The Care500
Privacy notice
Last updated: 22 October 2026
This notice explains what personal data The Care 500 handles, why, and what you can do about it. It is written to be read, not to be survived.
We are: Yoshi Itoku, trading as The Care 500, a sole trader at 5 Brayford Square, London E1 0SG. Contact: yoshi@thecare500.co.uk
We are the data controller for the information described below.
What we hold, and why
Business contact details for suppliers
We list companies that sell goods and services to care operators in England. For each we hold the company name, a general business email address (info@, sales@ and similar), a website, and which published directory we found them in.
Where it came from. Not from you. We compiled it from published trade sources: exhibitor directories for the Care Show Birmingham and Care Show London, the Care England supporter list, the National Association of Care Catering partner list, and the National Care Forum partner list. We tell you this because, where data is collected from somewhere other than the person it concerns, you are entitled to know where it came from.
Our lawful basis is legitimate interests: letting a business know it has been listed in a trade directory relevant to its own market, so it can correct or remove the entry. We deliberately use general company addresses rather than named individuals, which keeps this to business information rather than information about you personally.
You can object at any time. Reply to any email from us, or write to the address above, and we will remove you the same working day. We do not require a reason.
People who contact us
If you email us we keep the correspondence so we can answer you and keep a record of what was agreed. Lawful basis: legitimate interests, or performance of a contract if you are a customer.
Customers who bid
If you pay to hold a position we hold your company name, billing contact, the amount and dates of your bids, and your payment history. Lawful basis: performance of our contract with you, and legal obligation for the tax records we are required to keep.
We never see or store your card details. Payments are taken by Stripe, who are a separate controller for them. Card numbers never reach our systems at any point, and there is no field in our database that could hold one. We see only that a payment succeeded, for how much, and from which company.
Visitors to the website
We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you. It does not track you between sites. We cannot identify individual visitors from it.
We set no cookies, which is why you have not been asked to accept any.
Information about care homes and operators
The directory itself is built from public records: the Care Quality Commission register and Companies House, both published under the Open Government Licence. Those are records about organisations and regulated services. We deliberately do not publish the names of registered managers or nominated individuals, even though CQC publishes them, because those are identifiable people who have not chosen to appear here.
Who we share it with
Only the suppliers we need to run the service:
| Who | What for | Where |
|---|---|---|
| Stripe | Taking payments | US / EU, under their own safeguards |
| Fastmail | Our email | US / EU |
| Cloudflare | Hosting and analytics | Global network |
We do not sell data, share it for anyone else's marketing, or pass it to data brokers.
How long we keep it
- Supplier contact details: while the directory is maintained. If you ask to be removed we delete the entry and keep only a minimal record that you asked, so we do not add you again by mistake.
- Correspondence: up to two years.
- Customer and payment records: six years after the end of the relevant tax year, because HMRC requires it.
- Analytics: aggregate counts only, with no personal data to retain.
Your rights
You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or give you a copy in a portable form. You can object to our use of legitimate interests, and for anything marketing-related we will always stop.
Email yoshi@thecare500.co.uk. We reply within one month, usually the same day.
If you are unhappy with how we have handled this, you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. We would rather you told us first, but it is your right either way.
Changes
If we change this notice we will update the date at the top. If a change materially affects you we will tell the people it affects.