Privacy Policy

Last updated: September 2026. We may update this policy from time to time. The version on this page is the current one.

1. Who we are

Elderaid Care Ltd is a healthcare staffing agency supplying temporary care staff to care providers in Norfolk and Suffolk. For the personal data described in this policy, Elderaid Care Ltd is the data controller.

Company	Elderaid Care Ltd
Registered in	England and Wales, company number 17033369
Registered office	23 Lichfield Road, Great Yarmouth, Norfolk, NR31 0EQ
Email	info@elderaidcare.co.uk
Telephone	07771 915115
ICO registration	Registered with the Information Commissioner's Office, reference ZC229692 (registered 24 August 2026)

We have not appointed a Data Protection Officer, as we are not required to.

2. What personal data we collect

If you are a care provider contacting us

• Your name and the name of your service
• Your email address and telephone number
• Details of the shifts or staffing you are enquiring about
• Any other information you choose to include in your message

If you are a care worker registering with us

At the point of registering through this website, we collect only:

• Your name, email address and mobile number
• The town you live in
• The role you are applying for and your level of care experience
• Whether you hold a current enhanced DBS certificate, and whether you drive
• Your general availability

Do not send documents, identity papers or DBS certificate numbers through the website form. If we take your registration further, we will contact you separately and explain how to provide those securely. At that stage we may need to collect further information, including proof of identity, proof of right to work in the UK, references, training records and DBS details.

Automatically collected

Our website is a set of static pages. We do not run analytics, advertising or tracking scripts on it. Our hosting provider may keep standard server logs, such as IP addresses and browser type, for security and operational purposes.

3. Why we use it, and our lawful basis

What we do	Lawful basis under UK GDPR
Respond to a staffing enquiry from a care provider	Legitimate interests — replying to a business enquiry we were asked to answer
Contact you about your registration as a care worker	Consent, given when you ticked the box on the registration form
Assess your suitability and match you to shifts	Legitimate interests, and steps taken at your request before entering into a contract
Carry out pre-placement checks (identity, right to work, references)	Legal obligation, and legitimate interests in safe recruitment
Manage bookings, timesheets and invoicing	Performance of a contract
Keep records required by law	Legal obligation

Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect anything we did before you withdrew it.

4. Criminal records and health information

To place staff in adult social care settings we may need to process:

• Criminal offence data — the outcome of an enhanced DBS check. We process this under Article 10 of the UK GDPR and Schedule 1 of the Data Protection Act 2018, for the purpose of safeguarding vulnerable adults and preventing unlawful acts.
• Health information — where a client service or the law requires it, for example fitness for a role or occupational health requirements. We process this under Article 9(2)(b) and (h) of the UK GDPR.

We collect this only where it is necessary for the placement, and only after we have contacted you directly. It is never collected through the website.

5. Who we share it with

We do not sell personal data, and we do not share it for marketing purposes. We may share it with:

• Client care providers — where you are a care worker being put forward for a shift, the service you are placed in will receive the information they need to accept you on shift, which may include your name, role and confirmation that your compliance checks are complete.
• Referees and previous employers — to obtain the references required before placement.
• The Disclosure and Barring Service and any umbrella body used to process a DBS check.
• Our service providers — for example the company that hosts this website and the service that delivers our website form submissions to us. They act on our instructions only.
• Our accountant, insurers or professional advisers, where needed.
• Regulators, law enforcement or other authorities, where we are required to by law or where it is necessary to protect someone from harm.

We do not routinely transfer personal data outside the UK. Some of our service providers may store data outside the UK; where that happens, we rely on the safeguards those providers have in place.

6. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires.

• Enquiries that do not lead to anything — kept for a limited period and then deleted.
• Registrations that do not lead to placement — kept while there is a realistic prospect of matching you to work, then deleted.
• Placed workers and client records — kept for as long as the working relationship continues, and afterwards for the periods required by employment, tax and safeguarding law.

If you ask us to delete your details and we have no legal reason to keep them, we will.

7. How we protect it

We take reasonable steps to keep personal data secure, including limiting access to those who need it, using password-protected accounts and devices, and asking for documents to be sent to us through a route we have agreed with you rather than through this website.

No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to risk your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where required, and tell you where the law requires us to.

8. Your rights

Under UK data protection law you have the right to:

• Ask what personal data we hold about you, and get a copy of it
• Have inaccurate data corrected
• Ask us to delete data where there is no good reason for us to keep it
• Object to, or ask us to restrict, our use of your data
• Ask us to transfer your data to another organisation, in certain cases
• Withdraw consent, where we relied on consent

To exercise any of these, email info@elderaidcare.co.uk. We will respond within one month. There is no charge. We may ask you to confirm your identity first, so that we do not disclose your information to somebody else.

9. Cookies and the map

This website does not set cookies of its own, and it does not use analytics or advertising trackers.

Our contact and registration pages include a map of the area we cover, provided by Google Maps. Nothing is loaded from Google unless you click "View coverage map". Until you do, no request is made to Google and no Google cookies are set. If you do click it, Google may set cookies and receive your IP address, under Google's own privacy policy. You never have to load the map to use this site.

10. Complaints

If you are unhappy with how we have handled your personal data, please tell us first — most things are resolved quickly. You also have the right to complain to the UK regulator:

Information Commissioner's Office	Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline 0303 123 1113 ico.org.uk

11. How to contact us

For anything in this policy, including requests about your data:

Elderaid Care Ltd
23 Lichfield Road, Great Yarmouth, Norfolk, NR31 0EQ
Email info@elderaidcare.co.uk
Telephone 07771 915115