Introduction
MAAP Limited ("MAAP", "we", "us", "our") are a company registered in England and Wales. We are the Controller of the Personal Data we process, registered in the UK with the Information Commissioner's Office ("ICO").
This privacy notice explains what Personal Data we collect when you use our apps (Meal Manager and Activity Planner) and how we handle your data. Please read this carefully as it contains important information about your rights.
We update this privacy notice from time to time. When changes are made, we will update the date at the top of this document. Please review periodically for updates. If you have any questions, please contact us at dpo@happyday.care
Personal Data We Collect
When you use our apps, we collect:
- First name and last name
- Email address
- Care home name and location
- Job role / position
- Login activity (timestamps, IP addresses)
- Usage logs (which features accessed)
- Resident data: names, photos, likes, dislikes, and activity preferences
Cookies
Our apps use cookies to improve your experience. Cookies are small text files that store information about your usage and interactions.
We can store strictly necessary cookies without your consent. For all other cookies, we need your consent. You can control cookies through your browser settings.
For more information, please see our Cookies Policy.
Purposes and Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Deliver meal and activity planning services | Contract (Article 6(1)(b)) |
| Improve and maintain our apps | Legitimate Interest (Article 6(1)(f)) |
| Prevent fraud and ensure security | Legitimate Interest (Article 6(1)(f)) |
| Respond to enquiries and support requests | Legitimate Interest (Article 6(1)(f)) |
| Retain resident data for activity continuity and staff handover | Legitimate Interest (Article 6(1)(f)) |
Sharing Your Data
We use the following service providers to deliver our service:
- Supabase (database provider, France, EU) โ Data Processing Agreement available
- Netlify (hosting provider) โ for static assets only
Data is not transferred outside the UK/EU unless appropriate safeguards are in place.
How Long We Keep Your Data
Staff Account Data
Retention: 30 days after account termination or access revocation โ then automatic deletion.
Data deleted: Name, email, role, login activity, usage logs.
Why 30 days? Once your access is revoked, we have no purpose to retain your data. GDPR requires us to delete when the purpose is served.
Resident Data โ Living Resident
Retained while the resident is in your care home. You can delete individual resident profiles at any time.
Resident Data โ Moves to Another Care Home
Maximum 30 days after the resident leaves, then automatic deletion.
Resident Data โ Passes Away
Retained for 90 days from date of death (for safeguarding and CQC audits).
- 0Care home notifies us of resident's death
- 1โ90Profile accessible to staff for handover and family inquiries
- 90Automatic deletion notification sent to care home
- 97All resident data permanently deleted (no recovery possible)
How We Protect Your Data
- HTTPS encryption for data in transit
- Password encryption (bcrypt hashing)
- Row-Level Security (RLS) to restrict access
- Multi-factor authentication (MFA) for staff accounts
- Signed URLs for photo access (1-hour expiration)
- Access logging and audit trails
- Regular security reviews and updates
- Automatic deletion of expired staff and resident data
Your Data Protection Rights
Know how your data is collected and used.
Receive a copy of your personal data.
Have inaccurate data corrected.
Request deletion (in certain circumstances).
Restrict how we use your data.
Obtain your data in machine-readable format.
Object to how we process your data.
Withdraw consent at any time.
To exercise any of these rights, email dpo@happyday.care. We will respond within 30 days.
Contact our Data Protection Officer
Email: dpo@happyday.care
Address: MAAP Limited, Unit 5, 4 Winifred Place, London, England N12 8FE
To raise a complaint with the ICO: ico.org.uk/make-a-complaint ยท 0303 123 1113