This notice explains how we handle the personal data of candidates who register with us or apply for roles, in line with UK GDPR and the Data Protection Act 2018.
Who we are
Josake Care Recruitment Agency ("we", "us", "our") of 102–116 Windmill Road, Croydon, CR0 2XQ, United Kingdom is the data controller for the personal information described in this document. You can contact us at info@josakcareandrecruitment.co.uk or +44 7442 529153.
Information we collect from candidates
- Name, email address, phone number and current location
- Positions of interest, qualifications, care experience and availability
- Your CV and any additional information you choose to provide
- Later in the process, and only with your knowledge: references, right to work documents, identity documents, DBS check information and professional registration details (such as NMC PIN), as appropriate to the role
Why we use your information
- To assess your suitability for roles and match you with opportunities
- To contact you about your application and relevant vacancies
- To introduce you to prospective employers, with your agreement
- To carry out pre-employment checks required for health and social care roles
- To comply with legal obligations, including right to work and safeguarding requirements
Lawful bases
We rely on your consent when you submit your application, on steps taken at your request before entering into a contract, on our legitimate interests in providing recruitment services, and on legal obligations. Where we process criminal records information or health information, we do so only where permitted by law and as required for the role.
Who we share your data with
We share your details with prospective employers only in connection with roles you have agreed to be put forward for. We use trusted providers to host our systems, store CVs securely and send email notifications. We do not sell your data.
How long we keep it
We keep your record while you remain registered with us and for up to 24 months after our last contact, unless you ask us to delete it sooner or the law requires us to keep it longer.
How we keep your data secure
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls that restrict submissions and CVs to authorised staff, and secure storage. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.
Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to:
- be informed about how your personal data is used
- access the personal data we hold about you
- ask us to correct inaccurate or incomplete data
- ask us to erase your data in certain circumstances
- ask us to restrict or object to processing
- data portability, where applicable
- withdraw consent at any time, where we rely on consent
Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or 0303 123 1113.