Pilot privacy notice

What we collect

When you use the matcher we may store your work email, company name, company website, selected territories, selected care settings, weekly-signal preference, delivery status and related pilot interaction data. We may also retain support communications and limited technical/security logs needed to operate and protect the service.

We do not ask for patient, candidate, service-user, Registered Manager or other sensitive personal data. Please provide only the business-contact information requested by the pilot.

Why we use it

We use submitted information to provide the requested signal sample, operate and secure the pilot, evaluate whether the product is useful, respond to support requests and record founding-pilot interest. Optional recurring signal communications are only intended where you actively choose that option.

Lawful basis

For ordinary B2B pilot operation, the intended Working basis is legitimate interests in providing, securing and evaluating the requested business service and responding to business contacts, subject to the required necessity and balancing assessment. Where an optional recurring communication relies on your explicit choice, that preference will be respected and can be withdrawn.

The final external-facing notice should be confirmed against the actual controller, processing activity and communications model before paid launch.

Data sources and analytical signals

Care-provider facts used in the product come from public Care Quality Commission information. Commercial relevance, Fit Score, HOT/REVIEW labels, "Why now?" explanations and recommended actions are our analytical inferences and are presented separately from the public-source facts.

Service providers and recipients

The pilot uses Base44 for application hosting, database and backend functions. Other necessary technical providers may process limited information only where needed to operate, secure or support the service. A payment provider is not used by the current interest-only flow.

International processing

Some technical providers may process information outside the UK or European Economic Area. Where this occurs and data-protection law requires safeguards, the responsible controller must ensure an appropriate transfer mechanism is in place and describe it in the final notice where required.

Retention and deletion

Pilot submissions are kept only for as long as they remain reasonably necessary to provide and evaluate the requested pilot service, manage founding-pilot interest, maintain security and meet applicable legal obligations. When information is no longer needed for those purposes it should be deleted or anonymised, subject to any limited record that must be retained for legal, security or suppression purposes.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your personal data, restrict or object to processing and, where applicable, receive portable data. You also have the right to object to processing based on legitimate interests and to withdraw any optional communication preference you have given.

Questions and complaints

Privacy questions, objections or deletion requests can be sent to privacy@venture-factory.de.

If you are not satisfied with how your personal data is handled, you may also have the right to complain to the UK Information Commissioner's Office. See ICO complaint guidance.