1. Introduction
Gosab Care Limited (“Gosab Care,” “we,” “us,” “our”) is committed to protecting the privacy and security of your personal data. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it.
This policy applies to visitors to gosab-ireland.com (the “Site”), to people who contact us to enquire about our care services, to service users and their families or representatives, and to job applicants and staff who apply to work with us.
2. Who We Are
Gosab Care Limited is a company registered in Ireland, company number 792611, with its registered office at Block B, The Crescent Building, Northwood, Dublin 9, D09 C6X8, Ireland.
For the purposes of data protection law, Gosab Care Limited is the data controller responsible for your personal data.
Contact details: – Email: info@gosab-ireland.com – Telephone: +353 89 489 9169 – Post: Gosab Care Limited, Block B, The Crescent Building, Northwood, Dublin 9, D09 C6X8, Ireland
3. The Personal Data We Collect
Depending on how you interact with us, we may collect:
Website and enquiry data – Full name, email address and telephone number – The service you are enquiring about – The content of any message you send us – General technical data about your visit to the Site (such as browser type and pages viewed)
Care service data (where you, or someone on your behalf, enquires about or receives care) – Contact details for you and, where relevant, a family member or representative – Information about your care needs, preferences and living situation – Health and medical information relevant to your care, including conditions, medication, mobility and communication needs – Information relevant to your safety, such as risk assessments and safeguarding information
Job applicant and staff data – Identity and right-to-work documentation – Garda Vetting and, where applicable, international police clearance – References, qualifications and professional registration details – Employment history and training records – Driving licence and insurance details, where driving is part of the role
We only collect the information we need for the purposes set out in this policy.
4. How We Collect Your Data
We collect personal data: – directly from you — for example, when you complete our contact form, email or call us, or apply for a role; – from people involved in your care, such as family members, referrers or other professionals, where there is an appropriate basis for us to do so; – as part of our recruitment process — for example, from referees, Garda Vetting and professional bodies.
5. How We Use Your Data and Our Legal Basis
We use your personal data for the following purposes, on the legal bases shown:
- Responding to enquiries and providing information about our services — with your consent, or because it is in our legitimate interest to respond to you.
- Providing and managing care services — to perform our agreement with you, to protect the vital interests of a service user where necessary, and, for health information, with explicit consent.
- Carrying out safe recruitment, vetting and staffing — to comply with our legal obligations (including under the National Vetting Bureau (Children and Vulnerable Persons) Acts 2012–2016), because it is in our legitimate interest to place suitable staff safely, and, once a role is offered, to perform our contract with you.
- Meeting our obligations to the HSE, HIQA and other regulators, and responding to safeguarding concerns — to comply with our legal obligations, to protect vital interests, and because processing is necessary for reasons of substantial public interest in the area of health and social care.
- Maintaining accurate care and employment records — to comply with our legal obligations and our legitimate interest in keeping reliable records.
- Handling complaints, incidents and quality assurance — to comply with our legal obligations and our legitimate interest in providing a safe, high-quality service.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
6. Special Category Data (Health Information)
Because we provide care services, we may process special category data, including health, medical and, in some cases, mental capacity information. We only process this information:
- lawfully, fairly and transparently;
- for legitimate, clearly identified purposes connected with providing safe care;
- to the extent necessary for those purposes;
- keeping it accurate and up to date;
- retaining it only for as long as necessary; and
- storing it securely, with access limited to those who need it to do their job.
7. Who We Share Your Data With
We share personal data only where necessary, including with:
- our own staff and managers, and our Designated Safeguarding Person, on a need-to-know basis;
- the HSE, HIQA, Tusla, An Garda Síochána and other statutory or regulatory bodies, where we are required to do so by law;
- the National Vetting Bureau, for the purposes of Garda Vetting;
- referees, professional bodies and training providers, to verify staff suitability;
- professional advisers and service providers who support our business (such as IT providers), under appropriate confidentiality obligations.
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
8. Data Retention
We retain personal data only for as long as necessary for the purposes it was collected, and in line with applicable legal, regulatory and professional requirements. [Insert specific retention periods for each category of data — care records, employment records and vetting records are often subject to minimum statutory retention periods, so confirm these with your data protection adviser before publishing.]
9. Data Security
We take the security of your personal data seriously. In line with our internal policies, we:
- limit access to personal data to staff with a genuine work-related reason to see it;
- do not permit the sharing of passwords or login credentials;
- do not send confidential information through unauthorised channels;
- do not permit records to be photographed on personal devices;
- require any suspected data breach to be reported immediately, so it can be investigated and, where required, notified to the Data Protection Commission and affected individuals.
10. Your Rights
Under the GDPR, you have the right to:
- be informed about how we use your personal data;
- request access to the personal data we hold about you;
- request that inaccurate data be corrected;
- request that your data be erased, in certain circumstances;
- request that we restrict how we use your data, in certain circumstances;
- object to certain processing, including direct marketing;
- receive your data in a portable format, in certain circumstances;
- withdraw consent at any time, where we rely on consent;
- lodge a complaint with the Data Protection Commission.
To exercise any of these rights, please contact us using the details in Section 2.
11. Cookies and Website Analytics
Our Site may use cookies and similar technologies to help it function properly and to understand how visitors use it. [Insert details of the specific cookies used, and link to a cookie banner or settings tool, once confirmed.]
12. Children’s Data
Some of our services support children. Where we process a child’s personal data, we do so in line with the Children First Act 2015, we collect only what is necessary for their care or safety, and we normally do so with the involvement and consent of a parent or guardian.
13. International Data Transfers
We do not routinely transfer personal data outside the European Economic Area. Where this is necessary — for example, when processing an application from a candidate based outside Ireland — we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.
14. Changes to This Policy
We may update this policy from time to time, for example to reflect changes in the law or in how we operate. The date at the top of this page shows when it was last updated.
15. Contact Us
If you have any questions about this policy or how we handle your personal data, please contact us:
- Email: info@gosab-ireland.com
- Telephone: +353 89 489 9169
- Post: Gosab Care Limited, Block B, The Crescent Building, Northwood, Dublin 9, D09 C6X8, Ireland
16. How to Complain
If you are unhappy with how we have handled your personal data, we would welcome the chance to resolve this directly — please contact us first using the details above.
You also have the right to lodge a complaint with the Data Protection Commission, Ireland’s supervisory authority for data protection:
- Website: www.dataprotection.ie
- Email: info@dataprotection.ie
- Post: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland