Privacy notice.
How the organization looks after the information of the people it supports, using CMpotamia.
Who is responsible
The organization decides what is recorded about the people it supports and is responsible for that information. CMpotamia is the system it uses to keep these records.
What is recorded
Contact details, household information, the help someone asks for, notes from conversations, appointments, services delivered, and documents a person chooses to share.
Why
To provide support, follow up on time, coordinate referrals the person agrees to, and report anonymous totals to funders. Information is never sold or used for advertising.
Who can see it
Only staff working on the person’s case and the managers who supervise them. Caseworkers see only their own clients. Every sign-in and change is recorded in an audit log.
How it is protected
Records are stored in Cloudflare data centres and encrypted in transit and at rest. Staff sign in with hashed passwords and can be required to use two-step sign-in. Documents are kept in private storage and can only be downloaded by signed-in staff.
How long it is kept
While support continues, and afterwards only as long as the law or funders require. Deleted documents are removed for good after 30 days.
Your choices
You can ask to see your record, have it corrected, or have it deleted, and you can withdraw consent for referrals at any time.
Contact
Questions about your information: {contact}
Ask any member of the organization’s staff.
Staff accounts
For security, CMpotamia keeps a record of staff sign-ins and changes. Failed sign-ins are logged with a shortened IP address.
Last updated 9 November 2026