors interact with our website

You can opt out of Facebook Pixel tracking by:

Adjusting your advertising preferences in your Facebook account settings

Using a browser extension that blocks advertising trackers

Enabling the Global Privacy Control (GPC) signal in your browser

For more information about how Meta uses data collected through the Pixel, please visit www.facebook.com/privacy/policy.

11.3 Managing cookies

You can control and manage cookies through your browser settings. Please be aware that removing or blocking certain cookies may affect the functionality of our website. For guidance on managing cookies in your browser, visit www.aboutcookies.org.

12. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@careblueprint.co.uk and we will delete that information promptly.

13. Links to Other Websites

Our website may contain links to third party websites, including those of care homes we visit or recommend for your consideration. This privacy policy applies only to our website and services. We are not responsible for the privacy practices of any third party websites and encourage you to read their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the date at the top of this policy and, where appropriate, notify you by email.

We encourage you to review this policy periodically to stay informed about how we protect your personal information. Your continued use of our website or services after any changes to this policy constitutes your acceptance of those changes.

15. How to Contact Us

If you have any questions about this privacy policy, want to exercise your rights, or have a concern about how we have handled your personal information, please contact us:

CareBlueprint Associates Ltd

Email: info@careblueprint.co.uk

Registered address: 424 Wold Road, Hull, HU5 5QD

Website: www.careblueprint.co.uk

ICO Registration Number: C1887939

We aim to respond to all privacy-related enquiries within five working days. For Subject Access Requests and formal rights exercises, we will respond within one calendar month as required by UK GDPR.

This privacy policy was prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

CareBlueprint Associates Ltd | www.careblueprint.co.uk | 11/03/2026