Legal

1. Introduction

GeeMac Global Ltd (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our CareOS platform.

We adhere to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a company serving the UK social care sector, we maintain the highest standards of data protection and security.

2. Information We Collect

We may collect the following types of information:

• Personal Identification Information: Name, email address, phone number, job title, and organisation name.
• Usage Data: Information about how you interact with our website and platform, including pages visited, features used, and time spent.
• Technical Data: IP address, browser type, device information, operating system, and cookies.
• Care Data: For platform users, we process care activity data, compliance records, and workforce credentials as part of our service delivery.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our platform and services.
• To process demo requests and onboarding inquiries.
• To improve, personalise, and enhance user experience.
• To communicate with you about updates, security alerts, and support.
• To comply with legal obligations and regulatory requirements.
• To detect, prevent, and address technical issues and fraud.

4. Data Protection & Security

We implement industry-standard security measures including AES-256 encryption for data at rest, TLS 1.3 for data in transit, and strict access controls. Our infrastructure is hosted in UK-based data centres that are Cyber Essentials Plus certified.

All care data is processed in accordance with the NHS Data Security and Protection Toolkit requirements. We conduct regular security audits and penetration testing.

5. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request transfer of your data to another service provider.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

6. Third-Party Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as required by law or as necessary for service delivery (e.g., secure cloud infrastructure providers). All third-party processors are bound by data processing agreements that comply with UK GDPR.

7. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact: