Privacy notice

Who is responsible

Shane Garry, at 68 Carton Wood, Maynooth, Co. Kildare, Ireland, is the controller for Care Handover. Privacy questions and rights requests can be sent to privacy@carehandover.ie. General support is available at support@carehandover.ie or +353 86 325 8330.

Information and sources

Account information comes from you and includes your name, email address, password verifier, verification and recovery records, sessions, and limited security events. We do not collect child or carer details during signup.

If you later buy and use the service, you may provide child routines, preferences, contacts, address or access details, allergy, medication and health notes, typed answers, approved plan versions, and sharing instructions. A selected carer creates only limited access and security events when opening a private link. Payment and service providers return limited operational records, not private plan content unless their function requires it.

Why information is used

Account and purchase information is used to provide the service you request and manage the contract. Security, private sharing and minimal access records are used for the legitimate interest of protecting parents, children, carers and the service. A non-readable keyed marker derived from the verified purchaser email is used only to route a later purchase following a full refund to human support review. It is not used as account ownership evidence or to decide a refund automatically. Billing or dispute records may also be kept where required by law.

For practical child handover information, the controller relies on the legitimate interest of delivering the parent-requested private handover, only where the documented necessity and child-best-interests assessment is satisfied. Before allergy, medication or other health information is collected for a child, the parent must separately give explicit health-data consent. That consent is recorded for the named child and purpose, can be withheld or withdrawn, and is not bundled with account creation, microphone permission or plan approval. It is not blanket consent.

Sharing, providers and transfers

A parent-approved handover is shared only with the selected carer through a time-limited, revocable grant. Hosting, database, authentication, transactional email and payment providers receive only the fields needed for an activated function. If you choose AI-guided Talk or Type, contracted conversational-AI and language-model providers process the conversation transiently to return structured draft fields. Microphone access is requested only for Talk. Recordings and full transcripts are not kept after the conversation, transcript or audio copies are not sent back to Care Handover, and the separate private form does not use the AI conversation provider. Only structured draft fields submitted to Care Handover are retained for your review. Partners and support operators receive no private plan data by default.

Care-plan processing is kept in EEA-hosted application and database regions where practicable. Any necessary non-EEA processing or access must have a recorded purpose, minimised fields, contract or DPA, applicable transfer mechanism, transfer assessment and accepted residual risk before activation. Provider categories and transfer information are reviewed and updated before a changed processing path is used.

Retention and security

Abandoned unapproved drafts are scheduled for deletion after 30 days. Approved plans are kept while the paid account is active and for no more than 12 months after lapse unless earlier deletion or a legal hold applies. Expired or revoked sharing ends immediately; minimal sharing evidence is kept for 90 days and general operational events for 30 days. Verified active-data deletion is targeted within 30 days, with encrypted backups ageing out within the separately documented backup period.

A minimal purchase, cancellation, tax and dispute record is kept for 2,555 days. This can include the offer and document versions, amount, dates, order reference, a pseudonymous keyed purchaser marker, and the verified consumer name and acknowledgement email fixed in a cancellation statement, but not child or care-plan content. It is deleted after that period unless a legal hold requires longer retention.

Care Handover uses access controls, encryption in transit and at rest, revocable sessions and links, private no-store responses, rate limits and minimised logs. No control makes online processing risk-free.

Your choices and rights

You can request access, correction, deletion, restriction, objection or portability where applicable, and withdraw a consent where consent is the recorded basis, through your account or privacy@carehandover.ie. Identity may be checked proportionately. You may also complain to the Irish Data Protection Commission at dataprotection.ie.

Withdrawing health-data consent stops new use of the affected information. Care Handover will withdraw any live handover containing it and erase that health content unless a legal hold applies; withdrawal does not affect processing that was lawful before it was withdrawn. A parent who does not want health information processed can stop before entering it and choose not to create that handover.

Name, email and password are required to create the parent account. You may create a draft with optional AI-guided Talk or Type, or use the separate private form without the AI conversation provider; microphone permission is requested only for Talk. Later handover fields are identified as required or optional; safety-critical unknowns can prevent sharing until the parent supplies or confirms them. Care Handover does not sell personal data, use behavioural advertising, train its own models on private plan content, or make solely automated decisions with legal or similarly significant effects.

Changes to this notice

The version shown at signup is recorded with the account. A material change requires a new version and a clear notice or acknowledgement before the changed processing is used; an old acknowledgement is not silently treated as current.