How CareMaSym uses, shares, retains and protects personal information.
Who we are and our role
CareMaSym is a Gradespace product. The provider identified in an Order Form is controller for its website, sales, account administration, security and support processing. For care records entered by a care organisation, that organisation normally acts as controller and CareMaSym normally acts as processor under the Data Processing Addendum.
Information we handle
- Identity, work contact, organisation, role and branch information.
- Authentication, device, security, audit and product-usage events.
- Enquiries, support communications and cookie choices.
- Customer-submitted care information, which may include health, medication, location and safeguarding data.
Please do not submit care information through public website forms.
Purposes and lawful bases
- Provide, secure and support the website, platform, mobile apps and APIs.
- Create accounts, enforce permissions, prevent misuse and maintain audit trails.
- Respond to enquiries and administer customer relationships.
- Diagnose faults, improve accessibility and meet legal obligations.
Where CareMaSym is controller, bases may include contract, legitimate interests, legal obligation and consent. Customers determine the basis for their care processing.
Retention and security
We retain information only as long as needed for its purpose, customer instructions, backups, security, law and regulation. Controls include role-based access, authentication, encryption in transit, tenant and branch scoping, audit logging, backup protection, incident response and supplier review. No system can guarantee absolute security.
Your rights
Depending on the circumstances, rights may include access, correction, erasure, restriction, objection, portability and review of certain automated decisions. For a care record, contact the relevant care organisation first; we assist it where we act as processor. You may complain to the UK Information Commissioner’s Office.
Contact
Email hello@caremasym.com. Include enough detail to identify the account or organisation, but never send passwords, verification codes or unnecessary care information.
This CMS-managed page may be updated after legal, product or supplier review. Questions: hello@caremasym.com.