Privacy Policy

Shawstone Group (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, contact us, submit an enquiry, apply for work, or use our services.

This policy is intended to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Shawstone Group provides complex nursing care staffing and recruitment services for clinics, healthcare organisations, homecare services, healthcare professionals, and nurses.

Data Controller: Shawstone Group
Email: info@shawstonegroup.com

2. Information we collect

We may collect and process the following types of personal information:

Information you provide to us

• Your name
• Email address
• Phone number
• Company or organisation name
• Job title or professional role
• Enquiry details and message content
• CVs, cover letters, work history, qualifications, and references if you apply for a role
• Any information you choose to share through forms, email, or phone calls

Information we collect automatically

When you use our website, we may collect:

• IP address
• Browser type and version
• Device information
• Pages visited
• Time and date of your visit
• Referring website
• Cookie and usage data

Sensitive or special category data

In some cases, particularly during recruitment or staffing discussions, we may process special category data such as health-related information, professional registration details, or other information relevant to healthcare employment and placement. We only process this where necessary and with appropriate safeguards.

3. How we use your information

We use your personal data to:

• Respond to your enquiries
• Provide staffing and recruitment services
• Assess candidate suitability for roles
• Match healthcare professionals with client requirements
• Communicate with you about services, opportunities, or updates
• Maintain records of our business relationship
• Improve our website and services
• Comply with legal and regulatory obligations
• Protect our business from fraud, misuse, or security risks

4. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

• Consent – where you have given clear permission
• Contract – where processing is necessary to take steps before entering into or performing a contract
• Legal obligation – where we must comply with law
• Legitimate interests – where processing is necessary for our business operations and does not override your rights
• Vital interests – in rare cases where it is necessary to protect someone’s life

For special category data, we will only process it where a valid condition under UK GDPR applies.

5. Sharing your information

We may share your information with:

• Clients who are seeking suitable healthcare staff
• Candidates or professionals relevant to a staffing request
• Service providers who help us run our website, email, hosting, or IT systems
• Professional advisers such as lawyers, accountants, or auditors
• Regulatory bodies, law enforcement, or public authorities where required by law

We only share the minimum information necessary and take reasonable steps to protect your data.

6. Recruitment and staffing data

If you apply to join Shawstone Group, we may collect and process information including:

• Identity and contact details
• Employment history
• Qualifications, training, certifications, and registrations
• Right to work information
• References
• DBS or background check information where applicable
• Health or fitness-for-work information where relevant and permitted by law

We use this information to assess your suitability for placements and to support compliance with healthcare staffing requirements.

7. How long we keep your information

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Retention periods may vary depending on:

• The type of information
• Whether you are a website visitor, client, or candidate
• Legal or regulatory obligations
• Ongoing business needs

When data is no longer required, we will delete, anonymise, or securely destroy it.

8. Cookies and analytics

Our website may use cookies and similar technologies to:

• Improve website functionality
• Analyse how visitors use the site
• Remember preferences
• Support security and performance

You can control cookies through your browser settings and, where applicable, through our cookie banner or settings tool.

9. Data security

We take appropriate technical and organisational measures to protect personal data from:

• Loss
• Misuse
• Unauthorised access
• Alteration
• Disclosure
• Destruction

However, no website or online transmission is completely secure, so we cannot guarantee absolute security.

10. International transfers

If your data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it in accordance with applicable data protection laws.

11. Your rights

Under data protection law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us using the details below.

12. Links to other websites

Our website may contain links to third-party websites or social platforms. We are not responsible for the privacy practices of those sites, so we recommend reviewing their privacy policies.

13. Children’s privacy

Our website and services are not intended for children under 16 unless explicitly stated otherwise. We do not knowingly collect personal data from children without appropriate consent or legal basis.

14. Changes to this privacy policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Shawstone Group
Email: info@shawstonegroup.com