Privacy & Cookie Policy

Giusto Care Recruitment Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read it carefully.

1. Who we are

Giusto Care Recruitment Ltd is a nurse-led healthcare staffing agency based in Northampton, Northamptonshire. We are the data controller responsible for your personal data. We are registered with the Information Commissioner's Office (ICO).

2. What personal data we collect

Depending on whether you are a care worker, a client, or a website visitor, we may collect:

If you are a care worker

• Identity and contact details (name, address, date of birth, phone, email)
• National Insurance number and right-to-work documentation
• DBS certificate details and disclosure information
• NMC registration (for nurses) and training certificates
• Employment history and references
• Bank details (for payroll only)
• Health information relevant to your role (special category data)

If you are a client

• Organisation name, address and CQC registration number
• Contact names, phone numbers and email addresses
• Shift requirements and placement records

If you visit our website

• Information you submit via contact or enquiry forms
• Limited technical data via essential cookies (see section 8)

3. How we use your data

We use your personal data to:

• Assess your suitability for care work and introduce you to clients
• Match suitable workers to client shift requirements
• Carry out vetting (DBS, references, right-to-work, training checks)
• Process timesheets, invoices and weekly payments
• Meet our legal, regulatory and safeguarding obligations
• Respond to your enquiries and provide customer support

4. Our legal basis for processing

We rely on the following lawful bases under UK GDPR: contract (to provide our staffing service), legal obligation (safeguarding, employment and tax law), legitimate interests (running and improving our agency), and consent (for marketing and certain optional cookies). For special category data such as health and DBS information, we rely on the "employment, social security and social protection" and "safeguarding" conditions.

5. Who we share your data with

We only share your data where necessary:

• Clients — we share relevant worker details (including DBS status and training) with care homes and organisations for the purpose of placements
• Regulatory bodies — the DBS, NMC, CQC or local safeguarding authorities where required by law
• Service providers — payroll, umbrella companies and IT providers who process data on our behalf under contract
• HMRC and authorities — where legally required

We never sell your personal data to third parties.

6. How long we keep your data

We keep worker and client records only as long as necessary for the purposes described, and to meet legal and regulatory requirements. Vetting and placement records are typically retained for a defined period after our relationship ends, in line with the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and other applicable law. After this, data is securely deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (where no legal obligation requires us to keep it)
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (where we rely on consent)

To exercise any of these rights, contact us using the details in section 10.

8. Cookies

Cookies are small text files stored on your device. We use a minimal, privacy-friendly approach:

• Essential cookies — required for the website and portal to function (for example, remembering your cookie choice and keeping you logged in). These are always on.
• Analytics cookies (optional) — if enabled, these help us understand how visitors use the site so we can improve it. We only set these with your consent.

You can accept or decline optional cookies using our cookie banner, and you can change your choice at any time by clearing your browser data. You can also control cookies through your browser settings.

9. How we keep your data secure

We take appropriate technical and organisational measures to protect your data, including secure storage, restricted access, and encryption where appropriate. Documents you upload through our portal are stored securely and only accessed by authorised personnel for legitimate purposes.

10. Contact us & complaints

If you have any questions about this policy or wish to exercise your rights, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling their helpline on 0303 123 1113.