Privacy Policy

What we collect

We only collect what you type into one of the three forms on this website. We do not use tracking cookies, advertising pixels or analytics, and we do not build a profile of your browsing.

If you register for work, we collect your name, email address, phone number, the role you are interested in, the area you can travel to, and your CV. All of these are required to register — we need a phone number because a consultant will call you, and a CV so we can match you to suitable roles. If you would rather not upload a CV, contact us and we will take your details another way.

If you submit a staffing requirement, we collect your name, organisation, email address, phone number, the role you need covered and the details of your enquiry. If you use the contact form, we collect your name, company, email address, phone number and your message.

We do not ask for special category data — such as health information, or details of a criminal record — anywhere on this website. Where checks of that kind are needed before a placement, we collect them separately, and we will explain why at that point.

Why we use it, and our legal basis

We use your information to reply to your enquiry, to match you to roles or to find you staff, and to contact you about opportunities you have asked to hear about.

Our legal basis for handling registration and enquiry details is [to be confirmed at legal review — likely consent for the initial enquiry, and legitimate interests for the recruitment activity that follows]. Where we rely on consent, you can withdraw it at any time by contacting us, and we will stop using your details and delete them on request.

We do not use your information to make automated decisions about you. Every shortlisting decision is made by a person.

Where your information is stored

We are a small agency and we do not run our own database. When you submit a form, your details are sent to our email inbox, and a copy of the information you entered is written to a private spreadsheet that only our staff can open.

If you upload a CV, it is stored in two places: attached to the email we receive, and saved to a private folder in our cloud storage. The spreadsheet holds a link to that file rather than the file itself.

Our email, spreadsheet and file storage are all provided by Google Workspace. Access is limited to Aspire UK Care staff who need it to do their job, and to the automated account this website uses to write new entries. We do not publish, index or otherwise make your CV publicly accessible.

Who we share it with

We do not sell your data, and we do not share it for marketing.

We share your CV and details with a care provider only where you have agreed to be put forward for a specific role. We will tell you who we are approaching before we do it.

Google acts as a processor on our behalf, because our email and file storage sit on their systems. Our website hosting provider handles your submission briefly as it passes through, but does not retain a copy. We may also disclose information where the law requires it.

Where your data is held

Our provider stores and processes data in data centres that may be outside the United Kingdom. Where information is transferred outside the UK, it is protected by the safeguards those providers put in place, such as the UK International Data Transfer Addendum to the European Commission's standard contractual clauses.

[The specific storage region and transfer mechanism to be confirmed at legal review.]

How long we keep it

We keep registration records and CVs for [retention period to be confirmed — commonly 12 to 24 months from your last contact with us for recruitment records], after which we delete them unless you have asked us to keep you on file.

General enquiries and staffing requirements are kept for [retention period to be confirmed] from the date of the enquiry.

Being straightforward about this: deletion is currently carried out manually rather than on an automatic schedule. If you ask us to remove your details, we will do it — and we would rather you asked than assumed.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have anything inaccurate corrected, to ask us to delete it, to restrict or object to how we use it, to ask for it in a portable format, and to withdraw your consent at any time.

There is no charge for any of this, and we will respond within one month. Asking us to delete your CV will not affect how we treat you if you approach us again later.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would appreciate the chance to put things right first.

Contact

To exercise any of these rights, or to ask a question about this policy, contact us on [phone number placeholder] or at hello@aspireukcare.co.uk. Our registered office address will be confirmed here.

Aspire UK Care Services is the data controller for the information described in this policy. [Company registration number, registered address and ICO registration number to be confirmed.]