Privacy notice
Who We Are
The Social Care Community Partnership Ltd (TSCCP) is a company registered in Scotland, company number SC370614. We provide recruitment and staffing services to social care and healthcare organisations.
The Nursing Partnership is a specialist trading name of The Social Care Community Partnership Ltd.
Our main contact address is Standard Buildings, 94 Hope Street, Glasgow, G2 6PH.
We are a data controller for the personal information we collect and use in providing our services. This notice concerns processing under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.
How to contact us
For privacy questions, requests to exercise your data protection rights or concerns about how your information is handled, contact our Data Protection Officer at privacy@tsccp.co.uk.
- By post: The Social Care Community Partnership Ltd, Standard Buildings, 94 Hope Street, Glasgow, G2 6PH.
- By phone: 0141 212 6565.
- For general enquiries: info@tsccp.co.uk.
Our Commitment
We aim to use personal information lawfully, fairly and transparently, collect only what is necessary, keep it accurate and secure, and retain it only for a justified period.
This notice covers candidates, agency workers, former workers, client and supplier contacts, and people who contact us or use our website and services. It covers The Social Care Community Partnership Limited, including its specialist trading name The Nursing Partnership. Additional information may be provided for a particular service or employment relationship.
Why Do We Need to Process Personal Data?
Temporary workers and candidates: We need to process your personal data throughout our relationship with you for recruitment purposes, payroll purposes, assignments with clients, health and safety, human resource requirements, regulatory requirements, statutory reasons such as HMRC requirements.
Client contacts: We need to process your personal data throughout our relationship with you (or your organisation) in order to manage our relationship with you as our client contact and in order to provide our services to your organisation including: (a) providing information about our services on request; (b) carrying out our services; (c) managing payments, fees and charges; (d) collecting and recovering money owed to us; (e) dealing with any client complaints and receiving feedback; or (f) corresponding with you in connection with our services.
Business contacts: We need to process your personal data throughout our relationship with you (or your organisation) in order to manage our business relationships with suppliers and sub-contractors, professional advisors, regulatory authorities, public authorities and others, which will include: (a) seeking or maintaining business relationships with various organisations, including accreditation and regulatory authorities; (b) assessing the suitability of any existing or potential supplier or other business relationship; (c) negotiating and entering into appropriate contracts for the supply of goods or services to us, carrying out any obligations under such contracts (including obligations of payment) and if necessary enforcing any such contracts; (d) undertaking on-going monitoring and management of our relationship with suppliers and other professional and business contacts; (e) interacting with other organisations (including partners or sub-contractors) in the course of providing services to our clients; or (f) investigating any complaints or enquiries.
Website users: We need to process your personal data while you visit or use our website in order to respond to general and specific enquiries via our website; to improve the user experience; and to administer the functionality and network security of our website.
What Personal Data Do We Collect?
- Name.
- Contact details (including address, home and mobile telephone numbers, email) and emergency contacts (ie name, relationship and home and mobile telephone numbers).
- National insurance (NI) number, tax code and other tax information and date of birth.
- Professional qualifications, continuous professional development (CPD) undertaken, re-validation information to ensure you meet the requirements, medical information in relation to the requirements of working with vulnerable people.
- Disclosure Scotland requirements for regulated work, for initial criminal record checks and updates as required.
- Timesheets and pay details including bank details for payment purposes.
- Information in your sickness and absence records (including sensitive personal information regarding your physical and/or mental health).
- Copies of correspondence both electronic or physical.
- Appraisal and other assessments such as your experience surveys, client opinion surveys and supervision and support discussions.
- Complaints or grievances either from you or about you.
- Application forms, references from previous employers and other information collected during the recruitment process.
- Nationality and immigration status and right to work in the UK clearance and other immigration information where relevant.
- Proof of identity and proof of residence information and information from related documents, such as your passport.
- A copy of your driving licence for business insurance.
- Name
- Contact details (including business address, email address and telephone numbers)
- Employment details (including the name of your employer, your job title and role, and your credentials)
- Information obtained by us providing services to your organisation or by you or your organisation providing products or services to us
- Other details of our interactions including correspondence and conversations
How do we collect the information
Temporary workers and candidates: We may collect this information passed directly from our clients or directly from you (e.g. enter into a contract for services with us), the Home Office, HM Revenue and Customer (HMRC), Disclosure Scotland, our clients where you have been placed with them either as a temporary worker or an employment candidate.
Client contacts and business contacts: We may collect this information directly from you (e.g. when you provide us with a business card) or we may be provided with this information from your organisation. We may also obtain information about you from third party sources and publicly sources such as Companies House or your organisation’s website or referrals from another contact.
Website users: As you interact with our website or one of our social media accounts, we may automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, and other similar technologies.
What is Our Lawful Basis for Processing Your Personal Data?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal information in the following circumstances:
- where we need to perform a contract we have entered into with you;
- where we need to comply with a legal obligation;
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; or
- where we have obtained your prior consent.
We may also use your personal information where we need to protect your interests (or someone else’s interest) or where it is needed in the public interest.
As an agency providing business support services, we gather information and process personal data in order to pursue our legitimate interests of:
- supporting our clients in recruitment or other sectors who recruit and supply staff to clients in the public and private sectors;
- performing contracts with our corporate clients or other organisations;
- managing client and third party relationships;
- running our business efficiently and profitably;
- enhancing, modifying or improving our services;
- establishing, exercising or defending our legal rights;
- maintaining network security and website relevance for visitors to our website; and
- pursuing our commercial objectives where this does not override your rights and freedoms as a data subject.
We also process information to comply with the legal requirements associated with the employment regulations and best practice, including without limitation the requirements of HMRC, the Modern Slavery Act 2015, the Equality Act 2010 and other employment legislation. Furthermore, we process personal data in order to comply with any required legal obligations of ensuring all staff meet the requirements of the relevant sector.
If you fail to provide personal information
If you fail to provide certain information when requested, we may not be able to perform the services and fulfil our contractual obligations with our clients and find you new employment or the contract we have entered into with you (such as paying you), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How we use particularly sensitive information
”Special categories” of particularly sensitive personal information require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal information.
We may process special categories of personal information relating to temporary workers and candidates in the following circumstances:
- In limited circumstances, with your explicit written consent.
- Where we need to carry out our legal obligations and in line with this Privacy Notice.
- Where it is needed in the public interest, such as for equal opportunities monitoring, and in line with our Privacy Notice.
- Where it is needed to assess your working capacity on health grounds, subject to appropriate confidentiality safeguards.
Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
We will use your particularly sensitive personal information in the following ways:
- We will use information relating to leaves of absence, which may include sickness absence or family related leaves, to comply with employment and other laws.
- We will use information about your physical or mental health, or disability status, to ensure your health and safety in the workplace and to assess your fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence and to administer benefits.
We do not collect any sensitive personal information about client contacts, business contacts or website users.
Do we need your consent?
We do not need your consent if we use special categories of your personal information in accordance with our written policy to carry out our legal obligations. In limited circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with us (or your other engagement with us) that you agree to any request for consent from us.
Information about criminal convictions
We may only use information relating to criminal convictions where the law allows us to do so. This will usually be where such processing is necessary to carry out our obligations and provided we do so in line with our Privacy Notice.
Less commonly, we may use information relating to criminal convictions where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else’s interests) and you are not capable of giving your consent, or where you have already made the information public.
We will collect information about criminal convictions as part of the recruitment process and throughout the duration of your engagement with us (whether as temporary worker or candidate or other staff) where you are engaged in or applying for regulated work. We will use this information about criminal convictions and offences in order to determine your suitability and continued suitability for our clients and the regulated services that they perform.
We are allowed to use your personal information in this way in order to comply with our obligations to our clients to provide suitable staff and in order to protect the interests of the end user.
We do not collect any information about criminal convictions or offences about client contacts, business contacts or website users.
Do We Share with Third-Parties?
We share personal information only where there is a lawful reason and the information is reasonably necessary for the purpose. Depending on your relationship with us, recipients may include:
- Current or prospective staffing clients, including care providers, local authorities, NHS bodies and other public or private sector organisations, to assess suitability and manage assignments.
- Disclosure Scotland, professional regulators such as the SSSC or NMC, referees and previous employers for relevant checks and verification.
- Payroll, pension, recruitment-system, IT, website-hosting, training, compliance and occupational-health service providers, where relevant to the services you receive.
- HMRC, safeguarding authorities, law enforcement, courts and other public bodies where required or permitted by law.
- Insurers, auditors and legal or other professional advisers where necessary.
Some recipients act on our instructions as processors; others have their own responsibilities as independent controllers. Our policy requires appropriate data-processing contracts where suppliers process information on our behalf. We are reviewing our supplier register, including subprocessors, deletion arrangements and any overseas access. Please contact our DPO for information about recipients relevant to your records.
Agreeing to register with us is not blanket consent to every use or disclosure. The lawful basis depends on the purpose; where consent is required, we request it separately.
International Transfer of Personal Data
Our policy requires any restricted transfer of personal information outside the United Kingdom to comply with UK data protection law. This may involve an applicable UK adequacy regulation or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, with the assessment required for the arrangement.
We are reviewing our suppliers’ storage locations, overseas support access and subprocessors. We do not currently claim that all information remains in the UK. To ask whether a transfer applies to your information, and for details of the safeguards or how to obtain a copy, contact privacy@tsccp.co.uk.
Retention of Personal Data
We keep personal information only for as long as it is needed for its purpose, taking account of legal, regulatory, contractual and safeguarding requirements. We have adopted the retention approach below and are updating our internal policy and systems to implement it. Our Data Protection Officer oversees this work.
- General enquiries: normally 12 months after resolution where no working relationship follows. Relevant correspondence may instead form part of a client or candidate record.
- Unsuccessful or withdrawn registrations: normally 12 months after closure, and not less than the applicable statutory minimum. Required agency records are retained for at least one year after we last provide work-finding services.
- Inactive candidate profiles: review after 12 months without meaningful contact. We will confirm continued interest or remove the profile from the active pool, retaining only records needed for a separate lawful purpose.
- Essential worker, placement and client-contract evidence: normally six years after the relationship ends where necessary for contractual, regulatory or legal-claims purposes. This does not mean keeping every document in a personnel file for six years.
- Right-to-work evidence: for the duration of employment and two years afterwards.
- Pay and working-hours records: applicable statutory periods. Minimum-wage evidence is normally kept for at least six years from the end of the pay reference period following the period covered. PAYE records must be kept for at least three years from the end of the relevant tax year; longer requirements may apply to records serving more than one purpose.
- PVG and disclosure information: handled separately under Disclosure Scotland’s current Code of Practice. Disclosure material is not subject to a blanket six-year period and is deleted when no longer necessary. A proportionate record of the check and decision may be retained where justified.
- Health, safeguarding, serious complaints and investigation records: assessed separately, with restricted access and periods determined by the applicable obligations, the nature of the case, relevant contracts and any ongoing proceedings.
Information may need to be retained longer where a documented legal, regulatory, safeguarding or investigation requirement applies. We will not retain all records indefinitely simply because one record must be preserved. Information no longer needed is to be securely deleted, destroyed or anonymised, with backup copies removed through the applicable backup-retention cycle.
Our implementation includes quarterly retention reviews and an annual policy review. For the period or criteria applying to your information, contact privacy@tsccp.co.uk.
Where do we store Personal Data?
We use paper and electronic records, including recruitment and business systems. Our policy requires appropriate security measures and access limited to authorised people who need the information for their work. Supplier storage and access arrangements are being reviewed as explained above.
Website, portals and external links
Our website provides enquiry forms and links to online registration, portals and third-party services. When using a third-party service, read its privacy information as well as this notice. We cannot control another organisation’s website.
Cookies and technical information
Website and hosting systems may process IP addresses, browser information and security logs to deliver and protect the service. Cookies and similar technologies can support functionality. Our review of website storage, analytics and third-party connections is continuing; this notice does not claim that every cookie or connection has been audited. Contact our DPO for information about the technologies relevant to your visit.
Where consent is required for a technology, it must be obtained before that technology is used. Browser settings can help manage cookies, but are not a substitute for any consent we are required to obtain. Blocking necessary storage may affect some functionality.
Personal data breaches
Our policy requires breaches to be recorded and assessed. Where notification to the ICO is required, it must be made without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where a breach is likely to result in a high risk to individuals, affected people must also be informed without undue delay, subject to applicable legal exceptions.
Your Rights
Depending on the circumstances, you may have the right to:
- Receive information about how we use your personal data and request access to it.
- Have inaccurate or incomplete information corrected.
- Request deletion or restriction of processing where the relevant conditions apply.
- Object to processing based on legitimate interests, and object to direct marketing at any time.
- Receive information you have provided in a portable format where the right to data portability applies.
- Withdraw consent where consent is our lawful basis, without affecting processing that was lawful before withdrawal.
- Raise concerns about automated decision-making where applicable.
We do not make recruitment or employment decisions based solely on automated processing. Applications and relevant compliance information are reviewed by authorised members of our team.
These rights are subject to legal conditions and exemptions. A deletion request does not always require removal of information we must lawfully retain, but we will explain any applicable restriction rather than treat retention as an automatic refusal.
Contact privacy@tsccp.co.uk to exercise your rights. We may need proportionate information to verify your identity. We normally respond within one month. Where the law permits an extension or adjustment to that period, we will explain the reason and timing. Requests are normally free; a fee or refusal is possible only where the applicable legal conditions are met.
Consent
We ask for your communication preferences where appropriate. Necessary registration, assignment, payroll, compliance and service communications may rely on a contract, legal obligation or another applicable lawful basis rather than consent.
Where we rely on consent, we explain the specific purpose and how you can withdraw it. Withdrawal does not affect processing that was lawful before withdrawal. You can object to direct marketing at any time. Continuing with registration acknowledges receipt of privacy information; it does not constitute consent to all processing.
Complaints
Last updated: 1 October 2026. This update introduces our adopted retention approach, corrects outdated organisational and international-transfer wording, and confirms the DPO contact. Internal policy and system implementation, supplier verification and the detailed processing review are continuing. We will update this notice when those checks establish further relevant information. Contact privacy@tsccp.co.uk if you need details about your own information.