In plain English
We take privacy seriously. VCS SOCIAL CARE LOGIC is operated by Vera Chilly Consultancy Services Limited, an ICO-registered data controller. We collect and process information only for operational, safeguarding, compliance and governance purposes.
Your data is stored securely, access is controlled by role, and every action is logged in an audit trail. We do not share information unless required by law or regulation.
The full detail of how we protect your information is set out below.
1. Introduction
This Privacy Policy explains how VCS SOCIAL CARE LOGIC collects, stores, processes and protects personal data.
2. Data we collect
- User account details
- Provider information
- Client and young person records
- Case notes, meetings and documents
- Compliance logs
- System usage data
Privacy Notice – Visitor Security Monitoring
We process two categories of visitor data:
1. Essential Security Monitoring (Legitimate Interest)
We collect limited technical data to protect our website from fraud, scraping, abuse, and security threats. This includes:
- page request patterns
- rapid-fire or automated behaviour
- suspicious referrer domains
- country-level IP region
- This data does not identify you and does not require cookie consent.
Visitor choices
We do not collect behavioural analytics or use analytics cookies.
We do not collect personal data such as your name, company, or exact location unless you voluntarily provide it through a form.
Legitimate Interest Justification – Security Monitoring
We process limited technical data under the lawful basis of Legitimate Interest (UK GDPR Article 6(1)(f)) to:
- protect our website from fraud and abuse
- detect scraping and automated attacks
- identify suspicious referrer domains
- prevent exploitation attempts
- maintain the integrity and security of our systems
Proportionality
This processing is strictly necessary for security purposes, does not identify individuals, and is proportionate to the risks being mitigated.
Essential security monitoring continues without analytics cookies.
3. Purpose of processing
We process data to:
- Deliver system functionality
- Support compliance workflows
- Provide secure storage
- Enable multi-agency collaboration
- Improve system performance
4. Legal basis
Processing is based on:
- Legitimate interest
- Contractual necessity
- Regulatory obligations
- Consent (for independent professionals)
5. Data sharing
We do not sell data. Data may be shared with:
- Multi-agency partners (when authorised)
- Regulatory bodies (when legally required)
- Technical infrastructure providers (secure hosting)
6. Data security
We use encryption, access controls, audit logs and secure hosting environments.
7. Data retention
Data is retained as long as required for regulatory, contractual or safeguarding purposes.
8. User rights
You may request:
- Access
- Correction
- Export
- Deletion (subject to regulatory constraints)
9. Changes to this policy
We may update this policy. Continued use constitutes acceptance.
