How we look after your information
Last updated 26 September 2026
This notice explains how SR2 Ltd, which provides CareBob (“we”, “us”), collects and uses personal information, and the rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who we are
SR2 Ltd is the controller of the personal information described in this notice. You can contact us about anything to do with your information at hello@carebob.co.uk (email us).
Information held inside CareBob for our customers
Care providers use CareBob to record information about the people they support, their staff and job applicants — for example care records, medication, rotas, HR files and sponsor-compliance evidence. For that information the care provider is the controller and SR2 Ltd acts as its processor: we only use it to provide the service, under a written agreement and the provider’s instructions.
If you are a resident, a member of staff, or you applied for a job through a care provider’s CareBob application page, please contact that provider first — their privacy notice explains how they use your information. We will help them respond to your request.
Information we are responsible for
People who contact us or ask for a demo
- What we collect
- Name, work email, organisation, phone number, organisation size, what you are interested in, and anything you write in your message.
- Why
- To reply to you, arrange a demo and discuss whether CareBob fits your organisation.
- Lawful basis
- Legitimate interests (responding to your enquiry), or steps before entering into a contract at your request.
Our customers' contacts (the organisations that use CareBob)
- What we collect
- Names, work contact details and role of the people who manage the account, plus contract, billing and support records.
- Why
- To provide the service, manage the account and contract, provide support, and keep financial records.
- Lawful basis
- Contract; legal obligation (for accounting and tax records); legitimate interests (running and improving the service).
Visitors to this website
- What we collect
- Technical information your browser sends when you visit, such as IP address and browser type, which our hosting provider logs for security and reliability. This site sets no cookies and uses no analytics.
- Why
- To keep the website secure and working.
- Lawful basis
- Legitimate interests (security and reliability of our website).
When you use the “Book a demo” form, it opens your own email app with the details filled in — the website itself does not store what you type. We receive it as a normal email.
Who we share information with
We do not sell personal information. We share it only with service providers who help us run CareBob — such as hosting, email delivery and error monitoring — under contracts that require them to protect it and use it only on our instructions, or where the law requires us to. A current list of our service providers (sub-processors) is available on request.
Where information is stored
The CareBob application runs in London and your information is stored in the EU, which the UK recognises as providing adequate protection. If any of our providers process personal information outside the UK or EEA, we make sure appropriate safeguards are in place, as UK GDPR requires.
How long we keep it
We keep enquiry and demo correspondence for up to 24 months after our last contact with you, unless you become a customer. Customer contract and billing records are kept for six years after the end of the financial year they relate to, to meet legal and tax requirements. Website security logs are kept only for a short period by our hosting provider. We delete or anonymise information when it is no longer needed.
Keeping it secure
Information is encrypted in transit and at rest, access is limited by role, and actions are recorded in an audit trail. See our Security page for details.
Your rights
You have the right:
- to be told how your information is used (this notice)
- to access a copy of your personal information
- to have inaccurate information corrected
- to have your information erased in certain circumstances
- to restrict or object to our use of your information in certain circumstances
- to data portability, where the law provides it
To use any of these rights, email hello@carebob.co.uk. We will respond within one month. We do not make decisions about you based solely on automated processing.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Cookies
Our public website does not use cookies or tracking. See our Cookie Policy for the strictly necessary cookies used when you sign in.
Changes to this notice
We will update this notice when how we use personal information changes. The date at the top shows when it was last updated.