Privacy Notice – Relating to Job Applicants

Capital Care Group Limited, part of the Capital Care Group, is a UK-based residential care provider offering specialist care in a warm and welcoming environment for individuals who are no longer able to live happily and safely on their own. We are registered as a data controller with the Information Commissioner’s Office under registration number Z1666671.

We recognise that the privacy and security of personal information are of great importance to our residents, their families and representatives, our team members, and others such as healthcare professionals and those involved in ensuring the welfare of our residents.

This Privacy Notice explains why we collect personal information from individuals who apply for jobs with us, how we use that information, and the steps we take to protect it.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions relating to this Privacy Notice. Please refer to the “How to Contact Us” section below if you have any questions.

Our privacy practices are guided by the principle of collecting and using personal information only where it helps us deliver a better experience for those we work with now and in the future, and to meet our legitimate interests — including protecting our residents, applicants, and employees.

Since January 2021, our data protection rights and obligations have been governed by the United Kingdom General Data Protection Regulation (UK GDPR), which closely mirrors EU data protection laws.

How do we collect information from you?

We collect information about you when you:

Apply for a job with Capital Care Group

Communicate with us (via email, phone, or post)

Use our website

What types of information do we collect from you?

Personal data (or personal information) means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, including:

When applying for a job

Personal details such as title, full name, address, telephone numbers, email address, marital status, date of birth, gender, ethnicity, sexual orientation, and health information

Copies of identification documents (e.g. passport, driving licence)

Qualifications and professional memberships (including registration numbers and NMC PINs)

Disclosure and Barring Service (DBS) details

Employment history and references

Right to work documentation

Personal information available in the public domain

When visiting one of our care homes

Visitor’s name, purpose of visit, and vehicle registration (if parking is used)

CCTV footage for the prevention and detection of crime and the safety of residents and workers

When using our website

Any personal details you knowingly provide (e.g. through forms or email enquiries)

Your preferences and use of email communications

Your IP address (used to monitor website usage)

Analytical data collected through tools such as Google Analytics

What information do we receive from other sources?

We may receive personal information from:

The Disclosure and Barring Service (DBS)

Professional registration or validation bodies

Employment agencies and reference providers

Occupational health consultants

Technology platforms supporting recruitment processes (e.g. applicant tracking or scheduling systems)

How we use your information

We process your personal data to:

Progress your job application and manage recruitment processes

Verify your identity and credentials (you may opt out of biometric verification and provide in-person documentation instead)

Provide you with relevant job information or alerts

Fulfil legal and regulatory requirements related to recruitment and employment

Review and improve our recruitment processes using anonymised data

We may share your data with:

Our recruitment system providers

Professional and regulatory bodies

The Disclosure and Barring Service

Occupational health consultants

Other companies within the Capital Care Group for administrative purposes

We may also contact successful applicants via their personal email or phone number before employment begins. You can unsubscribe at any time.

Lawful basis for processing

We process your personal data in accordance with Articles 6 and 9 of the UK GDPR, depending on the nature of the information and stage of recruitment.

Processing may be necessary:

For the performance of a contract or to take steps prior to entering into a contract

To comply with legal or regulatory obligations

For reasons of substantial public interest (e.g. safeguarding vulnerable individuals)

To protect vital interests

For our legitimate interests in managing recruitment

With your explicit consent (where applicable)

When processing special category data (e.g. health, ethnicity, or biometric data), we will do so only where lawful — typically with your explicit consent, or when required for occupational health, medical, or legal reasons.

How we store, process, and protect your data

We handle your data with the highest level of care through:

Clear internal data protection policies

Restricted access to personal data

Secure IT systems and encryption technologies

Physical security across all sites

Your personal data is stored only in:

The UK or European Economic Area (EEA)

The USA, in accordance with the UK–US Data Bridge

Countries or sectors recognised by the UK as providing adequate data protection safeguards

How long we keep your data

We retain your data only as long as necessary to fulfil the purpose for which it was collected, including legal and contractual obligations. Once your data is no longer required, it will be securely deleted or anonymised.

Your rights

You have several rights under data protection law, including:

Right to access – Request a copy of the data we hold about you

Right to rectification – Request correction of inaccurate or incomplete data

Right to erasure (“right to be forgotten”) – Request deletion where data is no longer needed

Right to restrict processing – Request limitation of how your data is used

Right to data portability – Request transfer of your data to another organisation

Right to withdraw consent – Withdraw consent where processing is based solely on consent

Right not to be subject to automated decision-making – All job-related decisions involve human oversight

Requests should be made to our Data Protection Officer (details below). We may require proof of identity before releasing information.

Other websites

Our website may contain links to other websites. This Privacy Notice applies only to Capital Care Group’s website, so please read the privacy notices of other sites when visiting them.

Changes to our Privacy Notice

We review this Privacy Notice regularly and will update it on our website when changes are made.
This policy was last updated in October 2025.

How to Contact Us

If you have any questions about this Privacy Notice or wish to exercise your rights, please contact:

Data Protection Officer
Capital Care Group
Juniper House
Sitka Drive
Shrewsbury Business Park
Shrewsbury
Shropshire
SY2 6LG

Press Office Telephone: 0800 208 4768
Email: capitalcaregroup@plmr.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection authority: www.ico.org.uk
.
However, we would appreciate the opportunity to address your concerns before you approach the ICO.