1.INTRODUCTION

Crystal Care Solutions takes the protection of your personal data very seriously. We strictly adhere to the rules laid out by data protection laws and the General Data Protection Regulation (EU & UK GDPR).This notice explains how we collect and process your personal data through your use of this site and our business in general, including job enquiries. We have appointed a Data Protection Officer (DPO) to monitor our GDPR status.

2. LAWFUL BASIS OF PROCESSING
We only use your personal information when the law allows us to. Most commonly, we process data when:
You have given explicit consent.
It is necessary for the performance of a contract.
It is required to comply with a legal obligation.
It is necessary to protect your vital interests.
It serves a legitimate interest pursued by us or a third party.

3. WHAT INFORMATION WE COLLECT
We collect information when you send a CV, make an enquiry, or use our services. This includes:
Identity & Contact: Name, telephone number, email, and job title.
Demographics: Date of birth, gender, nationality, and postcode.
Official Docs: Passport details and National Insurance number.
Referral Data: Information relevant to young people or individuals.

3.1 USE OF COOKIES
Cookies are small text files placed on your device to help our website recognise your browser. Detailed cookie information is available via our website link.

4. DATA RETENTION
We retain personal data only for as long as needed for its intended purpose. All collected information has a defined retention period in line with our internal policy. When no longer required, data is destroyed securely and without undue delay.

5. SECURITY OF PERSONAL INFORMATION
We are committed to high standards of information security. We employ physical, electronic, and managerial procedures to prevent unauthorized access. All employees complete information security training and follow a strict Media Handling policy.

6. CHILDREN’S INFORMATION
Information regarding children is classed as highly sensitive. We apply extra security measures, including stringent Data Protection Impact Assessments (DPIA), which are reviewed periodically to stay ahead of security threats.

7. YOUR INDIVIDUAL RIGHTS
Under GDPR, you have the following principal rights:
Right to Access: Request a copy of the data we hold about you.
Right to Rectification: Modify or update your information.
Right to Erasure: Request that we "forget" or delete your data (subject to legal/contractual overrides).
Right to Restrict/Object: Stop the processing of your data or opt-out of marketing/newsletters.Right to Data Portability: Request that your data be transferred to another organisation.

8. THIRD PARTIES & DATA TRANSFERS
We disclose personal data to third parties only as reasonably necessary. Our primary partners under basis of lawful contract include:
WorkNest: https://worknest.com/privacy-notice/
Office 365: https://www.microsoft.com/en-gb/privacy/privacystatement
IONOS by 1and1:https://www.ionos.co.uk/terms-gtc/privacy-policy/
DropBox: https://www.dropbox.com/privacy
Computer Solutions: https://www.compsoluk.com/privacy-policy

9. RIGHT TO COMPLAIN
If you have concerns about how we handle your data, please contact our DPO first at dpo@crystalcaresolutions.co.uk. Your complaint will be acknowledged within 30 days.
Alternatively, you may contact the Information Commissioner’s Office (ICO):
Phone: 0303 123 1113
ICO Reference: Z7067342

10. ADDITIONAL INFORMATION
For more in-depth information or specific questions, please contact our Data Protection Officer.

11. AMENDMENTS
We keep this notice under regular review. It was last updated on 24/09/2025. We reserve the right to update this notice at any time and will provide a new notice for substantial updates.