Available now
Continuous, contactless overnight welfare monitoring and welfare check workflow for institutional care.
Explore Core
Pending regulatory approval
Pattern-based deterioration alerting alongside welfare monitoring. In development ahead of regulatory clearance.
Explore ClinicalThis policy covers personal data collected through the welfareone.com website only — principally, information you submit via the contact form and technical data collected automatically by our hosting and security providers.
It does not cover personal data processed by the Welfare One product platform when deployed in customer environments (care homes, hospitals, secure settings, or similar). Data processed through the platform is governed by separate Data Processing Agreements and service contracts executed directly with institutional customers. If you have questions about how the platform handles data in a specific deployment, please contact the relevant institution directly.
The Welfare One website is operated by Ashbe Ltd, a company registered in England and Wales, trading as Welfare One. Our registered address is:
Ashbe LtdFor data protection purposes, Ashbe Ltd is the data controller for personal data collected through this website.
For privacy matters, contact us at: [email protected]
When you submit the contact form on this website, we collect:
We do not ask for sensitive personal data (such as health information) through the contact form.
Our hosting and spam-protection providers collect certain technical information as part of their standard security and integrity functions. This includes:
This information is processed by Cloudflare on our behalf as part of our hosting infrastructure and spam protection. We do not independently store it beyond what our providers retain for their security purposes.
| Purpose | Lawful basis |
|---|---|
| To respond to your enquiry submitted via the contact form | Article 6(1)(b) UK GDPR — processing necessary for steps prior to entering a contract; or Article 6(1)(f) — our legitimate interest in responding to business enquiries that you have chosen to initiate |
| To protect the security of the website and prevent automated abuse | Article 6(1)(f) UK GDPR — our legitimate interest in maintaining site security and availability |
We do not use the personal data collected through this website for marketing purposes. We will not send you unsolicited marketing communications on the basis of a contact form submission.
Contact form submissions are retained for 24 months from the date of last contact with you, after which they are deleted.
Technical information — such as IP addresses and request logs — is retained only for as long as our hosting and security providers retain it for their standard security and infrastructure purposes. We do not independently control this retention period.
We share your personal data only with the service providers listed below. We do not share data with marketing partners, data brokers, or any other third parties. We do not sell personal data.
| Recipient | Role | What they receive | Why |
|---|---|---|---|
| Google LLC | Processor | Contact form submissions (name, email, phone, company, message) | Form submissions are stored in Google Sheets via Google Apps Script |
| Cloudflare, Inc. | Processor | Technical data (IP address, device metadata, request information) | Website hosting (Cloudflare Pages) and spam protection (Cloudflare Turnstile) |
Both providers operate under data processing agreements that include appropriate contractual safeguards.
Google: Contact form data may be processed on servers outside the United Kingdom. Google LLC is based in the United States. Where data is transferred to the US, it is covered by the UK Extension to the EU-US Data Privacy Framework or, where applicable, Standard Contractual Clauses approved under UK data protection law. PLACEHOLDER: verify whether your Google Workspace tenant is configured to process data in the EU/UK — if so, update or remove this paragraph accordingly
Cloudflare: Cloudflare operates a globally distributed network. Data may be routed through servers in countries outside the UK. Cloudflare has appropriate international transfer mechanisms in place, including Standard Contractual Clauses where applicable.
You have the following rights in relation to your personal data:
To exercise any of these rights, email [email protected]. We will respond within one month. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
We would appreciate the opportunity to address your concerns before you contact the ICO — please reach out to us first at [email protected].
We may update this policy from time to time to reflect changes in how we collect or use data, or changes in the law. When we do, we will update the "Last updated" date at the top of this page. If we make material changes that affect your rights, we will take reasonable steps to notify you.
