Privacy Policy

This policy describes how AlwaysReady Care ((UK)) processes personal information under UK GDPR, Data Protection Act 2018. Last updated: April 2026.

1. Data Controller

2. What we collect and why

Local-only tools (checklists, calculators, checklist generators): your inputs stay in your browser (localStorage). We do not receive or store them.

AlwaysReady Care app (login required): if you sign up, we process:

• Email address (authentication)
• Name (sometimes; if you add it)
• Organisation / facility name
• Evidence records you create (to provide the compliance service)
• IP address for security / abuse prevention (short retention)

Processing is via Google Firebase (Firebase Auth, Firestore, Firebase Hosting). A Data Processing Agreement is in place with Google.

3. Legal basis

We rely on:

• Contract — to provide the service when you have an account
• Legitimate interest — for security, fraud prevention and to improve our service
• Consent — for any optional marketing updates (you can withdraw at any time)
• Legal obligation — when required to retain records by law

4. Third-party services

• Google Fonts (Poppins) — your IP is briefly transmitted to Google when loading fonts
• Cloudflare CDN / cdnjs — serves Font Awesome icons
• Firebase (Google) — authentication + database (only if you register)
• GitHub Pages — static site hosting

5. International transfers

Some service providers are located outside the United Kingdom. Transfers rely on: UK-EU adequacy decision + Standard Contractual Clauses.

6. Retention

• Browser localStorage: as long as you keep it (you can clear any time)
• Account data: until you delete your account
• Evidence records (care-related): retained per CQC requirements — typically 7-10 years
• Server/log data: 30 days
• Contact enquiries: 6 months unless business relationship continues

7. Your rights

Under UK GDPR, Data Protection Act 2018 you have rights to:

• Access the personal information we hold
• Correct inaccurate information
• Request deletion (subject to legal retention requirements)
• Restrict or object to processing
• Portability (receive a copy in a common format)
• Complain to Information Commissioner's Office (ICO) — https://ico.org.uk

To exercise any of these rights, contact hello@teamzlab.com. We respond within statutory timeframes.

8. Cookies

We do not use tracking cookies, Google Analytics, or advertising pixels on this site. See our Cookie Policy for full details.

9. Security

Data in transit uses TLS. Account data is stored in Firebase with Google-managed encryption at rest. We follow secure-by-default practices — no public access to user data.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change.

This policy is provided for transparency and does not constitute legal advice. For specific compliance questions contact a data protection professional.