Privacy Policy

Care Pathway ("I," "me," "my") is committed to protecting your privacy. This policy explains what personal data I collect when you visit carepathway.care, how I use it, who I share it with, and what rights you have over it. It applies to this website and any related subdomains, including resources.carepathway.care and podcast.carepathway.care.

I process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am

Care Pathway is operated by Bimpe Kuti-Matekenya. For the purposes of data protection law, I am the "data controller" of the personal information described in this policy.

2. What Information I Collect

I only collect information that you choose to give me. I do not use tracking cookies, analytics software, or advertising trackers on this site. Depending on how you use the site, I may collect:

Contact and enquiry forms

• Name (first and last)
• Email address
• Any message, subject, or details you choose to include

Event and membership sign-ups

• Name and email address
• Sector or professional role
• Preferred date/time for exploratory calls, where applicable
• Whether you've opted in to receive news and updates

Newsletter sign-up

• Name and email address

Resource store (resources.carepathway.care)

• Basic account/download information if you purchase or access a resource
• Payment details, if applicable, are processed securely by my payment provider — I do not store your card details myself

I do not knowingly collect any special category data (such as health information, race, or religious beliefs) unless you voluntarily share it with me, for example in a free-text message field.

3. How I Use Your Information

I use the information you provide to:

• Respond to enquiries, consultation requests, and exploratory call bookings
• Process membership sign-ups and manage the Empowering Excellence Network
• Send newsletters and updates, where you've opted in
• Provide access to resources you've downloaded or purchased
• Improve my services and understand what my audience finds useful

I rely on the following legal bases under UK GDPR: your consent (for example, when signing up to the newsletter), my legitimate interests (responding to enquiries, running my services), and, where relevant, the performance of a contract (for resource purchases).

4. Who I Share Your Information With

I use a small number of trusted third-party services to run this site. I do not sell your personal data to anyone.

• Formspree — processes submissions from my contact, membership, and booking forms and delivers them to me by email.
• Supabase — provides the backend for my resource store, storing resource content and related account data.
• Webflow — hosts this website.

These providers only receive the data necessary to perform their function and are bound by their own privacy and data protection terms. I encourage you to review their policies if you'd like more detail:

• Formspree Privacy Policy
• Supabase Privacy Policy
• Webflow Privacy Policy

5. Cookies

This site does not currently use analytics, advertising, or tracking cookies. Webflow, my hosting platform, may set a small number of strictly necessary cookies required for the site to function correctly (for example, to remember your cookie preferences). These do not track you across other websites.

If I introduce analytics or marketing tools in the future, I will update this policy and, where required by law, ask for your consent first.

6. How Long I Keep Your Information

I keep personal data only for as long as necessary to fulfil the purpose it was collected for — for example, to respond to your enquiry, maintain your newsletter subscription, or meet legal and accounting obligations. If you'd like your data deleted sooner, you can contact me at any time (see Section 9).

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data I hold about you
• Ask me to correct inaccurate data
• Ask me to delete your data ("the right to be forgotten")
• Object to or restrict how I use your data
• Withdraw consent at any time, for example by unsubscribing from my newsletter
• Request a copy of your data in a portable format
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled

To exercise any of these rights, contact me using the details in Section 9.

8. Children's Privacy

This site is not directed at children, and I do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided me with personal information, please contact me and I will delete it.

9. Contact Me

If you have any questions about this policy or how I handle your data, please get in touch:

10. Changes to This Policy

I may update this policy from time to time to reflect changes in my practices or for legal reasons. Any changes will be posted on this page with an updated "Last updated" date.