Privacy policy

Chronix Health Group Ltd (Companies House number 16663224, registered with the ICO under reference ZB962513) is the data controller for the Chronix Health Library. This means we decide how and why your personal information is used.

The full per-product privacy notice for the Library — alongside the notices for every other Chronix Health product — is published at careworld.app/privacy.

• Account information from your Chronix Health sign-in: your name and email address.
• Your course activity: which courses you start, your progress, and the certificates you earn.
• Payment information: when you buy a course, Stripe handles the payment. We never see or store your card details.
• Sign-in and security activity: a record of your sign-ins and security events, including the approximate device and IP address, kept to protect your account. You can see this yourself under Account → Security, and it's included if you download your data.

We keep aggregate statistics about visits to our sites — the page visited, the website that referred you, and the country of the request. These records contain no cookies, no IP addresses and no identifiers, so they cannot be linked to you or to any other visit. We keep them for 12 months.

We use your information to give you the courses and track your progress, to issue your certificates, to take payments, and to keep the Library secure. Under the UK GDPR, our lawful bases are:

• Performance of a contract — to deliver the course you signed up for.
• Legitimate interests — to keep the service secure and understand how it is used.
• Consent — for any marketing. We only send marketing if you choose to opt in.

We use trusted companies to run the Library. They only process your data to provide their service to us, under contract:

• Supabase — secure database storage.
• Stripe — payments.
• Vercel — website hosting.

We do not sell your personal information.

We keep your account and course records while your account is active. We keep records we need for tax and legal reasons for as long as the law requires (usually up to 6 years). After that, we delete or anonymise your information.

Under the UK GDPR you have the right to:

• see the information we hold about you (access);
• have it corrected if it is wrong (rectification);
• ask us to delete it (erasure);
• get a copy to move elsewhere (portability);
• complain to the ICO if you are unhappy with how we handle your data.

To use any of these rights, email support@careworld.app. You can also complain to us about how your data is handled — no account needed — and complaining to us never affects your right to go to the ICO instead, or as well.

We use a small number of necessary cookies. The main one is the sign-in (SSO) cookie that keeps you logged in across Care Vault, Care World and the Library. Stripe and our hosting may set cookies that are needed to take payments and make pages work. We do not use advertising or tracking cookies.

For any privacy question, or to reach the data controller, email support@careworld.app. If we change this policy, we will update this page.