1. Who we are

ServPatch Ltd ("ServPatch", "we", "us") provides mobile-first care management software for UK care homes and home care providers. We are the data controller for personal data collected through our website, and a data processor for care record data our customers input into the ServPatch platform on behalf of the people they support.

2. What data we collect

Depending on how you interact with us, we may collect:

  • Contact and enquiry data: name, email, phone number, organisation, and message content when you request a demo or contact us.
  • Account and usage data: staff login details, role, and activity logs when your organisation uses the ServPatch platform.
  • Care record data: care notes, medication records, incident reports and related information entered by care providers. This data belongs to our customers, who act as data controller for it; ServPatch acts as data processor under a Data Processing Agreement.
  • Technical data: IP address, browser type and device information that may appear in normal server or security logs.

3. How we use data

  • To provide, maintain and support the ServPatch platform
  • To respond to enquiries and arrange demos
  • To send onboarding, training and service communications to customers
  • To meet legal, regulatory and safeguarding obligations
  • To improve our product based on aggregated, non-identifying usage patterns

We do not sell personal data.

4. Legal basis

We process personal data under UK GDPR on the basis of contract (to deliver services you or your organisation have signed up for), legitimate interest (responding to enquiries, improving the service) and legal obligation (safeguarding, regulatory reporting).

5. Where data is stored

Data is encrypted in transit. Access to the ServPatch service is restricted to authorised team members using accounts issued by their care organisation.

6. Data sharing

We may share data with service providers needed to operate the platform, professional advisers, and regulators or authorities where required by law. The applicable customer documents set out the arrangements relevant to care-record processing.

7. Retention

Care-record retention and return or deletion are handled according to the customer agreement, the customer's instructions and applicable law. Website enquiry data is retained only for as long as reasonably needed to respond and follow up.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. If ServPatch is a data processor for your care records, requests about that data should usually go through the care provider organisation as the data controller. For all other enquiries, contact us using the details below.

9. Cookies

The current marketing website does not set analytics or advertising cookies. See our Cookie Policy for more detail.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.

11. Contact us

Questions about this policy or your data can be sent to [email protected].