In short

  • We only collect what we need to match you with a care home resident and send you their postal
    details.
  • We never receive residents’ names or personal details. Residents are listed by gender and a
    reference number only.
  • We do not sell, share or market with your information.
  • Volunteer order details (name, email) are deleted 30 days after your order.
  • Our website and service providers are based in the EU, except where stated below.
  • Questions: info@carepack.ie
  1. Who we are
    carepack.ie is a voluntary, kindness initiative. It is not a registered charity and does not
    accept donations. The data controller for this website is [name of person or organisation responsible],
    [postal address]. Contact: info@carepack.ie.
    We have not appointed a Data Protection Officer, as we are not required to. Please send any privacy
    questions to info@carepack.ie.
  2. Information we collect and why
    Members of the public who send a carepack (volunteers)
  • What: your name, email address, the county you chose and how many
    residents you requested.
  • Why: to allocate residents to you and email you their care home address.
  • Legal basis: processing is necessary to provide the service you asked for (GDPR Article 6(1)(b)),
    and our legitimate interest in preventing misuse, such as duplicate or bulk sign-ups (Article
    6(1)(f)).
  • How long: deleted 30 days after your order.
  • Care home managers and staff
  • What: the name, work email and phone number of the person registering, the care home name
    and address, the name of the staff member who receives carepacks, and the number of male
    and female residents taking part.
  • Why: to register the home, add its residents to the site, and print the staff contact name on the
    address given to volunteers.
  • Legal basis: legitimate interests (Article 6(1)(f)). The staff member named on the address is
    chosen by the home, which tells that person their name will be shared with volunteers for this
    purpose.
  • How long: deleted by [31 January] after each campaign. Homes register again each year.
  • Care home residents
  • We do not collect residents’ names or personal details. Homes provide only the number of
    residents taking part, by gender. Each resident appears as a label such as “Male Resident 55”,
    which does not relate to a specific person.
  • [If gift preferences are collected: any preferences are general, e.g. “enjoys gardening”, and
    cannot identify a resident.]
  • Schools and youth groups
  • What: the name and email address of the teacher or group leader, the school or group name,
    and the number of residents requested.
  • We do not collect any information about children.
  • Legal basis, retention: as for volunteers above.
  • Groups of more than 20
  • [What: contact name, organisation, email and group size, collected through a Google Form.
    Google Ireland Ltd processes this data on our behalf. Deleted by [31 January] after each
    campaign.]
  • Anyone who emails us
  • What: whatever you include in your email.
  • Why: to reply to you. Legal basis: legitimate interests.
  • How long: [12 months], then deleted.
  1. Who processes data on our behalf
    We use the following service providers. Each acts only on our instructions.
    Provider Purpose Location
    [Web host] Hosts the website and its database

We do not share your information with anyone else, unless the law requires it.
Where a provider transfers data outside the EU, that transfer is protected by an adequacy decision (such
as the EU-US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.

  1. What we do not do
  • We do not sell or rent your information.
  • We do not send marketing or newsletters.
  • We do not use advertising or remarketing cookies.
  • We do not take payments. The service is free.
  • You do not need an account. Only site administrators have accounts.
  1. Cookies
    We use essential cookies to make the site work, such as the sign-up basket and queue. Other cookies are
    used only if you agree. You can change your choice at any time with the “Manage consent” button. See
    our Cookie Policy.
  2. Security
    The site uses HTTPS encryption. Administrator access is limited to a small number of volunteers and
    protected by [two-factor authentication]. Order data is deleted automatically after 30 days.
  3. Your rights
    You have the right to:
  • ask for a copy of the information we hold about you
  • ask us to correct or delete it
  • object to, or ask us to restrict, how we use it
  • ask for your data in a portable format
    Email info@carepack.ie. We may ask you to confirm your identity. We will reply within one month, free
    of charge.
    Note that after 30 days we will no longer hold your order details, so we cannot resend resident
    information after that.
  1. Complaints
    Please contact us first at info@carepack.ie. You also have the right to complain to the Data Protection
    Commission at www.dataprotection.ie or through its online contact form.
  2. Changes to this policy
    We review this policy before each campaign. The date at the top shows when it last changed.

Sources

Data Protection Commission contact form

Current policy reviewed: carepack.ie/privacy-policy

Resident data practice: carepack.ie FAQ