WURA H&C Limited
Privacy Policy
Last updated: 6 November 2026
Who we are
WURA H&C Limited (“WURA”, “we”, “us” or “our”) is a UK health and social care compliance technology company developing AI-assisted workforce compliance workflows and digital credential passports for UK care providers and care professionals.
This Policy applies to our website, our research surveys, and our communications with healthcare organisations and professionals. It explains what personal information we collect, use, share and otherwise process (as a data controller) about you.
This privacy notice has been written in line with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions regarding this policy or our data practices, please contact us at info@wurahc.co.uk.
What’s covered by this policy
This Policy applies to personal information we hold about you:
- Where you enquire about or express interest in WURA’s products, services, waitlists or partnership opportunities;
- Where you participate in our industry research surveys (such as our Scottish social care administrative burden survey hosted via Tally);
- Where you represent a care organisation, care home, agency or NHS trust interacting with WURA;
- Where you interact with us as an individual care professional, carer, nurse or student; and
- Where you visit our website or interact with our digital channels and communications.
What personal information we collect
| Category | Information Details |
|---|---|
| Registration, account & contact information | Name, job title, organisation name, work email address, telephone number, postal address, role type and communication preferences. |
| Survey & research responses | Information submitted through our research survey (e.g. via Tally), including feedback on administrative burden, compliance challenges, inspection readiness and staffing workflows. Please avoid submitting identifiable patient data or sensitive immigration documents. |
| Device & website usage information | IP address, browser type, operating system, pages visited, session duration, referring website, and information from cookies and similar technologies (where consented). |
| Records of communications | Emails, web enquiries, feedback, and notes of discussions or support interactions with our team. |
Sources of personal information we collect
We may collect personal information:
- Directly from you: when you complete our survey, sign up to our waitlist, email us, or contact us through our website.
- From your organisation or employer: when a colleague or organisation registers you or refers you as a point of contact for compliance discussions.
- From public registers & professional directories: such as the Care Inspectorate, Care Quality Commission (CQC), Scottish Social Services Council (SSSC), Nursing and Midwifery Council (NMC), or Companies House.
- From automated technologies: including server logs and cookies placed on your device in accordance with your consent choices.
How we use personal information and our lawful grounds
| Purpose | Lawful Basis (UK GDPR) | Categories of Data |
|---|---|---|
| Conducting industry research & survey analysis | Legitimate interests (improving compliance technology and understanding sector needs) or consent. | Survey responses, organisation role, professional feedback. |
| Product development & service delivery | Legitimate interests and steps to enter into / perform a contract. | Contact information, account details, feedback. |
| Communications & waitlist updates | Consent (where required) and legitimate interests in keeping interested parties informed. | Name, email address, role, communication preferences. |
| Website security, operation & analytics | Legitimate interests for strictly necessary operation; Consent for analytics cookies. | Device information, IP address, cookie identifiers. |
| Legal & regulatory compliance | Compliance with legal and regulatory obligations. | Records of communications, audit logs, compliance evidence. |
Sharing your personal information
We do not sell personal data. We only share information with trusted third parties in the following circumstances:
- Survey & Form Processors: We use Tally (tally.so) to securely host our research survey. Responses submitted are stored in secure European infrastructure and processed on WURA’s instructions.
- Service Providers & IT Infrastructure: Cloud hosting, communication tools, and security services operating under strict data protection agreements.
- Corporate Changes: In connection with any merger, sale of company assets, financing, or acquisition.
- Legal & Regulatory Authorities: Where required by law, court order, or regulatory bodies such as the Information Commissioner’s Office (ICO).
International transfers
Where your personal information is transferred or stored outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or the UK Addendum to EU Standard Contractual Clauses (SCCs), to protect your personal information to the same standard as under UK law.
Protecting your information & retention
We maintain rigorous administrative, technical and physical safeguards designed to protect personal information against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying legal, accounting or reporting requirements. Research survey responses are reviewed periodically and anonymised or securely deleted when no longer required.
Your rights to your personal information
Under the UK GDPR, you have the following rights regarding your personal information:
| Right | Description |
|---|---|
| Right to access | Request a copy of the personal information we hold about you. |
| Right to correction | Request correction of inaccurate or incomplete information. |
| Right to erasure | Request deletion of your personal data where there is no compelling reason for its continued processing. |
| Right to restrict processing | Request the suspension of processing your personal information in certain situations. |
| Right to object | Object to processing based on legitimate interests or direct marketing. |
| Right to withdraw consent | Withdraw consent at any time where processing is based on consent (including cookie preferences). |
To exercise any of these rights, email us at info@wurahc.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
How to contact us
For questions about this policy, your privacy rights, or our data handling practices, please write to us at:
WURA H&C Limited
Data Protection & Governance
Email: info@wurahc.co.uk
United Kingdom