Privacy policy

1. Who we are

Capegold Care Ltd (“Capegold Care”, “we”, “us”) is the data controller for the personal information described in this policy.

• Registered company number: 15907401, D-U-N-S number 232428256 (registered in England and Wales)
• Registered office: 88 Sedgemoor Road, Bridgwater, Somerset TA6 5NS
• Information Commissioner's Office registration: ZC092848
• Contact for data protection questions: admin@capegoldcare.co.uk or Landline 01823 212 811, Mobile 07460 246 863, Text 07576 577 935

We are a healthcare staffing agency. We operate as an employment business when we supply temporary workers and as an employment agency when we introduce candidates for permanent roles.

2. Who this policy covers

This policy applies to:

• Candidates, people who apply to work through us
• Workers, people we place on assignments
• Referees, people named as a reference by a candidate
• Clients and their staff, people who contact us on behalf of a care provider
• Care Advisory enquirers and clients, people who contact us about our advisory service for care home buyers, investors and owners
• Website visitors

3. What we collect and why

3.1 Candidates and workers

The public application form on this website deliberately collects only the minimum: we do not ask for your date of birth, address history, health information, criminal record declarations, documents or bank details there. Those are collected later, through a secure route, and only if your application progresses.

3.2 Special category and criminal offence data

Health information and criminal record information receive extra protection under UK data protection law. We collect them only where we need to, we restrict who can see them, and we hold them under an appropriate policy document as required by the Data Protection Act 2018.

3.3 Clients and client contacts

When you contact us about staffing we collect your name, job role, organisation, work email, phone number, site postcode and the details of your staffing requirement. We use this to respond to your enquiry, supply staff, invoice for work done, and keep the records our terms of business and the law require. Our lawful basis is performance of a contract and our legitimate interests in operating the business.

Where you tell us we may contact you about our services in future, we record that preference and honour it. You can change it at any time by emailing admin@capegoldcare.co.uk. Every marketing message we send will also carry an unsubscribe route.

3.4 Referees

If a candidate names you as a referee, we hold your name, organisation and contact details so that we can request a reference. We contact referees only when the candidate has asked us to progress their application. Our lawful basis is legitimate interests: verifying the suitability of people who will work with adults at risk.

3.5 Website visitors

Information collected automatically when you browse this site is described in our cookie policy.

3.6 Care Advisory enquiries and engagements

When you send a Care Advisory enquiry we collect your name, business email, organisation, telephone number if you give it, the type of support you need and your message. We use this to reply to you and arrange an initial discussion. Our lawful basis is our legitimate interests in responding to enquiries, and taking steps at your request before entering a contract.

Please do not send us personal information about residents or staff of a care home with an enquiry.

If we go on to work together, we may review information about a care home that the home, its owner or the seller makes available. Where that includes personal information about residents or staff, we agree in writing beforehand what we will see and how it is protected, we look only at what the review needs, we do not copy identifiable information into our reports, and we return or securely delete it when the work ends.

4. Who we share information with

We share personal information only where there is a reason to. That includes:

• Client care providers, the information they need to accept a worker onto their premises and satisfy their own regulator, such as identity, role, registration status and compliance status
• Referees, enough to identify the candidate and the role
• The Disclosure and Barring Service and identity verification providers, for criminal record checks
• Professional regulators such as the Nursing and Midwifery Council and Social Work England, to verify registration and, where we have a duty to do so, to raise a concern
• HMRC, pension providers and our payroll and accounting providers, to pay people correctly
• Our IT and software providers, who process data on our instructions under a written contract
• Safeguarding authorities, the police and regulators, where we have a legal duty or a safeguarding reason to report
• Our insurers and professional advisers, where necessary

We do not sell personal information, and we do not share it for anyone else's marketing.

5. Where your information is held

Our systems are hosted in the United Kingdom and the European Economic Area. Where a provider processes data outside the UK, we make sure an appropriate safeguard is in place, such as UK adequacy regulations or the International Data Transfer Addendum.

6. How long we keep it

Our full retention schedule is available on request. Where we no longer need information, we delete it or anonymise it.

7. Your rights

Under UK data protection law you have the right to:

• Ask what personal information we hold about you, and get a copy of it
• Have inaccurate information corrected
• Ask us to delete information where we no longer have a reason to keep it
• Ask us to restrict how we use your information while a concern is resolved
• Object to processing based on our legitimate interests
• Ask for your information in a portable format where we rely on consent or contract
• Withdraw consent at any time, where we rely on consent, for example, consent to contact your referees

To exercise any of these rights, email admin@capegoldcare.co.uk or call Landline 01823 212 811, Mobile 07460 246 863, Text 07576 577 935. We respond within one month. There is no charge in normal circumstances, and we may ask you to confirm your identity first.

Some rights are limited where we have a legal duty to keep information, for example safeguarding records and payroll records. If that applies, we will explain why.

8. How we protect information

• Access is restricted to the people who need it for their role
• Accounts require multi-factor authentication
• Devices and stored data are encrypted
• Sensitive documents are collected through a secure route, never by unencrypted email where it can be avoided
• We keep a record of personal data breaches, and we report qualifying breaches to the ICO within 72 hours and to affected people where the risk is high

9. Automated decision-making

We do not make decisions about people by automated means. Software may organise, remind and route work, but every decision about a person's suitability, application, placement or engagement is made by a named human being.

10. Children

Our services are for adults. We do not knowingly collect information about anyone under 18 through this website.

11. Complaints

If you are unhappy with how we have handled your information, tell us first, email admin@capegoldcare.co.uk and we will look into it.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection:

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · 0303 123 1113 · ico.org.uk

12. Changes to this policy

We review this policy at least annually and whenever our processing changes. The version number and date at the top of this page show the current version. Material changes will be notified to candidates, workers and clients directly.