Privacy Policy

Care Providers Network is an online membership platform for the UK health and social care sector. Registered care providers use it to advertise opportunities, review applications, manage recruitment and compliance records, and arrange genuine spare organisational capacity or defined care services with other providers. Healthcare professionals use it, free of charge, to build a CV, hold their documents in a personal wallet, and apply for opportunities.

We act as a data controller for the account, platform and billing information we hold about our users. Where a care provider uses the platform to manage its own recruitment and compliance records, that provider is the controller of those records and we act as a processor on its behalf.

• Account and profile details — name, email address, password credentials held in hashed form, account role, job title, professional registrations you choose to add, work history, skills and availability.
• Organisation information — organisation name, trading name, company identifiers you supply or confirm during onboarding, regulator identifiers, team members and their roles, and verification evidence.
• Applications and recruitment activity — opportunities you post or apply to, application status, shortlists, talent pools, interview notes and pipeline stage history.
• Uploaded documents — CVs, identity and right-to-work evidence, DBS information, training certificates and other files you or your organisation upload, together with data extracted from them for review.
• Compliance information — checks recorded against an application or a capacity arrangement, declarations, reviewer decisions and supporting notes.
• Communications — messages sent through the platform, enquiry form submissions and correspondence with our team.
• Transaction and invoice information — membership and add-on purchases, order records, invoice details and payment status. Card details are handled by our payment provider and are not stored by us.
• Technical and usage data — IP address, device and browser information, pages viewed, session and authentication events, and security and audit logs.

Most information comes directly from you when you register, complete onboarding, build a CV, upload documents, post or apply for an opportunity, message another user, or buy a membership or add-on. We also collect information from your organisation when a colleague invites you or records activity against your account, from public company and regulator sources used during provider verification, from our payment provider in relation to transactions, and automatically through cookies and server logs when you use the platform.

• Contract — to create and run your account, deliver the platform features you have signed up for, and process memberships, orders and invoices.
• Legitimate interests — to secure the platform, prevent misuse and fraud, keep audit trails, improve our services and communicate about service changes, balanced against your rights and interests.
• Legal obligation — to meet accounting, tax, safeguarding-related reporting and other legal duties that apply to us.
• Consent — where you choose to make your profile discoverable to providers, share documents with a specific organisation, or receive optional marketing. You can withdraw consent at any time.
• Where documents reveal special category data (such as health information) or criminal records information (such as DBS results), we handle it only where a further condition under UK data protection law applies, generally employment, social care or safeguarding purposes, or your explicit consent.

• Creating accounts, verifying organisations and controlling access to the correct portal.
• Publishing opportunities, matching and surfacing candidates, and running recruitment pipelines.
• Recording compliance checks, document review outcomes and capacity arrangement declarations.
• Enabling messaging between providers, professionals and our team.
• Taking payment for memberships and add-on services and issuing invoices.
• Sending service notifications, reminders about expiring documents and support responses.
• Protecting the platform through security monitoring, audit logging and abuse prevention.
• Understanding aggregate usage so we can improve the product.

Document upload and extraction tools help a human reviewer assess evidence. They do not approve documents automatically, and a person must confirm any review outcome.

• Care providers — when you apply for an opportunity, make your profile discoverable, or share documents with an organisation, the relevant provider can see the information you have shared.
• Suppliers and receiving providers — where a capacity or service arrangement is proposed, the counterparty organisation sees the arrangement terms and declarations needed to assess it.
• Candidates — professionals see the opportunity, organisation and order details relevant to them, and are asked for consent before certain add-on services proceed.
• Service providers — hosting, database, email, payment and analytics suppliers who process information on our instructions under contract.
• Professional advisers — lawyers, accountants, auditors and insurers where necessary.
• Regulators and authorities — where we are legally required to disclose information, or to establish, exercise or defend legal claims.
• Business transfers — a buyer or successor if our business is reorganised, sold or merged.

We do not sell personal information.

We use cookies and similar browser storage that are strictly necessary to run the platform, including keeping you signed in, remembering your selected organisation and protecting forms against abuse. We also use limited analytics to understand aggregate usage and improve the service. You can block or delete cookies in your browser settings, but essential cookies are required for sign-in and secure areas to work.

Information is stored in managed cloud infrastructure with access controls, encryption in transit, row-level data separation between organisations, private document storage and audit logging of sensitive actions. Access is limited to people who need it for their role. No online service can be guaranteed to be completely secure, so you should also protect your own account credentials and device.

Some of our suppliers may process information outside the UK. Where that happens we rely on UK adequacy regulations or on approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional technical and organisational measures where appropriate.

We keep information only as long as it is needed for the purpose it was collected for. In practice that means account and profile data is kept while your account is active and for a limited period afterwards; recruitment and application records are kept for as long as the relevant provider needs them for its own recruitment and equality obligations; compliance and audit records are kept for the period required to evidence a decision; and financial records are kept for the period required by tax and accounting law. When information is no longer needed it is deleted or anonymised.

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Deletion — ask us to delete information where there is no continuing reason for us to hold it.
• Restriction — ask us to limit how we use your information while a concern is resolved.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability — receive certain information in a structured, machine-readable format, or ask us to transmit it.
• Withdrawal of consent — withdraw consent at any time where we rely on it, without affecting earlier processing.

Where a care provider controls the records in question, we will pass your request to that organisation and support it in responding.

You can submit a privacy request or complaint by emailing privacy@careprovidersnetwork.co.uk or through our contact form. We may need to verify your identity before we act. We aim to respond within one month and will tell you if we need longer because a request is complex.

If you are not satisfied with our response you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. We would appreciate the chance to resolve your concern first.

The platform is intended for people aged 18 and over who work in, or are seeking work in, health and social care. We do not knowingly collect information from children. If you believe a child has provided information to us, please contact us and we will delete it.

We may update this policy as the platform develops or the law changes. The date at the top of the page shows when it was last revised, and we will highlight material changes in the platform or by email where appropriate.

For anything relating to this policy, email privacy@careprovidersnetwork.co.uk or use the contact form.