DRAFT — this policy is under legal review and will be finalised before Caredly launches publicly.
Privacy Policy
Last updated: 30 July 2026
Caredly helps care workers build a verified recruitment profile once, and share it with care employers on their terms. That means we handle sensitive information, and this policy explains exactly what we collect, why, who can see it, and the control you keep. We've tried to write it the way we'd want it explained to us.
Who we are
Caredly ("we") is the data controller for the information described here. [Company registration details and contact email to be added before launch.] You can contact us about anything in this policy — including exercising your rights — via the contact details on our website.
What we collect
- Account details— your name, email address, and whether you're a care worker or an employer.
- Care workers' compliance profiles — the information UK care regulators require employers to check before you start work: your full work history since leaving education (including written explanations for gaps over two weeks), referee details for relevant roles, a character reference, identity documents, proof of address, right-to-work documents, details of time lived outside the UK and related criminal record checks, your self-declared DBS certificate details, and optionally a CV.
- Job preferences — the care types, hours, location, and qualification level you tell us about, used to score how well roles match you.
- Employers' organisation details — organisation name, regulator (CQC/Ofsted) and registration identifiers, care types, and job posts.
- Activity on the platform — applications, messages between applicants and employers, consent decisions, and an audit log of every time an employer views a compliance pack.
Criminal records information (DBS)
DBS details are criminal-offence data under UK data protection law and get extra protection. We store only what you self-declare (certificate type, number, issue date, Update Service status) so that employers you choose can review it and conduct their own statutory checks. We never run checks ourselves, and this information is never visible to any employer without your consent.
Why we use your information
- To provide Caredly (our contract with you): building your profile, matching you with roles, enabling applications and messaging.
- With your consent: sharing your compliance pack with an employer. Consent is asked for per application, recorded with a timestamp, and you can revoke it at any time — access ends immediately.
- Our legitimate interests: keeping the platform secure, preventing misuse, and maintaining tamper-evident audit logs.
- Legal obligations: where we must retain or disclose information by law.
Who can see what
Caredly is built around two-stage visibility. When you apply to a role, the employer sees your name, your compliance score, and your match score — not your documents, referees, or DBS details. Only when an employer shortlists you and you have consented can they view your full compliance pack, and then only through a secure viewer: documents open via links that expire after 15 minutes and cannot be downloaded. Every view is logged, and you can see and revoke access at any time. We never sell personal information, and nobody sees your profile without a relationship you started.
Referees
Care workers provide contact details for referees (for example, a previous manager). If that's you: your details were provided by the applicant so that employers can verify their work history, which regulators require. Employers contact you directly; Caredly does not. You can ask us to remove your details at any time.
Who processes data for us
Your data is stored with Supabase (database, authentication, and document storage) in their London (UK) region, and our website runs on Vercel. Both act under data processing agreements. Data is encrypted in transit and at rest. We will update this section before adding any further processors (for example, an email delivery service).
How long we keep it
Your account and profile exist until you delete them. Deleting your account (Dashboard → "Delete my account") permanently removes your profile, documents, applications, and messages — immediately and irreversibly. We plan to introduce automatic deletion of long-inactive profiles (with email warning first) before general launch.
Your rights
You have the right to access, correct, export, and delete your information, to withdraw consent, and to object to certain processing. Most of these are built into the product — you can see and edit everything in your profile, revoke employer access with one tap, and delete your account yourself. For anything else, contact us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Match scores and automated processing
Caredly calculates scores (profile completeness, match percentage) to rank and present candidates and roles. These scores inform humans — employers decide who to shortlist and hire. Caredly makes no automated decisions with legal or similarly significant effects.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.