← Back to home

Legal

Privacy Policy

This Privacy Policy explains how CareComplianceExpert collects, uses, stores and protects personal information when you use our website, registration platform and related services.

Last updated: 28 September 2026

Information we collect

We collect information you provide directly to us, such as your name, email address, company details, onboarding answers, uploaded documents and communications with our team.

We may also collect technical information needed to operate the platform safely and effectively, such as login activity, browser information and service usage data.

For proportionate business-to-business outreach, we may use company and professional contact information made available through official company or regulator records, an organisation’s own website, business directories or search services. This may include the organisation’s name, business email address, website, telephone number, service type and registration or incorporation information.

How we use your information

We use personal information only where we have a lawful reason to do so. This may include providing the services you ask us for, managing your account, improving the reliability of the platform, responding to enquiries and meeting legal or regulatory responsibilities.

  • To create and manage your account
  • To deliver requested resources, record downloads and retain your marketing preference
  • To generate and tailor documents and policies
  • To provide customer support and expert guidance
  • To improve platform security, reliability and performance
  • To process payments and manage service access
  • To contact relevant corporate organisations about registration, compliance or related business services that we reasonably believe may be useful to them

Lawful bases for processing

Depending on the nature of the information and the service involved, we may process personal data because it is necessary for the performance of a contract, because we have a legitimate business interest in operating and improving our services, because we are required to do so by law, or because you have given consent where consent is appropriate.

Where we send proportionate business-to-business outreach to corporate organisations, we generally rely on legitimate interests after considering the purpose, necessity and likely effect on the recipient. We do not rely on legitimate interests where the recipient’s rights and interests override ours.

Business marketing and opting out

When you request a free resource, any marketing checkbox is optional and is not required to receive the resource. If you opt in, we record the wording, choice and time so that we can respect your preference.

We send business outreach selectively rather than through indiscriminate bulk mailing. Every outreach email identifies Care Compliance Expert and provides a clear way to opt out.

You may object to direct marketing at any time by replying Unsubscribe or contacting us. We will place the address on a suppression list so that we can honour the request and prevent further outreach. We may retain the minimum information needed for that suppression even when other contact information is deleted.

How we protect your information

We take reasonable technical and organisational steps to protect personal data against unauthorised access, loss, misuse or disclosure. Access to confidential customer information is restricted to authorised personnel and approved service providers where necessary.

Camera and microphone access

The Care Compliance Expert iPhone app requests camera and microphone access only when you choose to take part in a live mock interview. You can refuse or later withdraw these permissions in your iPhone settings, although the live interview feature will not work without them.

Interview audio, video, transcripts and related feedback may be processed by the service providers used to deliver the mock interview. We do not use camera or microphone access for advertising or cross-app tracking.

Sharing your information

We do not sell your personal data. We may share information with trusted service providers that help us operate the platform, such as hosting, payment, communication and infrastructure providers, where this is necessary to deliver the service.

The platform currently uses service providers including Vercel for application hosting, Supabase for authentication, database and file storage, Resend for email delivery, and Tavus and Daily for live mock interview functionality. Stripe processes purchases made through our website; purchasing is not available inside the iPhone app.

Retention of information

We keep personal data only for as long as it is reasonably necessary for the purpose for which it was collected, including account administration, service delivery, support records, legal compliance and dispute handling.

Where we no longer need information, we aim to delete it, anonymise it or otherwise handle it in a secure and proportionate way.

Cookies and website technologies

Our website and platform may use cookies or similar technologies to support site functionality, security, preferences and performance measurement.

For more information about how we use cookies and similar tools, please see our Cookies Policy.

Your rights

Depending on applicable law, you may have rights to access, correct, delete or restrict the use of your personal data. You may also have the right to object to certain processing or request a copy of your data.

Contact about privacy

If you have a privacy question, data protection concern or request relating to your personal information, please contact CareComplianceExpert using the contact details shown on our website.

Need support?

Speak to Care Compliance Expert

If you want help understanding these policies or choosing the right registration support, you can contact us directly and we'll point you to the right next step.