1. Outlining References
Blue Mountain Homes Limited (“the Company”, “we”, “our”) takes your privacy seriously. This notice explains how we collect, use, store, and protect your personal data when you apply for a role with us, make an enquiry, or otherwise interact with us externally.
We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we determine how and why your personal data is processed.
If you have any questions about this notice, please contact:
Care Director
caredirector@bluemountain-homes.co.uk
2. What data we collect
Depending on your relationship with us (e.g. applicant, supplier, website visitor, or general enquirer), we may collect the following:
- Recruitment information: CV, application form, references, qualifications, interview notes, and pre-employment checks.
- Personal details: name, contact details, date of birth, and emergency contact details.
- Right to work information: passport, driving licence, or other identification documents.
- Communications: emails, enquiries, complaints, or correspondence with us.
Website data: IP address, browser type, and cookie data when you use our website (see our Cookie Policy).
We may also process special categories of data (e.g. health information, race, religion, trade union membership, criminal offence data) where it is necessary and lawful, such as to meet legal obligations, assess your working capacity, or monitor equal opportunities.
3. How we use your data
We process your personal data to:
- Assess your application, qualifications, and suitability for roles.
- Communicate with you about the recruitment process.
- Verify your identity and right to work in the UK.
- Carry out necessary background or reference checks.
- Keep records relating to our recruitment processes.
- Respond to enquiries, complaints, or requests.
- Maintain website security and improve user experience.
We will not use your data for unrelated purposes without informing you.
4. Lawful bases for processing
We rely on the following lawful bases under UK GDPR:
- Contract – to take steps at your request before entering into a contract (e.g. recruitment).
- Legal obligation – to comply with employment, immigration, health & safety, and tax laws.
- Legitimate interests – to manage our business, respond to enquiries, and improve our services, unless your rights override ours.
- Consent – in limited cases (e.g. using your photo for promotional purposes). You can withdraw consent at any time by contacting caredirector@bluemountain-homes.co.uk
5. Sharing your data
We may share your data with:
- Referees, background check providers, or occupational health professionals (for applicants).
- Our professional advisers (e.g. legal or HR consultants).
- IT and system providers who support our operations.
- Regulators, law enforcement, or government bodies where required by law.
We require all third parties to respect your data and process it lawfully and securely.
6. International transfers
We do not currently transfer your personal data outside the UK. If it becomes necessary in future, we will ensure appropriate safeguards are in place (e.g. adequacy regulations, International Data Transfer Agreement, or EU Standard Contractual Clauses) and inform you accordingly.
7. How long we keep your data
We will only keep your personal data for as long as necessary. Typical retention periods are:
- Unsuccessful applicant records: 6 months after the recruitment decision.
- Successful applicant records: moved into the employee privacy policy.
- Enquiry/complaint correspondence: up to 2 years.
- Website analytics/cookies: see Cookie Policy.
When data is determined to be no longer needed, it will be securely deleted or anonymised.
8. Your rights
You have the following rights under UK GDPR:
- Access – request a copy of the personal data we hold about you.
- Rectification – correct inaccuracies in your data.
- Erasure – request deletion where data is no longer needed or processed unlawfully.
- Restriction – request temporary suspension of processing in certain cases.
- Portability – request a copy of your data in a machine-readable format (applies to data you provided to us, processed by automated means, under consent or contract).
- Object – object to processing where we rely on legitimate interests.
- Withdraw consent – where processing is based on consent, you may withdraw it at any time.
- Complain – raise a concern with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk
To exercise your rights, contact the Care Director at caredirector@bluemountain-homes.co.uk
9. Data security
We use appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or destruction. Access to data is limited to those who have a legitimate need to know.
10. Updates to this notice
We may update this privacy notice from time to time. The latest version will always be available upon request.
