Who We Are
GRACELIVING HEALTHCARE LTD, trading as GraceLiving Healthcare, is responsible for deciding how and why your personal information is used. For the purposes of UK data protection law, we are the data controller unless we expressly state otherwise.
Information We Collect
The personal information we collect depends on how you interact with us. It may include:
- Identity information, including your name, title and date of birth where relevant.
- Contact information, including your email address, telephone number, postal address and preferred contact method.
- Organisation and professional information, including your employer, job title, service requirements and business details.
- Recruitment information, including your CV, employment history, qualifications, training, references, availability and preferred roles.
- Right-to-work, identity verification and immigration-status information where required for recruitment.
- DBS, criminal-record or safeguarding information where relevant, lawful and necessary for a role.
- Health, disability or adjustment information where you provide it and where it is necessary to support recruitment, employment or legal obligations.
- Communications and correspondence, including messages sent through our forms, email, telephone or other channels.
- Technical information, including IP address, browser type, device information, website usage and cookie preferences.
How We Collect Information
We may collect information:
- Directly from you when you complete a contact or recruitment form, upload documents, email us, call us or communicate with us.
- From referees, recruitment platforms, professional bodies, background-check providers or previous employers.
- From healthcare organisations, clients or service partners where this is necessary for staffing or recruitment activity.
- Automatically through cookies, server logs and similar technologies when you use our website.
- From publicly available professional sources where lawful and relevant to recruitment or business development.
How We Use Personal Information
We may use personal information to:
- Respond to enquiries and communicate with you.
- Assess staffing, recruitment, advisory or support requirements.
- Review applications and determine suitability for available roles.
- Conduct recruitment checks, verify qualifications and obtain references.
- Match candidates with appropriate healthcare opportunities.
- Deliver, manage and improve our services.
- Maintain business, financial, compliance and operational records.
- Protect our website, systems, users and business from fraud, misuse or security threats.
- Comply with legal, regulatory, safeguarding and contractual obligations.
- Send service-related communications and, where permitted, relevant marketing communications.
Our Lawful Bases for Processing
We only use personal information where a lawful basis applies. Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to take steps at your request or to perform a contract with you.
Legal Obligation
Where we need to comply with employment, tax, safeguarding, immigration or other legal duties.
Legitimate Interests
Where processing is necessary for our legitimate business interests and your rights do not override them.
Consent
Where you have freely given clear consent and may withdraw it at any time.
Vital Interests
In limited circumstances where processing is necessary to protect someone’s life.
Where we process special category information, such as health information, we will also identify an appropriate additional condition under data protection law. Where criminal-offence information is processed, we will do so only where permitted by law.
Recruitment and Candidate Information
When you apply for work or register your interest in opportunities, we may use your information to manage the recruitment process, assess your experience and suitability, contact you about roles, verify information and carry out necessary pre-employment checks.
We may ask for documents such as a CV, identification, right-to-work evidence, qualification certificates, training records, DBS details and references. Please do not submit information that is not relevant to your application.
Where your application is unsuccessful, we may retain relevant recruitment information for a reasonable period to manage legal claims, answer questions about the recruitment process or, where you agree, consider you for future opportunities.
Providing information does not guarantee employment, engagement or placement. Recruitment decisions may depend on role availability, client requirements, verification checks and suitability.
International Transfers
Some service providers may store or process information outside the United Kingdom. Where this happens, we will take appropriate steps to protect the information, such as relying on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, tax, accounting, safeguarding and reporting requirements.
Retention periods may vary depending on the type of information, the nature of our relationship with you, legal requirements and whether the information may be needed to establish, exercise or defend legal claims.
Where information is no longer required, we will securely delete, anonymise or otherwise dispose of it.
How We Protect Information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or misuse.
Access is limited to people who need the information for legitimate business purposes. However, no internet transmission or storage system can be guaranteed to be completely secure.
Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- Be informed about how your information is used.
- Request access to your personal information.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Object to direct marketing at any time.
- Request transfer of certain information in a portable format.
- Withdraw consent where processing is based on consent.
- Ask for human intervention where a significant decision has been made solely by automated means, where applicable.
These rights are not absolute and may be subject to legal exemptions. We may need to verify your identity before responding.
To exercise a right, email info@gracelivinghealthcare.co.uk .
Concerns and Complaints
Please contact us first if you have concerns about how we use your information. We will try to resolve the matter promptly.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection matters.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices or legal obligations. The latest version will be published on this page with the updated date.
Contact Us
For privacy questions, requests or concerns, contact: