Privacy Policy

1. Introduction

Al-Amal for Care Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

We may collect and process the following types of information:

Personal Information

• Personal identification information (name, email address, phone number, address)
• Date of birth and National Insurance number
• Emergency contact details
• Bank details for payment processing

Professional Information

• Professional qualifications and certifications (NMC, HCPC, GMC registration)
• Enhanced DBS check results and certificate numbers
• Professional indemnity insurance details
• Employment history and references
• Training records and CPD certificates
• Right to work documentation

Healthcare-Specific Data

• Occupational health assessments
• Immunization records and health screening results
• Fitness to practice declarations
• Incident reports and safeguarding concerns (where applicable)

Client Information

• Care requirements and service specifications
• Service user information (where relevant to staffing)
• Risk assessments and care plans
• Feedback and incident reports

Technical Information

• Website usage data and cookies
• IP addresses and device information
• Communication records (emails, calls)

3. How We Use Your Information

We use your information for the following purposes:

• To provide healthcare and childcare staffing services
• To process job applications and assess suitability for roles
• To conduct background checks and verify qualifications
• To communicate with clients and professionals
• To comply with legal and regulatory requirements
• To improve our services and website functionality

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To perform our staffing services
• Legitimate Interest: To operate our business effectively
• Legal Obligation: To comply with employment and healthcare regulations
• Consent: For marketing communications (where applicable)

5. Data Sharing

We may share your information with:

• Clients who require staffing services (with your consent)
• Professional bodies for verification purposes
• Legal and regulatory authorities when required
• Trusted service providers who assist in our operations

We do not sell or rent your personal information to third parties.

6. Your Rights

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Restriction: Request limitation of processing

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Professional Records: 7 years after employment ends (regulatory requirement)
• DBS Checks: Until superseded by new check or employment ends
• Training Records: Duration of employment plus 3 years
• Incident Reports: 10 years (safeguarding and clinical governance)
• Client Records: 7 years after service provision ends
• Financial Records: 7 years (HMRC requirement)
• Marketing Data: Until consent withdrawn or 3 years of inactivity

8a. Healthcare-Specific Legal Obligations

Regulatory Compliance

As a healthcare recruitment and staffing agency, we must comply with additional regulations:

• Professional Body Requirements: NMC, HCPC, GMC record keeping standards
• Safeguarding Obligations: Duty to report and maintain safeguarding records
• Employment Law: Right to work, equality, and health & safety compliance
• Recruitment Regulations: Fair hiring practices and professional standards

Special Category Data

We process special category personal data (health, criminal convictions) under specific legal conditions:

• Health Data: Processing necessary for healthcare provision and occupational health
• Criminal Conviction Data: DBS checks required for safeguarding purposes
• Explicit Consent: Obtained where required for specific processing activities
• Substantial Public Interest: Safeguarding vulnerable adults and children

9. Automated Decision Making and AI

We may use automated systems and artificial intelligence to enhance our services:

• CV Screening: AI-assisted analysis of qualifications and experience
• Matching Systems: Automated matching of professionals to client requirements
• Communication Processing: AI-powered email and inquiry management
• Risk Assessment: Automated flagging of compliance issues

Your Rights: You have the right to request human review of any automated decision that significantly affects you. All critical decisions (hiring, disciplinary actions) involve human oversight.

10. Cookies and Website Analytics

Our website uses cookies and analytics tools:

• Essential Cookies: Required for website functionality
• Analytics Cookies: To understand website usage and improve services
• Functional Cookies: To remember your preferences
• Marketing Cookies: For targeted advertising (with consent)

You can manage cookie preferences through your browser settings or our cookie banner.

11. International Data Transfers

We primarily process data within the UK/EEA. Any international transfers are conducted with appropriate safeguards including adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

12. Contact Us

For any privacy-related questions or to exercise your rights, please contact us at:

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached: ico.org.uk

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any material changes will be communicated through:

• Email notification to registered users
• Website banner notification
• Updated revision date on this page

Continued use of our services after changes indicates acceptance of the updated policy.