Privacy Policy

Our privacy policy is based on the principle that your data is your property - not ours. You have trusted us to hold it and we will protect it to the best of our ability, but we will not use, sell or give it to anyone else without your express permission.

In particular:

• We collect the minimum amount of personal information needed to operate our service.
• The only personal information we hold is provided by you when you enter it. We do not cross-reference or triangulate this information with any other source of data.
• CareBookings uses best-practise encryption of data in transit and in storage.
• CareBookings allows you to view and edit your information at any time.
• You can ask your organisation to delete your information if you no longer want to use the service. Deletion is absolute - there is no residual data in backup or any other form.
• CareBookings uses a single cookie containing a random number purely to allow you to use our service. This cookie can only be accessed on our web site and is not shared with any other company or entity, so it cannot be used to identify or track you on any other web site.
• CareBookings runs on servers based in the USA, but we do not disclose your information to any overseas entities. See below for more information.
• If you feel we have breached your privacy or that we could improve our privacy policy, please contact us.

We believe our privacy policy meets the requirements of all major privacy legislation in the countries we operate in. This includes:

• Australia's Privacy Act 1988, Privacy Amendment (Enhancing Privacy Protection) Bill 2012 and the Australian Privacy Principles.
• The Canadian Personal Information Protection and Electronic Documents Act ("PIPEDA").
• The European Union Data Protection Directive and General Data Protection Regulation.

Cookie Consent Exemption

EU users may notice that despite using a cookie, we do not ask you to accept it. This is because our cookie is strictly necessary to provide our service - we could not provide a secure personalised service without it. This means we satisfy Criterion B of Article 5.3 of Directive 2002/58/EC as amended by Directive 2009/136/EC, and are exempt from providing the right to refuse a cookie.

Server Location

Our services are used by customers in over thirty counties. It would be impractical and expensive to set up and manage servers in each country, so we use centralised servers based in the USA.

We use Google Cloud Platform, which provides far better security, scaling and availability than any system we could afford to build. Google employs the best system engineers in the world, and everything these engineers do to protect Google properties also protects CareBookings. In-depth analysis here.

Our use of Google Cloud Platform does not give Google Search any special access to CareBookings data. We don't use Google authentication or tracking cookies, so there is no way Google can use CareBookings data to identify or track you.

Google's security and privacy arrangements have been independently certified:

• ISO 27001 for information security management.
• ISO 27017 for cloud security.
• ISO 27018 for privacy.