Introduction
HeartStone Care Ltd operates as a provider of employment services, facilitating work opportunities for clients and candidates. In this capacity, we process personal data, including sensitive information, as a data controller.
You may provide personal details directly to us, such as through applications or registration forms on our website, or we may collect them from other sources such as job boards or social media platforms. It is essential for us to have a legal basis for processing your personal data. Our use of your personal data is governed by the terms outlined in this privacy notice, specifically in relation to providing work-finding services and relevant role information.
This Privacy Notice is integral to HeartStone Care Ltd’s commitment to transparency and fairness in processing personal data. We adhere to the Data Protection Act 2018 and any subsequent data protection legislation that applies to our operations.
HeartStone Care Ltd is dedicated to safeguarding the privacy of personal data and ensuring compliance with applicable data protection regulations.
If you wish to contact us with regards to any aspect of our data protection policy, or to exercise your rights with regards to data protection, please contact us by info@heartstonecare.co.uk.
All data subjects have the following rights with regards to their personal data:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
What kind of personal data do we collect?
Candidate Data
To effectively match candidates with suitable employment opportunities, we collect necessary information such as name, age, contact details, education and employment history, emergency contacts, immigration status (where applicable and in accordance with legal requirements), health information, diversity details, and criminal convictions.
Client Data
In delivering our services, we require and utilise information about clients or individuals within client organisations.
Supplier Data
We gather contact details for relevant individuals within supplier organisations to facilitate communication. Specific processing details are available in our contractual clauses.
3rd Party Data
We also collect data pertaining to third parties, including emergency contacts and referees. For more detail on the types of personal data we collect, please click here.
Depending on the type of personal data and its processing grounds, failure to provide certain data may impact our ability to fulfil contractual obligations or, in extreme cases, continue providing services. For legal bases underpinning our data use and processing, please refer here.
How do we collect your personal data?
We collect data directly from data subjects via registration forms, email, CVs, and other forms of communication.
Additionally, data is obtained from third-party sources such as job portals, social networking sites, and referrals. Referee and emergency contact details are sourced directly from candidates.
For further insights into our personal data collection methods, please click here.
How do we use your personal data?
Candidate Data
Primary uses of candidate personal data include facilitating employment opportunities based on skills and career aspirations. In compliance with local laws and regulations, we may also employ this data for activities such as marketing, profiling, and diversity monitoring, subject to appropriate consent where required.
Client Data
Information about clients is predominantly used to ensure effective implementation of contractual obligations. This includes identifying suitable candidates or providing managed services. Data may also be utilised to foster client relationships in support of service provision.
Supplier Data
Supplier personal data is utilised to ensure contractual obligations are met and to comply with legal requirements.
Website Users
Data from website usage enhances user experience and informs our service enhancements for candidates and clients of HeartStone Care Ltd.
3rd Party Data
We utilise referee data to support candidate employment efforts by verifying details and qualifications. Referees may also be contacted regarding recruitment opportunities. Emergency contact details of candidates or staff are used in cases of accidents or emergencies affecting these individuals.
Who do we share your personal data with?
Candidate Data
We may share candidate personal data with various parties, including prospective employers to enhance employment prospects. Additionally, sharing may occur with group companies and associated third parties such as umbrella companies or managed service providers, when deemed beneficial for service delivery.
Client Data
Client data may be shared to ensure access to a suitable pool of candidates or to provide managed services. Our group companies and associated third parties, including service providers, may also receive client data to support these objectives.
Supplier Data
Supplier information may be shared with our group companies, associated third parties, and service providers to facilitate service provision and compliance.
Website Users
Information from website usage may be shared with providers of web analytics, marketing automation platforms, and social media services to enhance targeted advertising.
3rd Party Data
Third-party data may be shared with our group companies, associated third parties, and service providers to support recruitment activities and related services.
How do we protect your personal data?
Ensuring the security of personal information is a priority for us. We have implemented policies and procedures to safeguard data against unauthorised access and misuse.
How long do we keep your personal data for?
If meaningful contact with an individual (or relevant company) has not occurred within a two-year period, we may delete their personal data from our systems. Exceptions may apply if retention is necessary under legal or regulatory obligations, such as tax requirements or anticipated litigation.
How do we store and transfer your data internationally?
HeartStone Care Ltd operates globally, necessitating international data transfer and storage measures to maintain service standards.
What are cookies and how do we use them?
Cookies are small files stored on your computer or mobile device, widely used by websites to enhance user experience without causing harm. We utilise cookies to track user activity for traffic analysis on our websites.
To manage your cookie preferences, adjustments can typically be made within your browser settings.
