Feedback is personal data. How we approach lawful basis, data minimisation and people's rights. [Reviewed copy]
Read more ↓Where data lives, how it's encrypted, and how role-based access keeps it on a need-to-know basis. [Reviewed copy]
Read more ↓The services we rely on, and the data-processing agreement that governs how we work for you. [Reviewed copy]
Read more ↓How an evidenced feedback loop supports your existing duties, without claiming to discharge them. [Reviewed copy]
Read more ↓
The UK government-backed baseline for cyber security, independently assessed and renewed each year.
Shared by QR, link or kiosk, with anonymous options. Encrypted in transit [standards].
Stored encrypted in [hosting region]; themed and grouped with role-based access controls.
Actions and an audit trail your team, and only your team, can export for reviews. Retained per [retention summary].
Feedback about care is personal data, and often sensitive. Viewee is designed around data minimisation: collect what's needed to improve care, nothing more. [Reviewed copy, lawful basis, controller/processor roles, and how we support data-subject rights requests.]
Anonymous feedback stays anonymous, the product is built so that anonymity is a property of the data, not a promise. [Reviewed copy, technical detail.]
Key documents: [Privacy notice, see Privacy page] · [Data-processing summary] · [Records of processing]
Data is hosted in [hosting region] and encrypted in transit and at rest [encryption standards]. Access within Viewee follows least privilege, engineers don't browse customer data, and production access is logged. [Reviewed copy.]
Within your organisation, role-based access means a team member sees the actions they own, while a group director sees themes and progress, not raw personal detail they don't need. [Reviewed copy, role model.]
Specifics to publish: [hosting provider & region] · [encryption standards] · [backup & recovery summary]
We keep the list of services that touch your data short, and we publish it. Each sub-processor is bound by its own data-processing terms. [Reviewed copy.]
Our data-processing agreement sets out what we do on your behalf, and what happens to data if you leave, including export and deletion. [Reviewed copy.]
Links to publish: [Sub-processor list] · [DPA] · [Deletion & export policy]
CQC (or your national regulator) expects services to listen, act and learn. Viewee's loop, feedback, themes, owned actions, evidence, is built to make that expectation demonstrable in practice. [Reviewed copy, no compliance claims beyond what's true.]
Viewee supports your existing quality, safeguarding and statutory procedures, it does not replace them, and using Viewee does not itself constitute compliance with any framework.
Start free in minutes and see how feedback can become clearer action and visible progress across your service.
Essential ones make Viewee work; optional analytics cookies help us improve it. You choose. Cookie Policy.
