Loading page…
Loading page…
Last updated: 21 October 2026. This notice explains how Carepath uses information about website visitors and people using the Contact and Quick Enquiry forms.
Carepath Housing Ltd is the controller of personal information used for these purposes. Our company number is 17397216. Our business contact address is 84 Brown Street, Sheffield, S1 2BS. Telephone: 07521 856858. For privacy questions or to exercise your rights, email carepathhousing@gmail.com.
Both enquiry forms ask for your name, email address and enquiry type, and allow an optional message. The Contact form also allows an optional phone number. We process the form source, a submission reference and a verification token to deliver your enquiry and protect against misuse. Required fields are needed to use the form; optional fields can be left blank.
If you select accommodation, its public reference identifies the listing in your enquiry. We include the approved room type, general locality and reference in the email correspondence. The suggested message is editable. We do not identify the room from your message alone.
Restricted administrative areas are available only to approved accounts, not as a public visitor service. If you are an authorised user, we also process your account and security information to manage access. Administrative records and photographs may contain personal information and are handled separately from public enquiries.
Our hosting and security providers may process technical information such as IP addresses, browser/device information, request details and security events when you use the website. We do not implement analytics, advertising, behavioural tracking, session replay or marketing pixels.
The enquiry service includes protection against excessive submissions using short-lived, keyed identifiers derived from your network address and submitted email address, together with request times and a retry identifier. Supabase stores these security records, not your enquiry message or raw network/email address. They are not used to track browsing or for marketing, and do not add cookies. The implemented limits use a 24-hour window and provide for hourly removal of expired records. The production protection and scheduled cleanup have been verified by the operator. Expired records are removed by scheduled cleanup rather than immediately when the window ends. Provider logs and backups have separate retention arrangements.
We use enquiry information to respond to your questions and manage correspondence. Our lawful basis is our legitimate interest in communicating with people who contact Carepath and managing those enquiries, balanced against their rights and interests. Only where processing is necessary to take steps you request towards a contract with you do we rely on that pre-contract basis. This does not apply merely because someone asks about a service on another person's behalf.
We rely on legitimate interests for processing necessary to operate and protect the website, prevent abuse, authenticate authorised users and manage restricted administrative access and records, balanced against the rights and interests of the people affected. Where a specific legal obligation requires information to be retained or disclosed, we rely on that obligation. Sending an enquiry is not consent to marketing.
These general enquiry forms do not request health records, identity documents, referral case notes or other sensitive information. Please do not include these, including information about another person. The website does not provide a referral intake service.
If sensitive information is sent without being requested, Carepath remains responsible for handling it appropriately. It should only be retained or processed where necessary and appropriate, with a suitable lawful basis and any additional condition required for sensitive data; otherwise it should be deleted in accordance with Carepath's retention practices.
Contact and Quick Enquiry submissions are processed temporarily by the application server to validate the fields, verify Cloudflare Turnstile and send the enquiry securely through Resend to the configured Carepath mailbox. Your email address is used as Reply-To so Carepath can respond directly. Public enquiries are not stored as records in the website database. This does not mean the information disappears after submission: the email delivery service processes the message and the Carepath mailbox retains it as email correspondence. Restricted administrative records are processed separately.
Vercel hosts the application. Cloudflare Turnstile checks for automated abuse; its browser widget and server verification process technical verification information. Resend processes enquiry emails, and the mailbox provider processes delivered correspondence. Separate authentication and hosting services support the restricted administrative areas for authorised users.
Provider processing locations and any international-transfer arrangements depend on the services and account configuration. These details are under review; we do not claim that all information stays in the UK. Contact us for information about the arrangements applicable to your data.
Enquiry correspondence is retained only for as long as reasonably necessary to respond to and manage the enquiry and for applicable legitimate business or legal requirements. It should then be deleted in accordance with Carepath's retention practices. The website does not automatically delete enquiry emails.
Security records, provider logs and backups have separate retention arrangements. Their detailed schedules still require confirmation; no fixed period is promised here.
Depending on the circumstances, you can request access to your personal information, correction, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests. These rights are not absolute. Contact carepathhousing@gmail.com; we may need proportionate information to verify your identity.
You can also complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint. You do not have to contact us first.
Read our cookies and browser storage notice for enquiry verification, browser storage and restricted administrative access. We will update this notice when processing changes; the date above identifies this version.