Privacy Policy

How My Care Academy handles your personal data under UK GDPR.

Who we are

My Care Academy provides training and compliance software to UK care organisations. Your care organisation is the data controller for your records; we process data on their behalf.

What we store

Your name and email, the courses assigned to you, your progress and assessment results, certificates, and (where applicable) recruitment and form submissions your organisation collects.

Where it is stored

Data is hosted in the EU (Frankfurt) on Supabase, encrypted in transit (TLS) and at rest. UK personal data is processed under the UK–EU adequacy decision.

Your rights

You can download a copy of your data or delete your account at any time from your dashboard. To exercise other rights, contact your organisation's administrator or privacy@mycareacademy.co.uk.

Cookies

We use only essential cookies required to keep you signed in. We do not use advertising or tracking cookies.

Retention

Training records are retained for the period configured by your organisation (default 36 months) to meet CQC and audit requirements, then deleted or anonymised.