Privacy notice
Last updated: 4 November 2026
This notice explains how STAFFLORA ("we", "us") collects and uses personal information about carers, employer contacts and website visitors, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for this information.
Information we collect
- Carers: name, contact details, location, availability, preferred hours and shifts, transport, care experience, qualifications, right-to-work status and anything you choose to include in your CV.
- Vacancy applications: employment history, referees, self-reported DBS status, available start date and cover letter. Do not upload identity documents or DBS certificates through this site.
- Employer contacts: name, organisation, work contact details and vacancy information.
- Introductions: a dated record of which carer was introduced to which employer, the employer agreement version and acceptance, employer acknowledgement, and separately reported interview, offer and work-start outcomes. STAFFLORA keeps internal follow-up notes privately.
- Enquiries: name, email, optional phone and organisation, enquiry type, subject and message. These are private to STAFFLORA staff and used to respond to your enquiry, on the basis of legitimate interests or steps prior to a contract.
- Website visitors: browser storage for your sign-in session and cookie choice.
The vacancy matching tool runs in your browser; preferences you enter there are not stored. If you use our AI-powered matching, the text you write is sent to our AI service provider only to generate suggestions and is not saved by us. Please don't include health or other sensitive details.
Registrations and enquiries are stored in our access-controlled database. Employers can see applications made to their own vacancies only after STAFFLORA approves the introduction and you agreed to share your details. Employer contact details for an approved introduction are shown privately to the relevant carer. Applications are never published publicly. If you opt into the CV database, registered employers and STAFFLORA staff can search your profile and access your CV, name, contact details, location and experience. You can turn this off in your dashboard. Copies already downloaded cannot be recalled.
How and why we use it
- To register you and recommend suitable vacancies — lawful basis: steps prior to entering a contract / legitimate interests.
- To introduce you to care employers — lawful basis: your consent, which you can withdraw at any time.
- To make your CV and profile searchable by registered employers when you opt in — lawful basis: your consent.
- To manage employer relationships and vacancies — lawful basis: legitimate interests / contract.
- To document introductions, follow up on recruitment outcomes and resolve disputes — lawful basis: legitimate interests / contract. Each party reports their own outcome; an acknowledgement confirms receipt of an introduction, not a hire.
Automated matching
Our recommendation system ranks vacancies as strong, possible or not suitable based on the details you provide. Recommendations do not automatically reject an application or decide whether an employer hires you. You choose which roles to apply for; employers make their own recruitment decisions.
Who we share it with
We share relevant details only with participating care employers when you are considered for a suitable vacancy and have agreed. We also use trusted service providers (such as email and hosting) under contract. We never sell your data.
How long we keep it
Records remain in your account and our recruitment records until deleted. You can contact us to request deletion or ask how long a particular record is needed. This site does not currently apply automatic expiry to carer records. Please do not upload DBS certificates.
Your rights
You have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent at any time. To exercise these rights email carers@stafflora.co.uk (carers) or employers@stafflora.co.uk (employers). We will respond within one month.
Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Security and transfers
We use appropriate technical and organisational measures to protect your data. Where any provider processes data outside the UK, we ensure appropriate safeguards are in place.
