CareStaff AI is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
CareStaff AI acts as a data controller for personal data collected through our platform. Our Data Protection Officer can be contacted at dpo@carestaff.ai.
We process personal data on the following lawful bases: consent (for marketing communications), contractual necessity (to provide our recruitment services), legal obligation (compliance with employment law and regulatory requirements), and legitimate interest (improving our platform and matching candidates with roles).
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Candidate profiles are retained for the duration of your engagement with the platform plus 6 years for legal compliance. Financial records are retained for 7 years.
You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. We respond to all requests within one month. To exercise your rights, contact dpo@carestaff.ai.
All personal data is stored and processed within the United Kingdom. We do not transfer personal data outside the UK without appropriate safeguards in place.
In the event of a personal data breach, we will notify the ICO within 72 hours where required and inform affected individuals without undue delay if the breach poses a high risk to their rights and freedoms.
CareStaff AI is registered with the Information Commissioner's Office (ICO). For further information or to raise a concern, you may contact the ICO at ico.org.uk.