top of page

Privacy Policy

Effective Date: 7 October 2025

1. Introduction

This Privacy Policy explains how Huntley Care Limited (“we”, “us”, “our”) collects, processes, and safeguards personal data in accordance with:

  • The UK General Data Protection Regulation (UK GDPR),

  • The Data Protection Act 2018, and

  • The EU General Data Protection Regulation (EU GDPR) as applicable under Maltese law.

By using our website or providing your personal data, you consent to the processing set out herein.

2.  Your data controller

We may collect and process the following categories of data:

  • Identity data (full name, date of birth, National Insurance number);

  • Contact data (address, email, telephone);

  • Employment history, qualifications, and references;

  • Identification documents (passport, driving licence);

  • Health and medical information relevant to capability or care provision;

  • Criminal record data (via DBS or equivalent Maltese authority);

  • Financial and payment details (for training or compliance fees).

3. Purposes of Processing

Your data may be used for the following purposes:

  • Registration and administration of training or employment applications;

  • Conducting DBS and compliance checks;

  • Issuing training certification;

  • Communication and record-keeping;

  • Processing payments and invoicing;

  • Compliance with statutory and safeguarding obligations;

  • Internal monitoring and quality improvement.

4. Legal Basis for Processing

Processing is conducted lawfully under one or more of the following bases:

  • Consent (for marketing or optional communications);

  • Contractual necessity (to deliver training or employment services);

  • Legal obligation (for safeguarding and compliance purposes);

  • Legitimate interest (to improve services and maintain operational efficiency).

5. Data Sharing and Disclosure

We may share your data with:

  • The Disclosure and Barring Service (DBS) or equivalent authority;

  • Approved umbrella or vetting bodies;

  • Accrediting and regulatory organisations;

  • Payment processors and financial institutions;

  • Legal and governmental authorities where required by law.
     

We do not sell, rent, or trade your personal data to any third parties.

6. International Data Transfers

Where data is transferred between the UK and Malta, such transfer shall occur under appropriate safeguards in compliance with Article 46 UK GDPR and EU GDPR.

7. Data Retention

We retain personal data only for as long as reasonably necessary:

  • Training and employment records: up to 6 years;

  • DBS and safeguarding data: as required by regulation;

  • Financial and payment data: 6 years (for HMRC and audit).

8. Data Subject Rights

Under UK and EU GDPR, you have the right to:

  • Access and obtain a copy of your personal data;

  • Request rectification or erasure;

  • Object to or restrict processing;

  • Data portability;

  • Withdraw consent for non-essential processing (e.g., marketing).
     

Requests should be submitted in writing to: info@huntleycare.com

9. Data Security

We employ robust technical and organisational measures to safeguard data against unauthorised access, alteration, loss, or destruction. All personal data is stored securely and accessed only by authorised personnel.

10. Cookies

Our website may employ cookies to enhance user experience and functionality. You may adjust your browser settings to refuse cookies; however, certain website functions may be affected.

11. Complaints

If you believe your data rights have been infringed, you may contact:

  • The Information Commissioner’s Office (ICO) in the United Kingdom, or

  • The Information and Data Protection Commissioner (IDPC) in Malta.

12. Contact Details

Huntley Care Limited
UK Head Office: Office 206, 2nd Floor, 85–87 Bayham Street, Camden, NW1 0AG
Malta Head Office: Office 171, Triq San Tumas, Il-Fgura, Malta
UK: +44 20 8049 1767 | Malta: +356 276 333 19
Email: info@huntleycare.com

bottom of page