Privacy notice

Ivy Technology Ltd (“Ivy”, “we”) is registered in England & Wales and based in Pontefract, West Yorkshire. We provide Ivy Care Connect and Ivy RM.

For enquiries submitted through this website we act as the data controller. For service-user records entered by a care provider, hospital, social work or local authority team, that organisation is the controller and we act as their processor under a written agreement.

Enquiry data: your name, work email, organisation, role and the message or preferences you submit through our contact, demo, sign-up and waiting-list forms.

Service-user data entered by professional users: care needs, setting, location, and — where the financial threshold assessment is used — capital, income, disability-related expenditure and any evidence documents attached.

Operational data created in Ivy RM: rota, incident, audit, compliance and training records.

Technical data needed to run the service securely, such as sign-in events and error logs.

To respond to enquiries, arrange demos and set up accounts.

To match care needs to available capacity and to route financial-threshold referrals to the correct local authority team.

To provide compliance, rota and reporting features to registered managers.

To keep the platform secure, diagnose faults and improve the product.

For enquiries and marketing follow-up: our legitimate interests in responding to you, or your consent where required.

For service-user records: the lawful basis is set by the commissioning organisation as controller — typically a public task or legal obligation, with an appropriate Article 9 condition for health and care data.

For security and fault diagnosis: our legitimate interests in operating a safe service.

The local authority, ICB, hospital or provider team a referral is routed to.

Service providers who help us run the platform, including our cloud hosting and email providers, under contract and only on our instructions.

Anyone we are legally required to disclose to, for example in response to a lawful request from a regulator.

We do not sell personal data and we do not use service-user records for advertising.

Enquiry data is kept for up to 24 months after our last contact, unless you ask us to delete it sooner.

Service-user and operational records are kept in line with the controlling organisation's retention schedule, which we confirm in writing during onboarding, and are deleted at the end of that period or on the controller's instruction.

Data is hosted on managed cloud infrastructure and encrypted in transit and at rest. If any processing takes place outside the UK, it is covered by an approved transfer mechanism such as the UK International Data Transfer Addendum.

You have the right to access your data, have it corrected or erased, restrict or object to processing, and receive it in a portable form.

Email info@ivycareconnect.co.uk to make a request. Where another organisation is the controller, we will forward your request to them and support their response.

You can also complain to the Information Commissioner's Office (ico.org.uk).

This website uses only the cookies and local storage needed to make pages work. We do not run advertising or cross-site tracking cookies.