Privacy Policy
Last updated: 16 March 2026
Data Controller
Keystones is the data controller for personal data collected through this job application portal. Our registered address is 399 Gloucester Road, Horfield, Bristol, BS7 8TS. For data protection enquiries, please contact us at dpo@keystonescare.co.uk or call 0117 942 7347.
What Data We Collect
When you use this application portal, we collect the following personal data:
- Your name and email address
- Your responses to application questions
- Documents you upload as part of your application
- Equal opportunity monitoring data (provided voluntarily)
- A session cookie required for the portal to function
How We Use Your Data
We use your personal data for the following purposes:
- To assess your suitability for the role you have applied for
- To communicate with you about the status of your application
- To comply with our legal obligations as an employer
- To monitor equal opportunities in our recruitment processes
Legal Basis for Processing
We process your personal data on the basis of legitimate interest (Article 6(1)(f) UK GDPR). Our legitimate interest is to manage our recruitment process effectively and to assess candidates for employment.
Where you provide equal opportunity monitoring data, we process this special category data under Article 9(2)(b) UK GDPR, as it is necessary for the purposes of carrying out our obligations under the Equality Act 2010.
Who We Share Your Data With
Your personal data may be shared with:
- Recruitment and management staff involved in the hiring process
- Our email service provider, for application-related communications
We do not share your data with third parties for marketing purposes. Your data is not transferred outside the United Kingdom.
Data Retention
We retain your application data in accordance with the following schedule:
- Successful applicants: Your application data is retained as part of your employment records and managed under our employee privacy policy.
- Unsuccessful applicants: Your application data is deleted six months after the conclusion of the recruitment process.
- Equal opportunity data: This data is retained in anonymised form for monitoring purposes and cannot be linked back to you after your application data is deleted.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate personal data
- Erasure of your personal data in certain circumstances
- Restrict the processing of your personal data
- Data portability – receive your data in a structured, machine-readable format
- Object to the processing of your personal data
To exercise any of these rights, please contact us at dpo@keystonescare.co.uk.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
Cookies
This application portal uses a single session cookie that is strictly necessary for the portal to function. This cookie is used to maintain your authenticated session while you complete your application. We do not use any analytics, tracking, or marketing cookies.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected by the “Last updated” date at the top of this page.