Last updated: April 15, 2026
Entity: Tarquin Barnsby trading as AgencySoftware.io
ICO Registration: ZC136598 (Information Commissioner's Office)
Address: Little Waterham Farm, Highstreet R, Faversham, Kent, ME13 9EJ
Role: FosterFlow acts as the Data Controller for independent Carers. For users managed by a Fostering Agency, FosterFlow acts as a Data Processor on behalf of that Agency (the Controller).
Contact: tarquin@tarquinbarnsby.com
Under the UK General Data Protection Regulation (UK GDPR) Article 9, FosterFlow explicitly processes Special Category Data, specifically relating to the health, welfare, and social care of children in the fostering system. We treat all logged data with the absolute highest security constraints.
We process your data under the following UK GDPR bases:
FosterFlow administrators operate under a strict Zero-Access Protocol. We will NEVER access, read, or audit your encrypted or specialized care records unless you provide explicit, written consent via an active support ticket (e.g., to debug a specific missing log). You retain absolute sovereignty over your unshared data.
FosterFlow uses AI to transcribe and generate draft reports. We guarantee that ZERO Special Category Data processed by our platform is used by our AI providers (e.g., Google Gemini) to train, fine-tune, or improve their base foundational models. We use strict Enterprise-tier API agreements that enforce zero-data-retention for training purposes.
To provide our services, we use carefully vetted sub-processors. Whenever data is transferred outside the UK/EEA (such as to the United States), it is structurally protected by Standard Contractual Clauses (SCCs) or the UK Extension to the EU-US Data Privacy Framework.
FosterFlow respects the absolute privacy of your records. We will only release a standalone Carer's data under a formal statutory warrant, court order, or subpoena issued by law enforcement, the Local Authority Designated Officer (LADO), or Ofsted. We will NOT release data based on informal agency requests or civil disputes without the Carer's explicit consent.
We retain your data for as long as your account is active. If your account becomes inactive and your subscription lapses, your data will be permanently wiped (Cascading Deletion) after 90 days.
Agency Override Rule: If your FosterFlow account is managed or paid for by a Fostering Agency, they are the Data Controller. Because Agencies have a statutory duty to retain records (often for 75 years), you cannot unilaterally delete your account or records from the platform. You must contact your Agency directly to manage your data rights.
You have the right to:
For any privacy questions or to exercise your rights, email tarquin@tarquinbarnsby.com.