Privacy Policy

Construction Worker Care Ltd
Effective Date: 2 August 2026

1. Introduction

Construction Worker Care Ltd ('we', 'our', 'us') is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and your rights.

2. Information We Collect

• Full name, date of birth, address, email address and telephone number.
• National Insurance (NI) number where required.
• Photo identification (passport, driving licence or other accepted ID).
• Proof of address.
• Qualification certificates and training records.
• CITB Health, Safety & Environment Test information.
• Marriage certificate or supporting documents where required to verify identity or name changes.
• Payment information processed securely by our PCI-compliant payment provider. We do not store full card details.
• Communications sent by email, telephone or contact forms.

3. How We Use Your Data

• Process CSCS card application assistance.
• Arrange CITB test bookings.
• Arrange Level 1 Award bookings.
• Verify identity and eligibility.
• Provide customer support and updates.
• Prevent fraud and comply with legal obligations.
• Maintain business records and improve our services.
• Process payments for our services (for example CITB test bookings from £45 and CSCS card applications from £65, which include official base fees plus our administration and service charges as set out in our Terms & Conditions).

4. Legal Basis

We process personal data where necessary to perform our contract with you, comply with legal obligations, pursue our legitimate business interests, or where you have provided consent.

5. Who We Share Data With

• Construction Worker Care Ltd authorised employees.
• CSCS Ltd where required for card applications.
• CITB where required for test bookings.
• Approved training providers and awarding organisations.
• Our secure payment provider for card payment processing.
• IT, hosting and email providers supporting our business.
• Government departments, regulators, law enforcement or official bodies where legally required.

6. Data Security

We use appropriate technical and organisational security measures, including encrypted connections (SSL/TLS), restricted staff access, strong authentication and secure storage where reasonably practicable.

7. Data Retention

We retain personal information only for as long as necessary to provide our services, meet legal, tax and regulatory obligations, resolve disputes and protect our legal rights. Identity documents are retained only for as long as reasonably necessary for these purposes.

8. Your Rights

• Request access to your personal data.
• Request correction of inaccurate information.
• Request deletion where applicable.
• Request restriction of processing.
• Object to certain processing.
• Request data portability where applicable.
• Lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Cookies

Our website may use essential cookies and analytics cookies to improve functionality and understand website performance. A separate Cookie Policy may provide further details.

10. Contact

This draft should be reviewed with a UK legal professional before publication to ensure it reflects your final operations and legal obligations.