Privacy & Cookie Policy
Last updated: October 2026
1. Introduction
GetCareStaff (“GetCareStaff”, “we”, “us”, “our”) is committed to protecting the privacy, security and confidentiality of the personal information entrusted to us.
GetCareStaff is a product operated by Telyton Limited, a company registered in England and Wales under company number 16603759, with its registered office at C/O Ascentris, 45 Albemarle Street, Mayfair, London, United Kingdom, W1S 4JL.
This Privacy & Cookie Policy explains how we collect, use, store, share and protect personal information when individuals:
- visit tendocare.co.uk;
- register for or use the GetCareStaff platform;
- create a Carer profile;
- use GetCareStaff on behalf of a care home or care organisation;
- apply for, offer, accept or complete shifts through GetCareStaff;
- upload compliance or professional documentation;
- communicate with us; or
- otherwise interact with our services.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (“PECR”).
2. Who We Are
For the purposes of applicable data protection legislation, Telyton Limited may act as a data controller in relation to personal information processed through GetCareStaff.
In certain circumstances, another organisation using GetCareStaff, such as a care home or care provider, may separately act as a data controller in respect of information it processes for its own purposes.
3. Information We May Collect
Depending on how you use GetCareStaff, we may collect and process information including:
Identity and contact information
This may include your name, address, telephone number, email address, date of birth and other identifying information.
Professional information
For Carers, this may include:
- employment and professional history;
- qualifications and certifications;
- skills and experience;
- training records;
- professional registrations;
- preferred roles and shift types;
- availability;
- preferred working locations and travel radius; and
- information contained within your professional profile.
Compliance and verification information
Where required to operate the Platform safely and lawfully, we may process information concerning:
- identity verification;
- right-to-work documentation;
- DBS certificates or DBS status;
- professional registration;
- training and competency records;
- insurance documentation; and
- other compliance documentation.
Some information processed for compliance purposes may constitute special category personal data or information relating to criminal convictions and offences. Where this occurs, we process that information only where an appropriate legal basis and applicable additional condition exists.
Shift and Platform information
We may collect information concerning:
- shifts viewed or applied for;
- shift invitations;
- applications;
- bookings;
- availability;
- hours worked;
- timesheets;
- attendance;
- cancellations;
- communications;
- feedback; and
- activity undertaken through the Platform.
Financial information
Where relevant, we may process payment and transaction information necessary to facilitate payments, invoices and other financial transactions.
Payment services may also involve third-party payment or banking service providers.
Technical information
When you access our website or Platform, we may automatically collect technical information such as:
- IP address;
- browser and device information;
- operating system;
- login information;
- pages or functions accessed;
- dates and times of access;
- security and diagnostic information; and
- cookie and similar technology information.
Communications
We may retain communications sent to or through GetCareStaff, including enquiries, customer-support communications and relevant in-platform communications.
4. How We Use Personal Information
We may process personal information to:
- create and administer user accounts;
- operate and secure the GetCareStaff Platform;
- verify identities, qualifications and compliance information;
- enable Carers to create professional profiles;
- enable care organisations to advertise staffing requirements;
- match Carers with potentially relevant opportunities;
- facilitate applications, invitations and shift bookings;
- enable care organisations to assess applicants;
- administer timesheets and payments;
- communicate important Platform or account information;
- provide customer support;
- investigate complaints, safeguarding issues or suspected misconduct;
- prevent fraud and misuse;
- meet regulatory, legal, accounting and compliance requirements;
- improve the performance, security and functionality of GetCareStaff;
- analyse Platform usage; and
- establish, exercise or defend legal claims.
5. Matching and Automated Technology
GetCareStaff uses technology to help surface potentially relevant shifts and Carers based on information such as qualifications, experience, availability, location and stated preferences.
Automated tools may assist in organising or recommending opportunities and candidates. However, care organisations remain responsible for their recruitment and staffing decisions, including whether to accept or reject an applicant.
Where applicable law provides rights relating to solely automated decision-making producing legal or similarly significant effects, GetCareStaff will respect those rights.
6. Our Legal Bases
Depending on the circumstances, we may rely on one or more lawful bases under UK data protection law, including:
- Contract – where processing is necessary to provide services you have requested or to take steps at your request before entering into a contract;
- Legal obligation – where processing is necessary to comply with a legal requirement;
- Legitimate interests – where processing is necessary for our legitimate business interests or those of another party, provided those interests are not overridden by your rights and interests;
- Consent – where you have freely provided consent for a particular purpose; and
- other lawful bases or statutory conditions where required for special category or criminal-offence data.
Where processing is based upon consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.
7. Sharing Information
We do not sell personal information.
We may share personal information where reasonably necessary with:
- care homes and care organisations using GetCareStaff;
- Carers, where necessary to facilitate a booking or engagement;
- identity, background and compliance-verification providers;
- payment and financial-service providers;
- IT, hosting, communications and cybersecurity providers;
- professional advisers including lawyers, accountants, auditors and insurers;
- regulators, law-enforcement authorities and public bodies where required or permitted by law;
- companies within our corporate group where necessary for legitimate administrative or operational purposes; and
- prospective purchasers, investors or advisers in connection with a legitimate corporate transaction.
Service providers processing information on our behalf are expected to protect it appropriately and use it only for authorised purposes.
8. International Transfers
Some technology or service providers may process information outside the United Kingdom.
Where personal data is transferred internationally, we take appropriate steps to ensure that transfers comply with applicable data protection legislation, including through applicable adequacy regulations, recognised contractual safeguards or other lawful transfer mechanisms where required.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, regulatory, tax, accounting, safeguarding, contractual and dispute-resolution requirements.
Different categories of information may therefore be retained for different periods.
When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our retention procedures.
10. Security
GetCareStaff takes appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, accidental loss or destruction.
These measures may include access controls, authentication, encryption, monitoring, secure infrastructure and internal information-security procedures.
No internet-based system can, however, be guaranteed to be completely secure.
11. Your Data Protection Rights
Depending on the circumstances, UK data protection law may provide you with rights including the right to:
- request access to your personal data;
- request correction of inaccurate information;
- request erasure of information;
- request restriction of processing;
- object to certain processing;
- request portability of certain information;
- withdraw consent where processing relies upon consent; and
- raise concerns regarding certain automated decisions.
These rights are subject to statutory conditions and exemptions.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your personal information has been processed unlawfully.
We would welcome the opportunity to address any concern directly before a complaint is made to the ICO.
12. Cookies and Similar Technologies
GetCareStaff uses cookies and similar storage or access technologies to operate, secure and improve its website and Platform.
These technologies may include:
Strictly necessary technologies
These are required for essential website or Platform functions, including security, authentication, account access and session management.
Where applicable law permits, these may be used without consent because they are necessary to provide the service requested.
Functional technologies
These may remember settings or preferences and provide enhanced Platform functionality.
Analytics technologies
These may help us understand how visitors interact with GetCareStaff, identify technical issues and improve our services.
Marketing technologies
Where used, these may help us understand campaign performance or deliver and measure relevant advertising.
Non-essential technologies will only be activated where permitted under applicable law, including obtaining consent where required.
13. Cookie Controls
Where consent is required, users will be provided with controls enabling them to make choices about non-essential technologies.
Users can also control or delete cookies using browser settings, although disabling certain technologies may affect the operation of some Platform features.
Consent choices can be changed or withdrawn where applicable.
The precise cookies and similar technologies used by GetCareStaff may change as the Platform develops. Our cookie-management system should provide current information regarding applicable technologies, their purposes, providers and duration.
14. Marketing Communications
Where permitted by law, we may send service or marketing communications relating to GetCareStaff.
Individuals may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting us.
Operational communications necessary for an account, booking, transaction, security matter or service may still be sent where appropriate.
15. Third-Party Websites
GetCareStaff may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of independent third parties and encourage users to review the applicable privacy information before providing personal information.
16. Changes to this Policy
We may amend this Privacy & Cookie Policy periodically to reflect changes in our services, technology, business practices or legal obligations.
The latest version will be published on the GetCareStaff website with its effective or revision date.
17. Contact Us
Questions concerning this Policy, personal information or data-protection rights may be directed to:
GetCareStaff
Operated by Telyton Limited
Company Number: 16603759
C/O Ascentris
45 Albemarle Street
Mayfair
London
W1S 4JL
United Kingdom
Email: hello@tendocare.co.uk