Privacy Policy

We collect account and contact details; candidate profile and CV information; employment history, qualifications, availability, location preferences, work-status and DBS-status declarations; organisation and verification details; jobs, applications, messages, saved items and reports. We also receive technical and security information such as IP address, device information and sign-in activity.

Do not place unnecessary sensitive identifiers in a profile or CV, including passport or bank details, National Insurance numbers, full dates of birth, or DBS certificate numbers. Payment card details are collected by Stripe rather than stored directly by SkilledCarer. We may receive billing identifiers, subscription status and transaction records from Stripe.

A candidate profile saved as a draft is not included in employer search. When a candidate selects Publish profile, their name, email address, phone number, town or city, profile information and uploaded CV become available to active employers that SkilledCarer has manually marked as verified. A verified employer may contact the candidate directly and may download the CV for genuine recruitment.

Published candidate information is not intended to be public or indexed by search engines, and unverified employers are denied access. Candidates can remove their information from new employer searches by changing their profile from active status or asking us to close or delete the account. This cannot recall a CV already downloaded by an employer.

We use information to register and secure accounts, provide candidate search and direct recruitment, process applications and messages, verify employers, administer subscriptions, investigate reports, prevent fraud and misuse, improve the service, and meet legal obligations. The main lawful bases are performance of our contract with you; our legitimate interests and those of candidates and employers in operating a secure, effective recruitment service; and legal obligation where applicable. We rely on consent only where we specifically ask for it, and it can then be withdrawn.

Candidates publish profiles expressly to be found and contacted about work, while verified employers search for suitable workers. Providing limited contact and CV access is necessary for that direct-recruitment purpose and is within the reasonable expectations created by the publishing notice. We balance this against candidate privacy by keeping drafts private, blocking public and unverified access, manually controlling employer verification, limiting use by contract, using private CV storage, and allowing candidates to withdraw an active profile or object. We may restrict the processing where a candidate's rights override these interests.

Published candidate information is disclosed to authorised users of manually verified employer organisations. Those organisations normally become separate controllers of copies they use for their own recruitment and must provide any information required by data-protection law, keep the data secure and delete it when no longer needed.

We also use providers that support hosting, authentication, databases, email, bot protection and payments, currently including Supabase, Vercel, Resend, hCaptcha, Cloudflare and Stripe where the relevant feature is used. They process information under their service terms and safeguards. We may disclose information where required by law or reasonably necessary to protect people and the platform.

We use Vercel Web Analytics to understand aggregated visits, popular pages, referral sources, approximate country, device and browser information. It does not use cookies and is not configured to receive names, email addresses, CV information or message content. We use these aggregated insights for our legitimate interest in understanding and improving the service.

Some service providers may process information outside the UK. Where required, we use providers that offer recognised transfer safeguards or another lawful transfer mechanism.

We keep profile and account information while the service is active and afterwards only for as long as reasonably necessary for security, complaints, disputes, financial records and legal obligations. We remove inactive candidate profiles from new searches. The exact period depends on the record's purpose, sensitivity, legal requirements and whether a dispute is ongoing. Employers may retain CV copies under their own documented recruitment-retention rules. You can ask us to delete your information, subject to lawful exceptions.

Depending on the circumstances, you may have rights to be informed; access and correct your information; ask for deletion or restriction; receive a portable copy; and object to processing based on legitimate interests. You may also withdraw consent where consent is the basis used. We will normally respond within one month and may need to verify your identity.

To exercise a right, email admin@skilledcarer.co.uk. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

You have the right to object to our use of your information where we rely on legitimate interests. You can immediately stop new employer search access by saving your candidate profile as a draft, and you can email admin@skilledcarer.co.uk to object or ask us to restrict processing. We will stop unless we demonstrate compelling legitimate grounds or need the information for legal claims.

We use role-based access, private document storage, employer verification and other technical and organisational safeguards intended to protect information. Employers must limit access to authorised recruitment staff. No online service can guarantee absolute security. We may update this policy as the service or legal requirements change and will publish the revised date here.