Privacy Policy

1. Introduction

Rotacare ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our healthcare rota management platform.

2. Data We Collect

We collect information necessary to provide our services, including:

• Account Information: Name, email address, and professional role.
• Organisation Data: Site names, departments, and staffing requirements.
• Staff Records: Employment type, availability, and leave requests.
• Usage Data: Audit logs of actions taken within the platform.

3. GDPR Compliance

We act as a Data Processor for the organisations that use our platform. We implement strict multi-tenant isolation to ensure that data from one organisation is never accessible to another. All data is stored securely within the UK/EEA.

4. Data Security

We use industry-standard encryption (AES-256) for data at rest and TLS for data in transit. Access is strictly controlled via role-based permissions.

5. Contact Us

If you have any questions about this policy, please contact our Data Protection Officer at privacy@rotacare.uk.