1. Who we are
ServPatch Ltd ("ServPatch", "we", "us") provides mobile-first care management software for UK care homes and home care providers. We are the data controller for personal data collected through our website, and a data processor for care record data our customers input into the ServPatch platform on behalf of the people they support.
2. What data we collect
Depending on how you interact with us, we may collect:
- Contact and enquiry data: name, email, phone number, organisation, and message content when you request a demo or contact us.
- Account and usage data: staff login details, role, and activity logs when your organisation uses the ServPatch platform.
- Care record data: care notes, medication records, incident reports and related information entered by care providers. This data belongs to our customers, who act as data controller for it; ServPatch acts as data processor under a Data Processing Agreement.
- Technical data: IP address, browser type and device information that may appear in normal server or security logs.
3. How we use data
- To provide, maintain and support the ServPatch platform
- To respond to enquiries and arrange demos
- To send onboarding, training and service communications to customers
- To meet legal, regulatory and safeguarding obligations
- To improve our product based on aggregated, non-identifying usage patterns
We do not sell personal data.
4. Legal basis
We process personal data under UK GDPR on the basis of contract (to deliver services you or your organisation have signed up for), legitimate interest (responding to enquiries, improving the service) and legal obligation (safeguarding, regulatory reporting).
5. Where data is stored
Data is encrypted in transit. Access to the ServPatch service is restricted to authorised team members using accounts issued by their care organisation.
6. Data sharing
We may share data with service providers needed to operate the platform, professional advisers, and regulators or authorities where required by law. The applicable customer documents set out the arrangements relevant to care-record processing.
7. Retention
Care-record retention and return or deletion are handled according to the customer agreement, the customer's instructions and applicable law. Website enquiry data is retained only for as long as reasonably needed to respond and follow up.
8. Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. If ServPatch is a data processor for your care records, requests about that data should usually go through the care provider organisation as the data controller. For all other enquiries, contact us using the details below.
9. Cookies
With your consent, we use Google Analytics 4 (G-XJ7PEZJYWW) to understand visits to this public website and actions such as demo clicks and confirmed enquiry submissions. Analytics is optional and does not load before you accept. Rejecting it does not affect the contact form or access to the website.
Analytics receives a pseudonymous cookie identifier, public page addresses and titles, event names, browser/device information and approximate location derived by Google from the network connection. We remove query strings, fragments and referrer information from our events. Email and phone clicks are counted without their addresses or numbers; external links are reduced to the destination domain. We do not send names, contact details, enquiry text, care records or other form values. Google advertising signals and advertising personalisation are disabled.
Google processes analytics information for us and may process it outside the UK. See Google’s privacy information and Google’s data processing terms for its processing arrangements and transfer safeguards. Our lawful basis for optional analytics is consent. You can withdraw it through Cookie settings; withdrawal stops future measurement but does not undo earlier lawful processing. Contact us using the details below about your data rights.
Our analytics cookies and consent preference last up to 180 days. Analytics report retention is separately controlled in our Google Analytics account. See our Cookie Policy for storage details and controls.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.
11. Contact us
Questions about this policy or your data can be sent to [email protected].