DATA PRIVACY & SECURITY

Privacy Policy

How Tendercare GB Ltd collects, uses, protects, and respects your personal data in full compliance with the UK GDPR and the Data Protection Act 2018.

UK GDPR Aligned

Compliant with UK Data Protection Act 2018

Secure & Encrypted

Strict access controls & data encryption

Individual Rights

Full access, rectification, & erasure rights

Lawful Grounds

Clear legal bases for healthcare processing

Commitment to Protecting Your Privacy

1. Introduction & Overview

Tendercare GB Ltd ("we", "our", or "us") is dedicated to protecting and respecting your personal privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what personal information we collect, why we collect it, how it is used and protected, and your statutory rights regarding your personal data when using our recruitment services, care placement services, or our website.

Who is Responsible for Your Data

2. Data Controller & Contact Information

Tendercare GB Ltd is the designated Data Controller responsible for your personal data. If you have any inquiries regarding this policy or wish to exercise your legal data rights, please contact our Data Protection lead:

  • Company: Tendercare GB Ltd
  • Registered Address: 17 Harleston Close, Leicester, Leicestershire, LE5 2JF, United Kingdom
  • Email: info@tendercaregb.com
  • Telephone: 07878559935
Categories of Personal Data Processed

3. Information We Collect

We may collect, use, store, and transfer different kinds of personal information depending on your relationship with us:

  • Identity Data: Full name, date of birth, gender, nationality, national identity or passport details, and immigration/right-to-work documents.
  • Contact Data: Home address, email address, telephone numbers, and emergency contact details.
  • Professional & Employment Data: Curriculum Vitae (CV), employment history, education and training certificates, references, professional registrations (e.g. NMC), and safeguarding records (enhanced DBS disclosures).
  • Technical & Usage Data: IP address, browser type, operating system, and interaction logs when using our web portal.
Lawful Grounds for Processing

4. How We Use Your Data & Legal Bases

Under UK data protection law, we only process personal information when we have a valid legal basis to do so:

  • Contractual Performance: To process job applications, assess candidate suitability, coordinate interviews, and manage care placements and staffing contracts.
  • Legal & Regulatory Compliance: To verify right-to-work in the UK, conduct statutory DBS checks, maintain healthcare employment records, and comply with CQC and HMRC regulations.
  • Legitimate Interests: To improve our service offerings, ensure security of our website, and maintain effective communication with clients and candidates.
  • Explicit Consent: Where required for specific optional communications or special category health monitoring questionnaires.
How We Safeguard Your Information

5. Data Security & Storage

We have put in place robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorization.

Access to personal data is restricted to authorized staff, recruiters, and managers who have an authenticated business need to know. All sensitive files and communications are handled under secure, encrypted protocols.

How Long We Keep Your Data

6. Data Retention Period

We retain personal information only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying any legal, regulatory, tax, accounting, or reporting requirements.

For unsuccessful job applicants, candidate application records and submitted documentation are retained in accordance with UK statutory guidance (typically 6 to 12 months) unless consent is provided for longer talent-pool consideration. For appointed staff, records are maintained during tenure and for statutory periods following disengagement.

Statutory Rights Regarding Your Personal Data

7. Your Legal Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your personal data where there is no compelling legal reason for its continued processing.
  • Right to Restrict Processing: Request suspension of processing under specific circumstances.
  • Right to Data Portability: Request transfer of your electronic data to yourself or a third party.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Amendments to this Privacy Notice

8. Policy Updates & Inquiries

We regularly review and update this Privacy Policy to reflect changes in our operational procedures and statutory legal requirements. Any modifications will be posted to this page with an updated revision date.

If you have any questions or wish to submit a data rights request, please email us directly at info@tendercaregb.com.

Exercising Your Statutory Rights

You have the right to request access, rectification, or erasure of your personal data at any time without fee. Subject Access Requests (SARs) are processed within one calendar month in accordance with Information Commissioner's Office guidelines.