Inspect·Ready

Privacy Policy

Last updated: 2 July 2026

Who We Are

InspectReady is a product of Crocker Digital Ltd (Company No. 17008789), registered in England and Wales. You can reach us at privacy@inspectready.co.uk.

What Data We Collect

We collect the minimum data needed to operate this site:

  • Account signups: Your name, email address, and the plan preference you tell us at signup. We use this to create and run your account and to send service messages.
  • Analytics: We use GoatCounter, a privacy-friendly analytics tool that does not use cookies and does not track personal data. GoatCounter collects page views, referrer information, browser type, and screen size — no IP addresses are stored.
  • Free tools: Data you enter into our free tools (self-assessments, audit schedules, gap checkers) is processed entirely in your browser. We do not store, transmit, or collect any data you enter into these tools.
  • Compliance evidence you upload (as our customer): When you use a paid account to store policies, audits, and evidence, that material may contain personal data about residents, service users, and staff. For that data you are the controller and we act as your processor — this is governed by our Data Processing Agreement, not this policy (which covers your own account data).

How We Use Your Data

  • Account emails: to send service messages such as reminders, billing notices, and important product updates. We will not send marketing emails beyond this scope without your explicit consent.
  • Analytics: to understand which pages are visited and how visitors find our site, so we can improve our content.

Who We Share Data With

Application data is hosted in the UK where supported by our core infrastructure (Supabase, London). We use vetted subprocessors to operate the service, some of which process limited data outside the UK under appropriate safeguards. We do not sell care-home data or share it for third-party marketing.

“No third-party marketing” is not the same as “no subprocessors”: to run the service we rely on providers for hosting, database and storage, payments, email, analytics, and monitoring. These are not third-party sharing in the marketing sense — they process data only to operate InspectReady, under contract. The current, dated list is at /legal/subprocessors.

Data Retention

Your home’s data (policies, audits, evidence) is kept for the life of your subscription. After you cancel, we keep it through a 30-day grace period so you can reactivate or export. After that, a scheduled sweep deletes your evidence files and records and anonymises your profile name; your policies, audits, and generated evidence packs are retained as part of your compliance record and removed on request. Full detail — including how erasure works alongside our immutable compliance audit log — is in our Data Retention & Deletion policy. You can request a copy or deletion at any time by contacting us.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability

To exercise any of these rights, email us at privacy@inspectready.co.uk. Your account settings also include “Request a data export” and “Request account deletion” shortcuts that open a pre-filled email to our privacy team. We action these within one month.

A note on erasure. InspectReady keeps an append-only audit log of security- and compliance-relevant events so it can serve as a tamper-proof compliance record. Because that log is immutable by design, we fulfil an erasure request by removing or anonymising your personal data (profile fields, evidence contents and metadata) and revoking access — we do not rewrite or destroy the historical log events themselves, whose personal identifiers are minimised instead. This is erasure by removal and anonymisation, consistent with audit-log retention, and reflects Article 17(3) of the UK GDPR. See our Data Retention & Deletion policy for details.

Cookies

This website does not use cookies. GoatCounter operates without cookies. No consent banner is required.

Changes to This Policy

We may update this policy as InspectReady develops. Material changes will be communicated to account holders via email. The “Last updated” date above reflects the most recent revision.

Contact

For privacy-related queries, email Crocker Digital Ltd at privacy@inspectready.co.uk.