Privacy Policy

1. Introduction

Dita Health and Social Care Consultancy Ltd (trading as Dita Consulting) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at ditaconsulting.co.uk or engage with our services.

We are the data controller for the personal data we collect. We are registered under Company Number 5213648 in England and Wales.

2. What Data We Collect

We may collect and process the following personal data about you:

Information you provide to us:

• Name, email address, phone number, and organisation name (via our contact form)
• CV, work history, and professional references (for recruitment applicants)
• Training records and progress data (via our online training portal)
• Payment information (processed securely via our payment provider)

Information we collect automatically:

• Browser type and version, operating system, and IP address
• Pages visited, time spent on pages, and referral sources
• Cookie data (see our Cookie Policy for full details)

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide the services you have requested
• To process and manage recruitment applications and candidate placements
• To deliver training programmes and manage your learning portal account
• To send service-related communications (e.g. booking confirmations, invoices)
• To comply with our legal and regulatory obligations
• To improve and develop our website and services

We will only contact you for marketing purposes where we have your consent or a legitimate interest to do so, and you can opt out at any time.

4. Legal Basis for Processing

We process your personal data under the following legal bases as set out in UK GDPR:

• Contract: Where processing is necessary to fulfil a contract with you or to take steps prior to entering into a contract
• Legitimate Interests: Where we have a legitimate business interest in processing your data and that interest is not overridden by your rights
• Legal Obligation: Where we are required to process your data to comply with a legal obligation
• Consent: Where you have given us clear consent to process your data for a specific purpose

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Trusted service providers who assist us in delivering our services (e.g. IT providers, training platform providers), under appropriate data processing agreements
• Prospective employers or clients where you have applied for a position through our recruitment service, with your explicit consent
• Regulatory bodies or law enforcement where required by law

6. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Recruitment applicant data is typically retained for up to 12 months after the conclusion of a recruitment process. Client and financial data is retained for up to 7 years in accordance with HMRC requirements. Training records are retained for the duration of the learning relationship and up to 3 years thereafter.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restrict processing: to ask us to limit how we use your data
• Right to data portability: to request your data in a portable format
• Right to object: to object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses SSL encryption and our systems are kept up to date with security patches.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Cookies

We use cookies on our website. For detailed information about the cookies we use and why, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact & Complaints

If you have any questions about this Privacy Policy or how we handle your data, or wish to make a complaint, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.