Privacy Policy

Last updated: 14 June 2026

1. Who we are

MorayCare Jobs is operated by Nightingale Home Support Ltd, a company registered in Scotland. We provide a local job board and candidate preview service connecting care workers with employers across Moray, Grampian and the Highlands.

Data Controller: Nightingale Home Support Ltd
Contact for privacy matters: [email protected]

2. What personal data we collect

• Employer / vacancy posters: Organisation name, contact name, work email, job details, location, salary (optional), and any other information you provide in the vacancy submission form.
• Candidates (profile submissions): Full name, email, phone (optional), location, care experience summary, and consent. Important: Your full details and CV are never published publicly. Only anonymised previews (initials, role title, location, skills summary) are shown on the Candidate Database page.
• Employer access requests: Organisation, name, email, candidate reference, and recruitment need description.
• Technical: Standard server logs (IP address, browser, pages visited) collected automatically by our hosting provider (IONOS). We do not use tracking or advertising cookies.

3. How we use your data (purposes and legal basis)

• To publish job listings and facilitate recruitment matching (contractual necessity / legitimate interest).
• To review and respond to employer access requests for candidate introductions (only with candidate consent where required).
• To communicate with you about your submission, payment, or listing status.
• To comply with legal obligations (e.g. record keeping, responding to ICO requests).

We do not sell, rent or share your personal data with third parties for marketing. We do not use automated decision-making or profiling.

4. Data sharing & processors

• Formspree (form processing service) — receives form submissions. Their processing is governed by their own Privacy Policy and they act as a data processor.
• IONOS (web hosting) — stores the website files and may process basic server logs.
• Stripe (future payment processor, if enabled) — for secure card payments. We do not store card details.
• We may share limited data with candidates or employers only when explicit consent has been given for an introduction.

5. How long we keep your data

• Vacancy submissions & related correspondence: up to 90 days after listing expiry, then securely deleted.
• Candidate profile submissions: retained while active or until you request deletion / withdraw consent. Anonymised previews may remain longer if still relevant.
• Server logs: typically 30–90 days by hosting provider.

6. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Object to or restrict processing
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please email [email protected] with “Data Request” in the subject. We will respond within one month.

You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint

7. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or damage. All form submissions are transmitted over HTTPS. Candidate contact details are never displayed on public pages.

8. Children’s data

Our service is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at this URL with the “Last updated” date shown above.