Policies
Privacy Notice
How CareRise Group collects, uses and protects personal information submitted through this website.
Status: Draft — not yet approved
Draft for owner review
This is a draft prepared alongside the website. It reflects how the site currently works but has not been approved by CareRise Group and is not yet an adopted policy. Highlighted items need business details or decisions. Legal advice is recommended before approval.
Who we are
This website is operated by [Owner to confirm: registered legal name] ([Owner to confirm: company number]), trading as CareRise Group. Registered office: [Owner to confirm: registered office address].
For this website, CareRise Group is the controller of the personal information you submit. ICO registration reference: [Owner to confirm: ICO data protection fee reference, or confirm whether exempt].
Privacy contact: [Owner to confirm: role or name responsible for data protection], info@carerrisegroup.com.
What this website collects
The website collects personal information only when you choose to submit one of our three enquiry forms:
| Form | Information collected |
|---|---|
| Staffing enquiry | Organisation, contact name, work email, telephone (optional), setting type, location, role, type of enquiry, dates, hours and a brief description of requirements. |
| Register your interest | Name, email, telephone (optional), town or postcode area, roles of interest, an experience summary and availability. |
| General enquiry | Name, email, enquiry type and your message. |
The forms do not ask for identity documents, DBS certificates, CVs, health information or other special category data, and the forms ask you not to include children’s names, medical records or sensitive personal information. If such information is included anyway, we will [Owner to confirm: describe how it will be handled, e.g. deleted and not acted on except where a safeguarding concern requires].
If you later go through recruitment checks as a candidate, we will give you a separate candidate privacy notice explaining the further information collected at that stage. [Owner to confirm: prepare candidate and client privacy notices]
How we use it and our lawful basis
- Responding to enquiries from organisations and members of the public — legitimate interests (responding to people who contact us).
- Considering candidates for suitable roles — taking steps at your request before entering into a contract, and legitimate interests in operating a recruitment service.
- Handling complaints and keeping records — legitimate interests and, where applicable, legal obligations.
[Owner to confirm: review lawful bases with a data protection adviser]
How the forms work and who processes your information
When you submit a form, it is checked on our web server and then sent as an email to our inbox, info@carerrisegroup.com. Nothing you enter is stored on the website itself. These service providers act on our instructions:
- Hostinger — hosts this website and our email, including the inbox that receives your enquiry. [Owner to confirm: confirm the data centre location for this hosting plan, and the international transfer safeguards in Hostinger’s data processing terms]
To protect the forms from misuse, the server keeps a one-way scrambled (hashed) version of your IP address and the time of your submission for a short period, so it can limit repeated submissions. It cannot be turned back into your IP address. Like most websites, our host also keeps standard server logs, which include IP addresses, to deliver and secure the site.
We do not sell personal information. We will only share a candidate’s details with a client organisation in connection with a specific role and as described in the candidate privacy notice.
How long we keep it
[Owner to confirm: retention periods — for example, how long enquiries that do not proceed and candidate registrations are kept before deletion]
Cookies and analytics
This website does not currently use cookies, analytics or advertising trackers. See our Cookies page.
Your rights
You have rights under UK data protection law, including the right to access your personal information, to have it corrected or erased, to restrict or object to its use, and to data portability where applicable. To make a request, contact us using the details above.
If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Security
The website is served over an encrypted (HTTPS) connection. Form submissions are checked on our server, limited to the fields shown above, and sent only to our own inbox. Access to that inbox is limited to people at CareRise Group who need it to respond. [Owner to confirm: confirm who has access to the inbox, and that two-step login is switched on for it]
Changes to this notice
We will update this notice when our practices change and show the date it was last updated at the top of the page.