Privacy Policy
This Privacy Policy explains how CQC Ask ("we", "us", "our") collects, uses, and protects your personal data when you use our website and service at cqcask.co.uk. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
CQC Ask provides an AI-powered platform giving instant, sourced answers to CQC compliance questions, and connects care providers with independent compliance consultants. We are the data controller for the personal data described in this policy.
Contact us regarding privacy matters at: hello@cqcask.co.uk
2. What Data We Collect
| Category | Examples |
|---|---|
| Account information | Name, email address, password (encrypted) |
| Payment information | Processed by our payment provider, Stripe — we do not store full card details ourselves |
| Usage data | Questions asked, pages visited, time spent on site, device and browser information |
| Consultant application data | For those applying to join our expert panel: professional background, experience, specialisms, LinkedIn profile |
| Analytics data | Collected via Google Analytics (Google Tag) — see Cookies section below |
3. How We Use Your Data
- To provide and operate the CQC Ask service, including answering your compliance questions
- To process payments and manage your account
- To communicate with you about your account, applications, or service updates
- To improve our service through aggregated, anonymised usage analysis
- To meet our legal and regulatory obligations
- To prevent fraud and misuse of the platform
4. Legal Basis for Processing
We process your personal data under the following legal bases: performance of a contract (providing the service you've signed up for), legitimate interests (improving our service, preventing fraud), consent (where you've explicitly agreed, e.g. marketing communications), and legal obligation (e.g. tax and accounting records).
5. Sharing Your Data
We do not sell your personal data. We share data only with:
- Stripe — to process payments securely
- Google Analytics — to understand site usage (see Cookies section)
- Consultants on our expert panel — only where you've submitted a question that's been escalated for expert review, and only the information necessary to answer it
- Legal or regulatory authorities, where required by law
6. Cookies and Analytics
We use Google Analytics (via Google Tag) to understand how visitors use our site. This may set cookies that collect information such as pages visited and time spent on site. You can control or disable cookies through your browser settings. Disabling cookies may affect some site functionality.
7. Data Retention
We retain your personal data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or reporting obligations. Consultant application data for unsuccessful applicants is retained for a limited period and then deleted, unless you ask us to remove it sooner.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at hello@cqcask.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We use industry-standard technical and organisational measures to protect your personal data, including encryption of passwords and secure processing of payment information through Stripe. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our service is intended for business and professional use by adults working in or connected to the adult social care sector. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated to registered users directly.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at hello@cqcask.co.uk.