Privacy Policy
Last updated: 24 June 2026 · Version 1.0
1. Who is responsible for your data
Graham Hampson trading as CareRoute (“CareRoute”, “we”, “us”) is the data controller for personal data processed through the CareRoute website and app (the “Service”). We are registered with the UK Information Commissioner's Office (ICO) under registration number CSN1787616.
Privacy questions: support@careroute.co.uk (mark “Privacy”). Address: 13 Castle Mills, Knaresborough, North Yorkshire, HG5 8DE.
This policy explains what personal data we collect, why, the lawful basis we rely on, who we share it with, how long we keep it, and your rights under the UK GDPR and Data Protection Act 2018.
2. The data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, optional display name, password (stored hashed by our auth provider) | You, at sign-up |
| Career profile | Current role, experience, qualifications, location, career goal, saved routes, skills-gap progress | You, in the app |
| AI advisor conversations | The messages you exchange with the advisor | You, when you use the advisor |
| Experience journal | Skills, CPD, reflections, feedback and practice hours you log (anonymised — must not contain patient-identifying data) | You, in the Journal |
| Notifications | In-app nudges about your streak, skills, revalidation and plan progress, your email/frequency preferences, and a last-seen timestamp | Generated by us from your own activity |
| Career fit result | Your work-preference scores from the Career Fit quiz, your top role matches, and a partner tag if you arrived via a partner link (work preferences only — no special-category data) | You, via the quiz |
| CV documents | The CV title, target role and the section text you build and edit (anonymised — must not contain patient-identifying data) | You, in the CV Builder |
| Interview practice | Your chosen target role, the practice questions generated, and any answers/feedback you save (anonymised) | You, in the Interview Coach |
| Career Passport | An opt-in shareable profile: a chosen handle (public URL /p/handle), an editable AI summary, your per-section privacy choices, and what you're open to. It aggregates data you already hold; you choose what is Public, Shared or Private. Private sections (including reflection notes — themes only, never the text) are never shown publicly. Off until you opt in. | You, in Career Passport |
| Subscription data | Subscription status, the price tier you were shown, and a 'trial started' audit record (price, trial length, first-charge date) proving the pre-contract information shown to you | Generated when you subscribe |
| Payment data | Card payments are handled by Stripe; we never see or store your full card details — only limited confirmation data (e.g. status, last 4 digits) | Stripe |
| Email logs | A record of transactional emails we send you (e.g. welcome, plan summary) for deduplication | Generated by us |
| Analytics & session replay | Usage events and replays of app sessions with all inputs and text masked — only if you consent | Your device, via PostHog |
| Technical data | IP address, device/browser type, and similar, needed to deliver and secure the Service | Your device |
We do not intentionally collect special-category data (such as health conditions). Please don't enter health or other sensitive personal information into the advisor; if you do, we treat it only as part of your conversation to answer you and do not use it for any other purpose. Session replay masks inputs so this content is not captured in replays.
3. Why we use your data and our lawful basis
- To provide the Service — create and run your account, build your career map, ground advisor answers in your profile, and send transactional emails you request. Lawful basis: performance of our contract with you (UK GDPR Art. 6(1)(b)).
- To take payment and manage your subscription — including trials, renewals and refunds. Lawful basis: performance of our contract; and compliance with legal obligations (e.g. tax/accounting records) (Art. 6(1)(b) and (c)).
- To keep the Service secure and prevent abuse, and to keep basic records of the emails we've sent. Lawful basis: our legitimate interests in operating a secure, reliable service (Art. 6(1)(f)).
- Analytics and session replay to understand and improve how the app is used. Lawful basis: your consent (Art. 6(1)(a)), given via the cookie banner. Because these use storage on your device, we rely on consent under PECR and will not run them until you accept.
- Service notifications & email digests — nudges about your streak, skills, revalidation and plan progress, derived only from your own activity. Lawful basis: legitimate interest in helping you progress; you can turn the emails off in one tap (every digest carries an unsubscribe link) or in Notifications settings.
- Marketing emails (if any) — only with your consent, and you can opt out at any time.
You can withdraw consent for analytics/replay or marketing at any time without affecting the lawfulness of earlier processing; core features keep working either way.
4. The AI advisor
When you use the advisor, your message and relevant parts of your profile are sent to our AI processor (Anthropic) to generate a response. We instruct Anthropic to process this only to provide the response and not to train models on your data. If your messages happen to include health or other sensitive information, that special-category data is processed only to answer you within the conversation, is not used for any other purpose, and is masked from session replays; you can delete your conversations by deleting your account. Please remember the advisor gives general guidance only and can be wrong — see our Terms of Use.
5. Who we share your data with (processors)
We use the following processors to operate the Service. They act on our instructions under data-processing agreements:
- Supabase — database and authentication.
- Anthropic — AI advisor responses.
- Stripe — payment processing. Stripe is an independent controller for some payment/fraud purposes; see Stripe's privacy policy.
- Resend — transactional email delivery.
- PostHog — product analytics and session replay (EU region), only with your consent.
We do not sell your personal data.
6. International transfers
Where a processor stores or processes data outside the UK, we ensure an appropriate safeguard is in place — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses. Details are available on request at support@careroute.co.uk.
7. How long we keep your data
- Account and profile data: for as long as your account is active. If you delete your account, this data is deleted immediately and irreversibly.
- Advisor conversations, saved routes, skills-gap progress, experience-journal entries, notifications, preferences & career-fit result: deleted with your account.
- Payment, transaction and trial-audit records: retained as long as required by law (typically 6 years for tax/accounting and to evidence the trial terms shown to you), even after account deletion. These records are kept with a stored copy of the email they relate to and are not deleted when you delete your account.
- Email logs: kept for a short period for deduplication, then deleted.
- Analytics/replay data: retained for up to 12 months by PostHog, then deleted, subject to your consent.
8. Your rights
Under UK data protection law you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; and to withdraw consent. You also have the right to complain to the ICO.
You can exercise the main rights directly in-app:
- Export all your data as a JSON file, and
- Permanently delete your account and all associated data,
both from Account → Data & privacy. For any other request, email support@careroute.co.uk — we'll respond within one month.
9. Cookies and similar technologies
We use a small number of essential cookies to run the Service, and (only with your consent) analytics and session-replay technologies. See our Cookie Policy and manage your choices via the consent banner at any time.
10. Children
The Service is for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete their data.
11. Complaints
If you have a concern, please contact us first at support@careroute.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk; helpline 0303 123 1113).
12. Changes to this policy
We may update this policy from time to time. If changes are material we will notify you by email or in-app. The “last updated” date above shows the current version.