Privacy Policy
Last updated: 1 August 2026
1. Information We Collect
We collect information you provide when creating an account (name, email, organisation details), care-related data entered into the platform (care plans, clinical logs, shift records), uploaded documents (compliance files, signatures), and usage data (login times, feature usage). We do not collect data beyond what is necessary to deliver the service.
2. How We Use Your Information
Your data is used to: operate and maintain the FendanaCura platform; manage user accounts and role-based access; facilitate care coordination between agencies, caregivers, clients, and families; process subscriptions and payments via Stripe; send transactional emails (invitations, compliance alerts, care summaries); and improve the service through aggregated, anonymised analytics.
3. Data Storage & Security
All data is stored on encrypted cloud infrastructure. Files are stored via Emergent Object Store with access controlled through authenticated API endpoints. Passwords are hashed using bcrypt. All connections use TLS encryption. We implement role-based access control (RBAC) ensuring users can only access data appropriate to their role within their organisation.
4. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only with: Stripe (payment processing); Resend (transactional email delivery); and cloud infrastructure providers (hosting and storage). All third-party processors are bound by data processing agreements.
5. Your Rights
You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; export your data in a machine-readable format; withdraw consent for optional communications; and lodge a complaint with your local data protection authority.
6. Data Retention
Account data is retained for the duration of your subscription plus 90 days. Care records may be retained longer where required by healthcare regulations. You may request earlier deletion by contacting customerservices@fendanahealth.com. Deleted data is permanently removed from active systems within 30 days.
7. Cookies & Tracking
FendanaCura uses essential session cookies for authentication. We do not use third-party tracking cookies, advertising pixels, or analytics trackers that share data externally. The Progressive Web App (PWA) stores minimal offline data in your browser for offline functionality.
8. Contact
For privacy-related enquiries, contact us at privacy@fendanahealth.com or write to: Fendana Health Ltd, United Kingdom.
