Norfolk Care Careers service privacy notice

How Norfolk Care Careers use your personal information for events and support.

What is the purpose of this document?

This privacy notice explains how we, Norfolk County Council, use your information to provide workforce strategy advice, guidance and support to adult social care providers and advice, guidance and support around job seeking and training opportunities to people working in Adult Social Care who contact the Norfolk Care Careers Service and the ways in which we protect your privacy.

By 'use' we mean what we do with your information, and how we store and share it.

If you have provided consent for any of the below processing (where consent applies), you can withdraw this at any time by emailing: [email protected].

Further details about us and your rights

We also provide further details regarding:

Who we are
How long we use your information for
Your rights under the General Data Protection Regulation (the UK GDPR) and
How to exercise them

You can see this information in Norfolk County Council's general privacy notice or you can ask us for a copy of this information.

How we use your information

We use personal information primarily to provide advice, guidance and support to people working in the adult social care and adult social care providers.

We may use information about you or your business to:

Communicate with you to support with your workforce strategies, including recruitment and retention
Communicate with you to support with advertising job vacancies on our website
Communicate with you to support you with job seeking in adult social care
Make you aware of training opportunities
Send email information about events and workshops (if you have signed up/consented to receive them).
Send text message notifications for events and workshops (if you have signed up/consented to receive these).
Conduct surveys and evaluations (anonymised) to demonstrate the service's effectiveness
Create case studies and other marketing materials that may be published publicly to promote apprenticeship opportunities (we will seek separate consent prior to recording and sharing case studies)
We will use anonymised data for reporting and performance measuring purposes. Where business names are required for the reporting, a sole trader's business name may be visible

We also use your information to review the quality of our services and improve how we work. We also use your information in other ways compatible with the above.

You do not have to provide information to us but, if you do not provide information, we may not be able to provide services to you.

Please note that some contact information (i.e. business name and employee name) may be considered personal data under the UK GDPR, as it may refer to an individual. This could be the case for a sole trader's business name.

For text and email communications around events and opportunities relevant to you and/or if you have participated in case studies, you can withdraw your consent at any time by emailing us at [email protected].

What information we collect and use about you

We will collect and use:

Name, address, telephone number and email address
Business name
Business Address
Business Contact Details (Name, Phone Number, and Email Address)
Individual Contact Details (Name, Phone Number, and Email Address) where an individual contacts us or is being referred to us via a stakeholder for support
Individual's age bracket (Under 25, 25 - 54, 55+) and gender
Employment status, job role and organisation you work for, and length of time in adult social care sector
Personal information for specific event attendance (i.e. dietary / mobility requirements) to ensure you can attend an event in a safe way, as and where required. This data will only be used for the purpose of organising the event and will be permanently deleted afterwards
Photographs and videos of yourself, when you choose to participate in case study recordings - this is an additional offer, and we will seek separate consent for any promotion/marketing activities.

We may also collect information about the following which is classed as "special category data" under the GDPR:

Disability
Race or ethnic origin

By law we can only collect 'special category' information when it is relevant and for the purposes described above.

The UK GDPR makes sure we keep your special category information safe and secure. More details are on our website in the document named 'Special category data and criminal offences data policy'. This explains how we follow these legal duties.

Where we get your information from

We receive most of this information from you, but we also receive it from:

Your employer (if you are a member of the social care workforce and they refer you to us)
Relevant teams within the County Council
Third party stakeholder organisations e.g. Norfolk Care Association or Norfolk and Suffolk Care Support (if they refer you to us)

Who we share your information with

We may need to share your information with other third parties, such as:

Teams within the County Council, where necessary
The strategic workforce development and planning body for adult social care in England (Skills for Care), where applicable and requested by yourself
Third party stakeholder organisations e.g. Norfolk Care Association or Norfolk and Suffolk Care Support, where applicable

All information is shared on a need-to-know basis. We do not share more than we need to.

Your personal information will also be shared with third parties contracted by Norfolk County Council to provide a service to Norfolk County Council. These services providers are known as data processors and have a legal obligation under UK GDPR and to Norfolk County Council to look after your personal information and only use it for providing that service. For example, this would include companies such as Microsoft who provide our email solution.

All our third-party service providers and other subsidiaries or parents in the group are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions, as identified in separate privacy notices.

We do not process your information outside of the UK and European Economic Area.

Online forms and customer databases

When we collect information via online forms, we will only ask for the information required to effectively deal with the enquiry or application. Information provided will either be sent to an email inbox or will added to a customer database.
Our main customer database is CRM provided by GOSS. All our customer databases are subject to data quality controls in line with the UK GDPR. We use the information provided to process customer enquiries, provide the required service, verify customer identity, update customer records, and test/resolve system or process errors.

How the law protects you and the legal basis for processing your information

We have legal reasons under the UK GDPR to use your information because it is necessary:

Because you have provided consent (for subscription services such as text and email alerts or participation in case studies)

For the performance of a task carried out in the public interest and the task or function has a clear basis in law
The tasks we carry out in the public interest are under the:

Care Act 2014 Section 5

We have legal grounds to process (including share) special category data because it is necessary for:

Reasons of substantial public interest under the Equality Act 2010

We may also seek specific consent to use your information in certain ways. This will normally be where the use of the data is not necessary for the above purposes but may be very useful for you or helpful to us to provide services (for example subscriptions to our services or case studies).

How long we keep your information

We will keep your information for five years, from the date of last contact.

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.

How we keep your information

The information is stored electronically, on the County Council's records management system, GOSS Digital Platform. Additionally, information is securely stored in other mediums, including email accounts and Microsoft Office Forms.

We do not process your information outside of the European Economic Area.

Automated decision making

We do not make automated decisions (including profiling) about you.

Your responsibility to inform us of changes

It is important that the personal information we hold about you is accurate and current.
Please keep us informed if your personal information changes during your working relationship with us. You can do to help us with this by:

Telling us when any of your details change, and
Telling us if any of the information we hold about you is wrong

Changes to this notice

We update this privacy notice from time to time, so please review it often. The date below is updated every time this privacy notice is updated.

This notice was created in January 2026.