Home care in Wolverhampton and surrounding areas
Candidate Privacy Policy
This policy explains what personal information we collect when you apply to work with Lifetouch Care, how we use it, who we share it with, and the rights you have over it.
- Used for recruitmentWe use your details to assess your application and carry out the checks the law requires.
- Kept for a limited timeWe normally delete the records of unsuccessful applicants after six months.
- Your rightsYou can ask to see, correct or delete your information. See section 9.
Last updated 10 October 2026
Section 1Who we are
Lifetouch Care is a home care provider based in Wolverhampton, registered with the Care Quality Commission (CQC). We decide how and why your personal information is used during recruitment, which makes us the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are registered with the Information Commissioner’s Office (ICO), registration number ZB716383. Our registered office is 36 Windmill Lane, Wolverhampton, WV3 8HG. Our Data Protection Lead is Jacob Punnoose.
This policy applies to anyone who applies for a job, placement or other work with us, whether or not the application succeeds. It does not cover the people we support, whose information we handle under separate arrangements.
Section 2Information we collect
We collect only what we need to decide whether you are suitable for a role and to complete the checks we are required to make. Depending on the role, this can include:
About you
- Name, address, email address and phone number
- Date of birth
- Proof of identity and address
- Right to work documents
About your application
- CV, cover letter and application form
- Employment history, including any gaps
- Qualifications, training and certificates
- Professional registration details, such as an NMC PIN for nurses
- References
From the recruitment process
- Interview notes and scores
- Results of any assessments or questions
- Our emails and messages with you
- Disclosure and Barring Service (DBS) check outcome
- Health information relevant to the role
Section 3How we collect it
Most of the information comes from you, through your application, your CV, your interview and the documents you show us. We also collect information from other sources, including:
- your referees and previous employers
- the DBS, through our checking provider
- the Home Office online right to work service, if you use it to share your status with us
- professional registers, such as the Nursing and Midwifery Council (NMC) register, which are public
- recruitment websites, if you apply to us through one
Section 4Why we use it and our legal basis
The law says we must have a lawful reason for using your information. These are the reasons we rely on.
| What we do | Our lawful reason |
|---|---|
| Assess your application, shortlist, interview and decide whether to offer you a role | Taking steps at your request before a contract, and our legitimate interest in recruiting suitable staff |
| Contact you about your application, interview and the outcome | Taking steps at your request before a contract |
| Check that you have the right to work in the UK | Legal obligation |
| Check your identity, references and employment history, and carry out DBS checks, so that people we support are protected | Legal obligation, and our legitimate interest in safe recruitment |
| Keep records so we can answer questions, deal with complaints and defend legal claims | Our legitimate interest in managing our business and protecting our legal position |
| Show regulators, such as the CQC, and commissioners that we recruit safely | Legal obligation, and our legitimate interest |
Where we rely on legitimate interests, we have considered whether they are outweighed by your rights, and we do not use your information in ways you would not reasonably expect. We do not make recruitment decisions solely by automated means.
Section 5Sensitive information
Some information needs extra protection. We handle it with extra care and only where the law allows.
Health information
We may ask about your health to decide whether you can carry out the role, and whether we need to make reasonable adjustments for you. We use it under our legal duties in employment law and the Data Protection Act 2018. Only the people who need it for recruitment see it.
Criminal record information
Because care work involves people who may be vulnerable, the roles we recruit for are eligible for enhanced DBS checks. We use the outcome to decide whether you are suitable for the role and to meet the law and CQC requirements. We handle it under the safeguards in the Data Protection Act 2018, and we keep it separate from the rest of your application.
Section 7Storage and security
We keep recruitment records in secure digital systems, and paper records, where we have them, are locked away. Our care management system supplier, Nurse Buddy, stores data on Amazon Web Services servers in Ireland and Germany. The UK treats countries in the European Economic Area as providing an adequate level of data protection. If we ever needed to send your information anywhere else, we would first make sure the law’s safeguards were in place.
We protect your information with appropriate technical and organisational measures, including encrypted storage, secure communications and access limited to staff who need it. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
Section 8How long we keep it
We keep your information only as long as we need it for the purposes in this policy.
| Information | How long we keep it |
|---|---|
| Records of unsuccessful applicants | Up to six months after the recruitment process ends, then securely deleted. We keep them longer only if the law requires it or you ask us to consider you for future roles. |
| Records of successful applicants | They become part of your staff record and are kept under our staff retention rules. |
| Right to work documents | For as long as you work for us and for two years afterwards, as the law requires. |
| DBS certificates | We record the certificate number, date and outcome. We do not keep a copy of the certificate for longer than the DBS guidance allows. |
Section 9Your rights
Under data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information in certain circumstances
- ask us to restrict how we use your information in certain circumstances
- object to us using your information where we rely on legitimate interests
- ask for your information in a format you can pass to another organisation, where this applies
- withdraw your consent at any time, where we rely on your consent
To use any of these rights, contact us using the details in section 11. We will reply within one month. You do not have to pay a fee, and we may ask you to prove who you are before we release anything. These rights are not absolute, so we may sometimes have to refuse a request, and if we do we will explain why.
Section 10Changes to this policy
We may update this policy from time to time, for example if the law or our recruitment process changes. The date at the top of this page shows when it was last updated. Please check it when you apply.
Section 11Contact and complaints
If you have a question about this policy, or want to use your rights, contact our Data Protection Lead, Jacob Punnoose.
If you are not happy with how we have handled your information, you have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would like the chance to put things right first, so please contact us if you can.
You can read how we use cookies on this website in our Cookie Policy.
