Privacy Policy

1. Controller and scope

JollyTech Solutions Ltd (“JollyTech”, “we”) is the data controller for personal data collected through this website and the CareHub demo booking process. This notice explains what we collect, why, how long we keep it and the rights available to you under the UK GDPR and the Data Protection Act 2018.

Where we build and host CareHub for a care provider, that provider is the controller of its own service user and staff records and we act as its processor under a separate written data processing agreement.

2. What we collect

Demo enquiries: your name, work email address, organisation name, role, service type, approximate number of staff or service users, preferred date and time, and anything you write in the message field.

Technical data: IP address, browser and device type, referring page and pages viewed, collected to keep the site secure and to understand which content is useful.

Correspondence: emails, calls and meeting notes relating to your enquiry or engagement.

We do not ask for, and you should not send us, special category data, health records or any real service user information through this website.

3. Why we use it and our lawful basis

To respond to your enquiry, arrange and run the demo, and send confirmations and reminders — legitimate interests and, where a contract is in progress, steps taken at your request prior to entering a contract.

To provide quotations, proposals and follow-up relevant to the enquiry you made — legitimate interests in pursuing a business-to-business enquiry you initiated.

To send wider marketing updates — only with your consent, withdrawable at any time.

To keep the site secure, prevent abuse, and meet our legal, accounting and regulatory obligations — legitimate interests and legal obligation.

4. Demo environments contain no real data

Every portal shown on this site runs on fictitious demonstration data. No real service user, resident or employee records are present, and nothing you view in a demo constitutes disclosure of another organisation's personal data.

5. Who we share it with

We share personal data only with service providers who help us operate: email and calendar providers, scheduling and video-meeting tools, our website and application hosting providers, and our accountants and professional advisers. Each is bound by contract to process data only on our instructions.

We do not sell personal data or share it for third-party advertising. We may disclose data where required by law or to establish or defend legal claims.

6. International transfers

Our infrastructure and suppliers are chosen with UK and EEA hosting in mind wherever practical. Where a supplier processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards.

7. How long we keep it

Demo enquiries that do not progress are deleted within 24 months of last contact. Records relating to an active or completed engagement are kept for the duration of the relationship and then for six years to meet contractual, tax and limitation-period requirements. Marketing consents are reviewed at least every 24 months.

8. How we protect it

We apply encryption in transit and at rest, role-based access control on a least-privilege basis, multi-factor authentication for administrative access, audit logging, regular patching, and backups with tested restoration. Access to enquiry data is limited to the staff who need it to respond to you.

9. Cookies

This site uses only the cookies and local storage strictly necessary to serve pages securely and remember interface state. We do not run third-party advertising or cross-site tracking cookies. If analytics or a third-party scheduling widget is added, this notice will be updated and consent obtained where required.

10. Your rights

You have the right to be informed, and to request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. You are not subject to automated decision-making on this site.

To exercise a right, contact us using the details on jollytechsolutions.com. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

11. Changes to this notice

We review this notice at least annually and whenever our processing changes. The version published on this page is the version in force, and its date is shown above.