Privacy
The short version: no accounts, no advertising, no tracking cookies, and your shortlist and notes never leave your own browser. The one place your words do leave this site is the care assistant — and this page says exactly where they go.
Who is responsible
CareSectorWatch is published by Doctor Data Ltd, registered in England and Wales (company no. 13168780). Doctor Data Ltd is the data controller for anything described on this page. Contact: mustafa@doctor-data.co.uk.
Browsing the site
There are no accounts and no login. We use cookie-free, aggregate page analytics (counts of page views), which cannot identify you. The site’s hosting provider, Vercel Inc. (USA), processes requests to serve pages, and like any host keeps short-lived technical logs of those requests. We do not build profiles, and nothing here is sold or shared for advertising.
Your shortlist and notes stay on your device
The shortlist, and any notes you write about what a care home told you, are stored in your own browser (localStorage) and never sent to us. There is no server copy, they are not in the shareable link (which carries only public page addresses), and the assistant cannot see them. Clearing your browser data, or the shortlist itself, removes them.
The care assistant
When you type a question into “Ask about care”, your words are sent to Anthropic PBC(USA), whose Claude model generates the reply. That is the one place your words leave this site. People often describe a relative’s situation — health included — so treat the box like an email to a helpful stranger: use first names or no names; the answers are just as good. The transfer to the USA takes place under Anthropic’s data processing terms, which incorporate the UK’s International Data Transfer Addendum to the EU Standard Contractual Clauses.
What we keep: no message content. Your conversation lives in your browser tab and clears when you close it. Our servers keep one line of technical telemetry per request — timings, token counts, which internal lookups ran, and a salted hash of your IP address used for rate limiting (the hash cannot be reversed to your address; rate-limit counters expire within minutes). Requests also appear briefly in Vercel’s function logs. Once our rate-limit backing store is enabled, those short-lived counters are held by Upstash, Inc. (USA) under the same safeguard framework.
Legal basis: our legitimate interest in running a free, safe navigation tool (UK GDPR Art. 6(1)(f)). Where a question includes health information about you or someone else, we rely on the exemption for processing made manifestly public by you only where that applies — and rather than lean on legal bases, the design keeps the data out of our hands: we do not store, read, profile or reuse conversations, and the model provider processes them only to generate the reply.
If you email us
If you email to join the digest or order a pack, we keep your name, organisation and email address to deliver what you asked for, and for nothing else. One email and we delete them.
Your rights
You have the usual UK GDPR rights — access, rectification, erasure, restriction, objection, and portability — by emailing mustafa@doctor-data.co.uk. Because we keep so little, the honest answer to most access requests will be “we hold nothing about you”. You can complain to the Information Commissioner’s Office at ico.org.uk.
People named in the CQC dataset
The service listings are CQC’s published open data about registered businesses. Named individuals in CQC’s files (such as registered managers) are excluded at import. If a page names you and you believe it is wrong, email us — corrections are checked against CQC’s own published files, and data & methods explains exactly what we publish and why.
Last updated 10 August 2026. If we change what happens to your data — a new processor, a new purpose — this page changes in the same release, and material changes are flagged on the homepage.