At TrustedCare we want to be up front about what data we collect from visitors to TrustedCare.co.uk/message-of-thanks and how we use that data.

The information on this policy is valid for visitors to TrustedCare.co.uk/message-of-thanks and pertains to the information they share or that is collected about them whilst viewing and interacting with the website's content. This policy is not applicable to information collected offline or via other channels. If you can't find the information you're looking for within the policy or if you have any additional questions please contact us.

Consent

By using our website, you hereby consent to our Privacy policy and agree to its terms.

PII (Personally Identifiable Information) we collect and how we use it

If you send a message of thanks or you contact us through the associated forms on the website we collect the following PII (Personally Identifiable Information) from you:

• Your name
• The name of the person you are sending a message of thanks to
• The message of thanks you send
• We may collect the name of the care home or service you are sending a message of thanks to (optionally)

We collect this information in order to be able to show the message of thanks you leave. We hold PII for the lifetime of the website.

Data collected by Google Analytics

• Google's privacy policy
• Opt out of Google Analytics

We use Google Analytics to track user activity on our website. To do this a unique identifier is created when you first visit our website and stored as a cookie so that as you visit other pages on the website, or if you leave and then return to the website, we identify the activity as belonging to the same user. This unique identifier does not directly provide us with any Personally Identifiable Information (such as your name or email address).

We monitor visitor activity to:

• Track how visitors find / arrive at our website (e.g. via a Google search, a social media post, a link on another site)
• Measure how visitors engage with our content (e.g. bounce rate, number of pages viewed per session, time spent per visit)
• Monitor the performance of our website in meeting key goals (e.g. when a visitor posts a message of thanks)

Based on the data we collect with Google Analytics we make changes to the website to improve the experience for visitors.

Your unique identifier is held for 26 months. If you don't wish to have your activity tracked whilst visiting the website you can disable cookies for the website in your browser. The website will continue to function as normal if you disable any or all cookies.

Data we collect in server logs

We store the following information about each request (page visit) visitors make when visiting TrustedCare.co.uk/message-of-thanks:

• IP (Internet Protocol) Address
• ISP (Internet Service Provider)
• User agent (browser and OS type)
• Date and time of each request
• The URL visited
• In the event of an error additional information about the request will be captured including headers, cookies and the request body (present on PUT and POST requests).

We collect this information to help us monitor traffic to the website, detect and analyse issues and to filter out unwanted traffic (e.g. unregistered web crawlers/bots).

We hold information in the server logs for 90 days. This information we collect does not directly provide us with any PII (Personally Identifiable Information) (such as your name) except where PII is submitted as part of a request that generates an error. For example, if you were submitting your name when posting a message of thanks and an issue was raised your name would be collected as part of the error information.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data held by us (commonly known as a subject access request).
• The right to rectification – You have the right to request that inaccurate personal data we hold is rectified, or completed if it is incomplete.
• The right to erasure / The right to be forgotten – You have the right to request that we erase personal data that we hold about you. This right is not absolute and only applies in certain circumstances.
• The right to restrict processing – You have the right to request that we restrict the processing of personal data we hold about you. That is, we may hold that data but may not use it. This right is not absolute and only applies in certain circumstances.
• The right to data portability – You have the right to request that we transfer the data we have collected about you; directly to you or to another organisation.
• The right to object to processing – You have the right to object to us processing personal data we collect and hold about you.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contacts us.

A more detailed overview of your rights under GDPR can be found on the Information Commissioner's Office website.