Privacy Policy

1. Introduction

Coorie (“we”, “us”, or “our”) is committed to protecting the privacy of everyone who uses our platform. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, mobile applications, and related services.

Coorie is the data controller for the personal data processed through our platform. We are registered in England and our registered office is at 86-90 Paul Street, London EC2A 4NE. If you have any questions about this policy, please contact us at privacy@coorie.care.

2. Information We Collect

We collect information you provide directly when you create an account, including your name, email address, phone number, postal address, and profile details. For carers, we also collect qualifications, DBS check results, right-to-work documentation, references, and identification documents required for our verification process.

When carers submit DBS certificates for verification, we collect a digital copy of the certificate document, the certificate number, and a record of the carer's explicit consent to processing. This information is collected solely for the purpose of verifying the carer's suitability to work with children.

We automatically collect usage data when you interact with our platform, including pages visited, search queries, booking history, and feature usage. This helps us understand how our service is used and where we can improve.

We also collect device and technical information such as your IP address, browser type, operating system, device identifiers, and general location data. This information is used for security purposes and to optimise your experience on the platform.

3. How We Use Your Information

We use your personal data primarily to deliver our services: facilitating connections between parents and carers, processing bookings and payments, verifying carer credentials, and providing customer support. Your profile information is displayed to other users as necessary to enable the marketplace to function.

We may send you important service communications such as booking confirmations, payment receipts, safety alerts, and account notifications. We may also send marketing communications about new features or services, which you can opt out of at any time.

Your data is used to maintain the safety of our community through identity verification, fraud detection, and the investigation of reported concerns. We may also use aggregated, anonymised data for analytics purposes to improve our platform.

Because Coorie is a childcare platform, messages sent through it are automatically screened by our safety systems · for example to prevent the sharing of personal contact details and to detect content that may indicate a safeguarding risk. Our trained safety staff may read a conversation only when it has been flagged by these systems or reported by a user, and every such access is recorded in an internal audit log. We do not routinely monitor or read private conversations outside of these circumstances.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on several lawful bases. When you create an account and use our services, processing is necessary for the performance of our contract with you. This includes facilitating bookings, processing payments, and providing customer support.

For certain activities such as sending marketing communications, we rely on your consent, which you can withdraw at any time. For carer verification and safety measures, we process data based on our legitimate interests in maintaining a safe platform for families and children.

In some cases, we may process your data to comply with legal obligations, such as fraud prevention requirements, tax reporting, or responding to lawful requests from public authorities.

5. Information Sharing

We share limited profile information between parents and carers to facilitate bookings. When a booking is confirmed, both parties receive the contact details necessary to coordinate the care arrangement. We never sell your personal information to third parties.

Payment processing is handled by Stripe, our payment partner, who receives only the financial data necessary to process transactions. We also share data with service providers who assist us with hosting, analytics, email delivery, and customer support, all of whom are bound by data processing agreements.

We may disclose your information to law enforcement or regulatory authorities if required by law, or if we believe in good faith that disclosure is necessary to protect the safety of a child, prevent fraud, or respond to a valid legal request.

6. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period afterwards to fulfil our contractual obligations, resolve disputes, and comply with legal requirements. Booking and payment records are retained for a minimum of six years in accordance with UK tax and accounting regulations.

DBS certificate documents are deleted immediately after verification is complete. We retain only the verification status, certificate number, and verification date for the duration of the carer's active membership. This approach minimises the amount of sensitive data stored on our systems while maintaining a clear record of verification.

7. Your Rights

Under the UK GDPR, you have a number of rights regarding your personal data. You have the right to access the personal data we hold about you, to request rectification of inaccurate data, and to request erasure of your data in certain circumstances. You can exercise the right to data portability by exporting your data from your account settings.

You also have the right to restrict or object to certain types of processing, and the right to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at privacy@coorie.care or use the data export and account deletion features in your account settings.

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Children's Privacy

Coorie's services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. The information parents provide about their children (such as names, ages, and care requirements) is used solely to facilitate appropriate care arrangements and is treated with the highest level of sensitivity.

We take additional safeguards to protect children's data, including restricting access to child information to only the carers who have confirmed bookings. Parents can manage and delete their children's information at any time through their account settings.

9. Cookies

We use cookies and similar technologies to provide, secure, and improve our platform. Essential cookies are required for the platform to function, including authentication and security cookies. We also use analytics cookies to understand how our platform is used.

For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS and sensitive information is encrypted at rest.

Access to personal data is restricted to authorised personnel on a need-to-know basis. DBS certificates and identity documents are stored in secure, access-controlled systems. Despite our efforts, no method of electronic storage is completely secure, and we cannot guarantee absolute security.

DBS certificate documents uploaded by carers are automatically deleted from our systems once verification is complete. Only the verification outcome and metadata (certificate number, dates) are retained. This data minimisation approach ensures we hold only the information necessary to demonstrate that verification has been carried out.

11. International Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area. Where we transfer data outside these regions (for example, to service providers based in the United States), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner.

We only transfer data internationally when necessary for the provision of our services and in compliance with the UK GDPR. You can contact us for more information about the specific safeguards applied to any international transfers of your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by email or by posting a prominent notice on our platform at least 30 days before the changes take effect.

We encourage you to review this policy periodically. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@coorie.care
• Post: Coorie, 86-90 Paul Street, London EC2A 4NE
• Phone: 020 7946 0958

For general enquiries, you can also reach us through our contact page.