Privacy notice

Version 1.0 · Last updated: 10 September 2026

1. Who is responsible

The controller is Endenex Limited (trading as Corryk), a company registered in England and Wales under number 17061688, 6th Floor, 37 Lombard Street, London EC3V 9BQ. It is subject to the UK GDPR and the Data Protection Act 2018.

Data protection contact: privacy@corryk.com

2. Browsing this site

This site sets no cookies and uses no third-party analytics, advertising pixels or trackers. Typefaces are self-hosted: loading a page sends nothing to any font service. Map tiles are fetched from OpenFreeMap, which receives the tile requests your browser makes and nothing else. Our host processes the usual technical logs (IP address, browser, page requested, time) to serve the site and protect it from abuse — lawful basis: legitimate interests (Article 6(1)(f)).

3. Opening the map on your area

When you arrive at the home page, we look up the approximate location of your IP address — to the nearest town — so the map can open on your own area rather than on the whole country. The lookup happens on our server against a table we hold ourselves; nothing is sent to any third party, and the result is used for that one page and not stored. The table is DB-IP’s freely licensed City Lite (IP Geolocation by DB-IP, CC BY 4.0), cut down to England and Wales. Lawful basis: legitimate interests.

4. Counting visits

We count daily visitors without cookies or trackers. A short-lived technical key is derived each day from your IP address and browser string using a secret and the date; it cannot be reversed, it is never stored raw, and it cannot be linked from one day to the next. It is used only to avoid counting the same visitor twice in a day, and then discarded. Only aggregate totals are kept. Because nothing is stored on or read from your device, regulation 6 of PECR does not apply; the processing rests on legitimate interests.

5. When you claim a care home

The claim form collects your email address, optionally a phone number and your role, and the trading and property figures you choose to declare — occupancy, fee rates, payer mix, revenue, EBITDA, rent, lease term. These are used to:

• verify that you own or represent the care home;
• build the refined figure shown on your home’s page;
• feed the professional information services of Corryk, the publisher, within which declared figures may be presented to its professional clients under contract.

Your declared figures are never displayed on C’Estimate — only the refined figure is. They are not sold to data brokers and are not shared with advertisers. The optional question about your intentions is stored with the claim. Lawful basis: steps taken at your request (Article 6(1)(b)) and legitimate interests.

6. The data on care home pages

C’Estimate publishes information about care homes. Most of it is information about businesses and buildings, not people. Some of it is personal data: a home operated by a sole proprietor or partnership, a named registered proprietor of a title, a company officer or a person with significant control. That data comes exclusively from public and official sources: the CQC and CIW registers, HM Land Registry’s published Commercial and Corporate Ownership and Overseas Companies Ownership datasets, Companies House, and published national statistics. Where a freehold is held by a private individual, HM Land Registry does not publish it in bulk and neither do we: the page says only that no company owns the title. No data is bought from brokers and no profiles are gathered from social media.

Lawful basis: legitimate interests (Article 6(1)(f)) — providing a reliable reading of the value of care home property from information the law makes public precisely to inform commercial life. A documented legitimate-interests assessment has been carried out. The figures shown are statistical estimates, labelled as such and never presented as fact. Under Article 14(5)(b), informing each person individually would involve a disproportionate effort; this notice is the public information measure that Article provides for. The full statement is available at Data Sourcing Statement.

7. Recipients and transfers

Data is processed by our hosting and database providers under Article 28 processing terms. Where a provider is established outside the United Kingdom, transfers are covered by the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Dataset information and, where applicable, figures declared in a claim may be presented under contract to the professional clients of Corryk’s information services. No personal data is sold to data brokers or shared with advertisers.

8. Retention

Technical logs: a few weeks. Claims and declared figures: for as long as needed to verify the claim and keep the refined figure current. Aggregate visit counts: indefinitely, as they identify no one.

9. Your rights

You have the rights of access, rectification, erasure, restriction and objection. If you or your business appears on a page and you dispute something or want the page removed, write to reception@corryk.com — every request is reviewed and acted on. For any other request about your data: privacy@corryk.com. You may also complain to the Information Commissioner’s Office (ico.org.uk).

10. Changes

This notice may be updated; the version and date appear at the top of the page.