Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs your use of InspectReady, operated by Crocker Digital Ltd (company no. 17008789). It forms part of, and is incorporated into, the Terms of Service and the Data Processing Agreement. If you breach this policy we may suspend or terminate your access.

What InspectReady is for

InspectReady helps a CQC-registered care home manage its policies, audits, and compliance evidence, and produce evidence packs for inspection. Use it for that lawful purpose.

You may

• Upload your home's own compliance evidence (policies, audit records, training records, care and quality documentation) for the homes you are authorised to manage.
• Invite colleagues in your organisation and grant them access to the homes they work in.
• Generate evidence packs and time-limited read-only share links for auditors and inspectors.

You may not

• Upload special-category data beyond what is strictly necessary as compliance evidence. Care evidence may contain health data about residents; upload only what a specific quality statement genuinely requires, and rely on your own lawful basis under Article 9 of the UK GDPR. Do not upload sensitive personal data that has no compliance purpose.
• Upload data about individuals or homes you are not authorised to hold or manage.
• Use the service to store data for a purpose unrelated to CQC compliance.
• Upload malware, executables, scripts, or archives, or attempt to upload files that bypass our upload controls.
• Attempt to access another organisation's or home's data, probe or bypass access controls, or test security without our prior written permission (see our Security policy for responsible disclosure).
• Scrape, resell, or provide the service to third parties except as expressly permitted.
• Use the service to break the law, infringe others' rights, or harass anyone.
• Overload the service or interfere with its operation (for example, automated bulk requests outside normal use).

Data you upload

You are responsible for the data you upload and for having a lawful basis to process it. As the controller of resident, service-user, and staff data, you must provide any notices and hold any consents required of you. We act as your processor for that data (see the DPA).

Enforcement

We may remove content that breaches this policy and suspend or terminate accounts involved in serious or repeated breaches. Where we can, we will give notice and an opportunity to fix the problem first, but we may act immediately where the breach is serious or unlawful.

Contact

Questions about acceptable use: support@inspectready.co.uk. Security concerns: security@inspectready.co.uk.