Last updated: June 2026 · abundance Grace Care Services Limited
Summary: We collect personal information only to match care professionals with care providers. We do not sell your data, we do not share it with advertisers, and we store it only as long as necessary. This policy explains everything in full.
abundance Grace Care Services Limited ("we", "us", "our") is a specialist recruitment and staffing consultancy incorporated and registered in England and Wales. We operate the website abundancegracecare.co.uk and the services available through it.
We are the data controller for all personal information collected through this website. This means we determine how and why your data is processed.
Registered address: England, United Kingdom
Contact email: hello@abundancegracecare.com
ICO registration number: [To be inserted on ICO registration]
When you submit an application to join our network, we collect:
| Data category | Examples | Why we collect it |
|---|---|---|
| Identity data | First name, last name | To identify you and address communications |
| Contact data | Email address, telephone number, postcode | To communicate with you about your application and opportunities |
| Immigration / right to work | Right to work status | UK legal requirement before referral to any employer |
| Professional data | Job roles sought, care settings, shift preferences, employment type | To match you with suitable opportunities |
| Qualifications and credentials | Qualification level, DBS status, additional training | To verify suitability and compliance with care sector requirements |
| Work history | Previous care roles and experience | To assess experience and suitability |
| Uploaded documents | CV, qualification certificates | To verify credentials and share with prospective care providers with your consent |
When a care provider submits a staffing request, we collect:
| Data category | Examples | Why we collect it |
|---|---|---|
| Organisation data | Organisation name, CQC registration number, organisation type | To verify legitimacy and understand the care setting |
| Contact data | Contact name, job title, email, telephone | To communicate about the staffing request |
| Operational data | Role required, number of staff, care setting, location, shift patterns | To match candidates to the specific requirements |
| Requirements data | Minimum qualifications, experience, additional requirements | To ensure only suitable candidates are presented |
| Timeline data | Urgency, preferred start date, duration | To prioritise and schedule the matching process |
If you contact us via the website contact form, we collect your name, email address, organisation (optional), and message content. We also collect standard technical data (IP address, browser type, pages visited) via server logs and cookies. See Section 9 for full cookie details.
Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Processing applicant or provider submissions | Contract — necessary to provide our recruitment and staffing services at your request (Article 6(1)(b)) |
| Verifying right to work and DBS status | Legal obligation — required under UK employment law (Article 6(1)(c)) |
| Sending you confirmation emails and service communications | Contract / legitimate interests (Article 6(1)(b) and (f)) |
| Improving our service through analytics | Legitimate interests — only where cookie consent is given (Article 6(1)(f)) |
| Retaining records for compliance purposes | Legal obligation (Article 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms, and we balance them proportionately.
We use your personal data exclusively for the following purposes:
We do not: sell your data · share it with advertisers or marketing companies · use it for automated decision-making or profiling · transfer it outside the United Kingdom without appropriate safeguards.
We may share your personal data with the following categories of recipient, strictly on a need-to-know basis:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Care provider organisations | To present your profile when a suitable match is identified — only with your knowledge and in the course of our matching service | Shared under confidentiality obligations; providers are CQC-registered regulated bodies |
| Google LLC (Google Workspace / Google Sheets) | Our operational infrastructure for storing submission data and sending notification emails | UK GDPR-compliant data processing agreement; data processed in accordance with Google's security standards |
| IT and hosting service providers | Website hosting and technical maintenance | Data processing agreements in place; access limited to technical necessity |
| Legal and regulatory authorities | Where required by law, court order, or regulatory obligation (e.g. HMRC, CQC, law enforcement) | Disclosed only to the minimum extent required by the applicable obligation |
We do not sell, rent, or trade personal data with any third party for commercial purposes.
Your data is primarily stored and processed within the United Kingdom. Where we use services provided by companies with servers outside the UK (such as Google), we ensure appropriate safeguards are in place, including:
You may request details of the specific safeguards applicable to any transfer by contacting us at hello@abundancegracecare.com.
We retain personal data only for as long as necessary for the purposes for which it was collected and in accordance with our legal obligations.
| Data type | Retention period | Reason |
|---|---|---|
| Care professional application data | 24 months from date of submission | To allow matching with future opportunities within a reasonable timeframe |
| Care provider staffing request data | 12 months from date of submission | To allow follow-up and record of service delivery |
| Uploaded documents (CV, certificates) | 24 months, or upon deletion request | Required for credential verification and ongoing matching |
| Contact form enquiries | 6 months | To handle any follow-up enquiries |
| Financial and transaction records | 7 years | UK legal requirement (Companies Act, HMRC regulations) |
| Server and access logs | 90 days | Security monitoring and fraud prevention |
At the end of the applicable retention period, your data is securely deleted or anonymised so that it can no longer be associated with you.
Under UK data protection law, you have the following rights in relation to your personal data:
| Right | What this means |
|---|---|
| Right of access | You can request a copy of the personal data we hold about you (a Subject Access Request). We will respond within 30 days. |
| Right to rectification | You can ask us to correct any inaccurate or incomplete personal data we hold about you. |
| Right to erasure | You can ask us to delete your personal data in certain circumstances (the "right to be forgotten"), subject to our legal obligations to retain certain records. |
| Right to restrict processing | You can ask us to suspend processing of your personal data in certain circumstances — for example, while accuracy is contested. |
| Right to data portability | Where processing is based on consent or contract, you can request your personal data in a structured, machine-readable format. |
| Right to object | You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds. |
| Rights related to automated decision-making | We do not use automated decision-making or profiling. If this changes, you will be informed and have the right to request human review. |
| Right to withdraw consent | Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. |
To exercise any of these rights, contact us in writing at hello@abundancegracecare.com. We will respond within 30 calendar days and may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113, if you believe we have not handled your data in accordance with the law.
We use cookies and similar technologies on this website. For full details of the cookies we use, their purpose, and how to manage your preferences, please read our Cookie Policy.
When you first visit this website, we ask for your consent to non-essential cookies via the cookie banner. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, or by contacting us.
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@abundancegracecare.com and we will delete the data promptly.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
No internet transmission is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you where required by law.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "last updated" date. We encourage you to review this policy periodically.
For significant changes affecting your rights, we will endeavour to notify you directly by email where we hold your contact details.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
abundance Grace Care Services Limited
Email: hello@abundancegracecare.com
Phone: +447533816661
Registered in England & Wales
Information Commissioner's Office (ICO):
ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow, SK9 5AF