Privacy Policy

CalmPath is a prototype demonstration. This policy describes, in outline, how CalmPath will handle data in a production deployment for UK care providers.

Data we handle

Resident care observations, intervention outcomes, staff activity and family portal access. All processing complies with UK GDPR and the Data Protection Act 2018.

Lawful basis

Data is processed under legitimate care interests and, where applicable, the explicit consent of the resident or their appointed representative.

Retention

Care records are retained in line with NHS retention schedules. Access is role-based and audited.

Contact

For data requests contact calmpathclient@gmail.com.