How we protect your data
Finding care means telling us private things. Here is exactly what we do with them — written to be read, not scrolled past.
- We collect the minimum to match well
The care your family member needs, your postcode district, when visits should happen, and your name and email. That is the whole list. We never ask for medical records, NHS numbers, or their full history — matching doesn't need them, so we don't hold them.
- Health details are handled under stricter rules
Needs like dementia support or mobility help are special category data under UK GDPR. We process them only with your explicit consent — the tick-box on the request form — and only to shortlist agencies that can genuinely provide that care. Withdraw consent at any time and processing stops with it.
- Agencies see enough to reply — not enough to find you
A matched agency sees your first name, your district (“BL2”, never a street address) and the care needed. Your phone number and full name move only when you press Share my number — to that one agency, recorded with the date and time so there is never any doubt about what was shared.
- No selling, no ads, no mailing lists
We are paid by agency subscriptions, not by your data. It is never sold, never used for advertising, and never passed beyond the agencies you match with. You'll get one email per agency reply and nothing more. Everything is encrypted in transit and at rest, on servers in the United Kingdom.
- You stay in control
Ask for a copy of everything we hold, correct it, or delete your request and account — one email to privacy@wellchosen.com, actioned within 30 days, no questions. Requests that close are deleted automatically after 12 months. If we ever fall short, you can complain to the ICO — we'll give you their details ourselves.