Privacy Policy

This policy explains what personal data KidSitter collects, why we collect it, and what rights you have. We act as the data controller for the information described here.

• Account details: name, email, password (stored hashed), mobile number and postcode.
• Sitter profile details: date of birth, address or postcode, photo, bio, services, pricing, availability, experience, qualifications and references.
• Verification documents: DBS certificates and ID documents you upload for checking.
• Messages: conversations you have through the platform, and moderation results on that content.
• Membership and payment data: plan, billing period and payment status. Card details are handled by our payment processor; we never see or store your full card number.
• Technical data: basic log and device information needed to run and secure the site.

We use your data to run your account and provide the service (contract), to verify sitters and keep children and families safe (legitimate interests and substantial public interest for safeguarding), to take membership payments and meet accounting duties (contract and legal obligation), to send service emails such as message notifications (contract), and to improve the site (legitimate interests). Marketing emails are sent only with your consent, and you can withdraw it at any time.

DBS certificates and ID scans are treated as highly sensitive. They are stored in private storage with restricted access, used only for verification, and are never shown publicly or shared with other users, including paying members. Parents see the outcome (for example, DBS level and check date), never the underlying document.

We share data only with service providers who help us operate: our hosting and database provider, our payment processor, our email provider, and the AI provider used to help review documents and screen messages for harmful content. They act on our instructions under contract. We may also disclose data where the law or a safeguarding concern requires it. We do not sell your data.

Some providers may process data outside the UK. Where that happens, we rely on appropriate safeguards such as UK-approved standard contractual clauses.

Account and profile data is kept while your account is active and for a reasonable period afterwards. Verification documents are kept only as long as needed for the check and any safeguarding or legal record-keeping. Payment records are kept as long as tax law requires. Messages are retained so both sides keep their history, and are deleted when accounts are deleted, subject to any safeguarding hold.

Under UK GDPR you can ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, and ask for it in a portable format. You can also complain to the Information Commissioner's Office (ico.org.uk). To exercise any right, email privacy@carefinder.co.uk.

We use cookies and similar storage that are necessary to keep you signed in and keep the site secure. We apply access controls, encryption in transit and restricted internal access to protect your information.

KidSitter accounts are for adults aged 18 and over. We do not knowingly create accounts for children. Parents may mention their children's ages and needs; please share only what is necessary.