Data Protection at Pelp

Data protection is being considered throughout the design and development of Pelp.

As new features are developed, we consider what information is genuinely required, who needs access to it, how long it should be retained and what safeguards are appropriate.

Our aim is to collect and use only the information needed for a clear and legitimate purpose.

Pelp is being designed to support care environments where records may contain sensitive information about an Individual's health, wellbeing, behaviour, support needs and personal circumstances.

Information of this nature requires a higher level of protection.

Before Pelp processes live care information, appropriate technical, contractual and organisational safeguards will be put in place for the relevant services and workflows.

Not everyone using Pelp should see the same information.

The platform is being designed around roles and permissions so that access can reflect a person's responsibilities within a care organisation.

Different access levels may apply to Registered Managers, support workers, key workers, administrators and authorised family members.

Family access will be designed separately from internal professional records so that approved updates can be shared without unnecessarily exposing confidential care information.

Artificial intelligence is being developed as a support tool within Pelp.

It may help professionals organise information, structure assessment conversations, prepare draft documentation, summarise authorised records and highlight patterns that may need attention.

AI generated content should not automatically become an official care record.

Where Pelp prepares a care plan section, assessment summary, report or other professional content, it should remain clearly identified as draft content until an authorised professional has reviewed it.

Professional judgement remains with the people responsible for care.

Pelp is being designed to help managers recognise meaningful changes across authorised care records.

This may include changes in areas such as mood, appetite, sleep, behaviour, engagement and incident patterns.

These insights are intended to draw attention to information that may deserve professional review. They are not intended to be treated as clinical conclusions or facts about what will happen in the future.

Managers should be able to review the records and observations that contributed to an insight before deciding whether any action is required.

Pelp is developing tools that can help authorised professionals record assessment conversations and convert them into structured draft documentation.

Voice recording and transcription can involve sensitive personal information, so these workflows are being designed with clear consent, access, retention and review requirements in mind.

A generated assessment or care plan draft should always be checked by an authorised professional before becoming part of an official record.

We believe Pelp should only process information that is necessary for the purpose being carried out.

Collecting more information simply because technology allows it is not the approach we want to take.

Where possible, workflows will be designed to reduce unnecessary duplication and avoid retaining information that no longer serves a legitimate purpose.

Accountability is particularly important when dealing with care records.

Pelp is being designed to maintain an audit history for important actions within the platform.

Depending on the feature, this may include recording when information is created, viewed, edited, reviewed, approved, downloaded, shared, superseded or archived.

This helps organisations understand what happened to a record and who was responsible for an action.

Security is being considered throughout Pelp's development.

Our security approach includes areas such as authentication, user permissions, secure transmission of information, secure storage, activity logging, backups, separation of development environments and protection of system credentials.

We will only publish specific security standards, certifications or assurance statuses once they have been formally achieved or completed.

Information should not be kept indefinitely without a reason.

Pelp is being designed to support appropriate retention and deletion controls so that care organisations can manage records according to their legal responsibilities, contractual requirements and internal policies.

Retention periods may differ depending on the type of information being processed.

How responsibilities are divided between Pelp and a care organisation will depend on the service being provided and how information is being used.

In many future deployments, a care provider may decide why and how care information is used, while Pelp provides the technology used to process that information on the provider's behalf.

These responsibilities will be clearly documented in customer agreements and data processing arrangements before live care information is processed.

As Pelp develops features involving sensitive care information, voice recording and care intelligence, we will assess the privacy and data protection risks associated with those activities before relevant live processing begins.

Where required, this will include formal Data Protection Impact Assessments.

We want Pelp to remain clear about what technology should and should not do in care.

Our approach is simple.

Technology can help organise information and make important details easier to understand.

It should not remove professional accountability.

AI can prepare a draft.

A person reviews it.

Pelp can highlight a pattern.

A professional decides what it means.

The Individual should remain at the centre of the care being provided.

If you have questions about privacy, data protection or how Pelp uses personal information, please contact us.

Email
privacy@pelp.care

General enquiries
info@pelp.care

We will keep this page under review as Pelp develops and update it when our products, processing activities or regulatory responsibilities change.

Pelp Care Ltd

Company number 17331948

Registered in England and Wales