Data Processing Agreement.
Processor terms and responsibilities for sensitive care-record data.
Purpose
This Data Processing Agreement summary describes how SafeCareLogs processes care-record data where a foster carer, fostering service, agency, local authority or other organisation determines the purposes and means of processing.
Processing details
Subject matter and duration
Processing is carried out to provide the SafeCareLogs app, support account use, maintain security, enable exports and operate related service functions for the duration of the customer relationship and any required retention/backup period.
Categories of data
Data may include account details, family membership, child care records, daily logs, incidents, health/medication notes, appointments, photos, audit logs and support correspondence.
SafeCareLogs commitments
- Process care-record data only to provide, secure, support and maintain the service, or as required by law.
- Use appropriate technical and organisational safeguards for the nature of the data.
- Limit support access to what is necessary.
- Assist with data export, deletion, security and rights requests where reasonably possible.
- Use subprocessors only where needed to deliver the service.
- Notify relevant customers/controllers of security incidents where required.
Customer/controller responsibilities
Customers remain responsible for confirming their lawful basis, special-category/children’s-data conditions, privacy information, retention requirements, authorised users, exports and disclosures to agencies, local authorities or professionals.