Legal

Privacy Notice

Last updated: 07/03/2026

This notice explains how Aegis Care Shield collects, uses, stores and protects personal data under UK GDPR and the Data Protection Act 2018.

1. Who we are

Data Controller: Aegis Care Shield
Company number: 16145903
Email: info@aegiscareshield.com
Phone: 07440197565
Website: aegiscareshield.com

2. Data we collect

We may collect identity/contact details, recruitment and onboarding records, right-to-work evidence, DBS and safeguarding documentation, training records, availability/shift data, portal account information, and service enquiry information from clients.

3. Special category and criminal offence data

For safeguarding and safer recruitment, we may process health data and criminal conviction/DBS-related data where legally permitted and necessary.

4. Why we process data and legal bases

We process data for recruitment, onboarding, placement management, safeguarding, legal/regulatory compliance, client service delivery, and business operations. Legal bases include contract, legal obligation, legitimate interests, and where applicable explicit consent.

5. Who we share data with

We only share data where necessary, for example with clients receiving staffing support, background checking services, training/compliance platforms, payroll/accounting providers, hosting/IT providers, and regulators/law enforcement where required.

6. International transfers

Where service providers process data outside the UK, we use lawful transfer safeguards, such as adequacy decisions or UK-approved contractual safeguards.

7. Retention

We keep data only as long as needed for recruitment, safeguarding, compliance, legal, and contractual purposes. Retention periods vary by record type and legal requirements.

8. Your rights

You may request access, rectification, erasure, restriction, objection, and portability where applicable. To exercise rights, contact info@aegiscareshield.com.

9. Security

We apply technical and organisational controls including access controls, secure authentication, audit logs, encrypted/safeguarded storage for sensitive records, and restricted administrator access.

10. Complaints

If you are unhappy with our response, you can complain to the ICO: ico.org.uk.