This Privacy Policy explains how Bright Transitions Talent collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: May 2026 | Version 1.0
Bright Transitions Talent is a trading name of Bright Transitions. We are the Data Controller for the personal data we collect and process through this website and in the course of providing our recruitment and temporary staffing services.
We collect different categories of personal data depending on whether you are a Candidate (job seeker or temporary worker) or a Client (employer or care provider).
We use your personal data only for the purposes for which it was collected. The table below sets out our lawful basis for each type of processing.
| Purpose | Lawful Basis (UK GDPR) |
|---|---|
| Assessing a Candidate's suitability for roles | Legitimate interests / Contract performance |
| Conducting DBS, Right-to-Work, and reference checks | Legal obligation / Legitimate interests |
| Introducing Candidates to Clients | Contract performance / Legitimate interests |
| Processing payroll for temporary workers | Contract performance / Legal obligation |
| AWR 12-week tracking and compliance | Legal obligation |
| Invoicing and financial record-keeping | Legal obligation / Contract performance |
| Responding to enquiries submitted via our website forms | Consent / Legitimate interests |
| Sending relevant job opportunities to Candidates | Consent / Legitimate interests |
| Maintaining records required by CQC and Ofsted | Legal obligation |
| Processing health information relevant to a role | Explicit consent / Employment law obligations |
Some of the data we process is classified as "special category" data under UK GDPR, which requires a higher level of protection. This includes:
Processing is necessary for employment purposes and for reasons of substantial public interest — specifically, safeguarding children and vulnerable adults.
We only process health information where you have given explicit consent, or where it is necessary to assess your fitness to perform a specific role. You are never required to disclose health information as a condition of registration.
We do not sell your personal data. We share it only in the following circumstances:
| Data Type | Retention Period |
|---|---|
| Candidate compliance records (DBS, RTW, references) | 7 years after end of last engagement (CQC requirement) |
| Payroll and financial records | 7 years (HMRC requirement) |
| Unsuccessful Candidate applications | 6 months from date of application |
| Client contact and billing records | 7 years from last transaction |
| Website form submissions (enquiries) | 2 years from date of submission |
| Cookie consent records | 1 year from date of consent |
You have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected].
You can request a copy of all personal data we hold about you (a Subject Access Request). We will respond within 30 days.
You can ask us to correct inaccurate or incomplete personal data.
You can ask us to delete your personal data where we no longer have a lawful basis to hold it. Note that we may be required to retain certain records by law.
You can ask us to restrict the processing of your data in certain circumstances.
Where processing is based on consent or contract, you can ask us to provide your data in a portable format.
You can object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
This website uses cookies to improve your experience. We use a cookie consent banner to obtain your consent before placing any non-essential cookies. For full details of the cookies we use and how to manage them, please see our cookie consent banner or contact us at [email protected].
Essential cookies (required for the website to function) are placed without consent. Non-essential cookies (such as analytics) are only placed with your explicit consent.
We take the security of your personal data seriously. We use industry-standard encryption (HTTPS/TLS) for all data transmitted through this website. Access to personal data is restricted to authorised personnel only. We conduct regular reviews of our data security practices.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and will notify affected individuals without undue delay.
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last updated. We will notify registered Candidates and Clients of material changes by email.
For Subject Access Requests, data deletion requests, or any other data protection enquiry: