Version 1.0 · Effective 21 May 2026 · Operated by Salstead Ltd

Salstead Acceptable Use Policy

1. Purpose

This Acceptable Use Policy (“AUP”) sets out how the Salstead service may and may not be used. It applies to all users, whether end-users of a care home customer or workers in the Salstead staff bank. Breach of this AUP may result in suspension or termination of access.

2. You agree to use Salstead in a way that is

• Lawful and consistent with the rights of others.
• Honest, accurate and not misleading.
• Respectful of colleagues, residents, families and Salstead staff.
• Consistent with the standards expected of regulated health and social care.

3. You must not

• Share your login credentials or allow another person to use your account.
• Upload, store or transmit content that is unlawful, defamatory, harassing, discriminatory or obscene.
• Upload personal data without an appropriate lawful basis or beyond what is needed for the relevant business purpose.
• Misrepresent your identity, qualifications, regulatory status or right to work.
• Submit timesheets for hours not worked, or otherwise attempt to defraud customers, Salstead, HMRC or any other party.
• Disable, defeat or attempt to circumvent any security or access controls.
• Probe, scan or test the vulnerability of Salstead, except under an authorised penetration test or coordinated disclosure.
• Use Salstead to send unsolicited bulk communications or malware.
• Reverse engineer, decompile or copy the Salstead software (except to the extent permitted by law).
• Use Salstead in a way that imposes an unreasonable load on its infrastructure.

4. Worker conduct

Workers in the Salstead staff bank are PAYE employees and are expected to comply with all reasonable instructions from the assigned care home, the Salstead code of conduct and applicable regulatory standards (including CQC, NMC and Care Inspectorate standards as relevant).

5. Reporting concerns

If you suspect a breach of this AUP, a security incident, fraud or any safeguarding issue, please report it immediately to safeguarding@salstead.com. Reports are treated confidentially.

6. Consequences of breach

Salstead may at its discretion:

• Suspend access pending investigation.
• Restrict feature access.
• Terminate access.
• Refer matters to the regulator (CQC, ICO, NMC, HMRC) or to the police.
• Take legal action where appropriate.

7. Changes to this policy

Salstead may update this policy from time to time. The current version is published at /legal/acceptable-use and the effective date is shown above.