Privacy & cookies

Everyone: name, email address, and account activity such as sign-ins and bookings.

Clients: the care requirements you record — location, budget, preferred visit times and the type of support needed. Care needs can reveal information about health, which is special category data.

Carers: your biography, hourly rate, availability, qualifications, insurance details and your enhanced DBS certificate. Criminal records information is handled under stricter rules than ordinary data.

Payments: booking amounts, payment status and a payment reference. Card details are entered directly with Stripe and are never seen or stored by us.

To operate the marketplace and fulfil the contract between us; to verify that carers are safe and suitable, which is a substantial public interest and a safeguarding obligation; to take payment and keep accounting records as required by law; and to send you transactional messages such as booking confirmations and receipts.

We do not sell your data and we do not send marketing email unless you have asked for it.

Carer profiles are public once approved, but DBS certificates, qualification uploads and insurance documents are never public — they are stored in private storage and viewable only by our verification team through short-lived, expiring links. Clients see a verification badge, not the underlying documents.

When a booking is made, the client and carer see each other's name, contact details and the visit address so the visit can go ahead.

Supabase (database, authentication and document storage), Stripe (payment processing), and Lovable's email service (transactional email delivery). Each is bound to process data only on our instructions.

Booking and payment records are kept for six years to meet UK accounting requirements. DBS and vetting documents are kept only as long as a carer is active on the platform and are deleted within three months of an account closing. You can ask us to close your account at any time.

You can ask for a copy of your data, correct it, ask us to delete it, object to processing, or ask us to restrict it. Email bromleycareconnect@outlook.com and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

We use only the cookies and local storage needed to keep you signed in and to keep checkout secure. There is no advertising or third-party analytics tracking, so no cookie consent banner is required. Clearing your browser storage will sign you out.