Privacy notice
Last updated 26 September 2026
workinsocialcare.com is operated by Surf 4 Group Limited (company number 09831761, 128 City Road, London EC1V 2NX), the data controller for the information described here. Contact us at [email protected].
What we collect and why
Your job search conversation
What you type into the job assistant and the search it produces, so we can show and refine results.
- Lawful basis
- Legitimate interests (providing the service you asked for).
- Kept for
- 30 days, then deleted.
Please don't type personal details such as your health or contact information into the chat.
Email alerts and news
Your email address, optional first name, the search you want alerts for, and a record of your consent (what you agreed to and when).
- Lawful basis
- Consent.
- Kept for
- Until you unsubscribe; after that we keep only your email address and the date, so we never email you again by mistake.
Applying for a job
If you apply through our form for a job an employer posted with us, we send your name, email, optional phone number, message and optional CV to that employer by email, and email you a confirmation. Once it reaches them, the employer is responsible for your details under their own privacy policy. We don't keep your CV or message: we keep only your name, email, the job and the date, so we can stop duplicate applications and count how many applications each job gets.
- Lawful basis
- Steps you ask us to take before a possible contract (sending your application), and legitimate interests (preventing duplicates and misuse).
- Kept for
- 30 days, then deleted. Your CV isn't stored at all.
Job seeker accounts (optional)
If you create an account, we keep your email address, when you signed up and last signed in, and the jobs you save. Your account page also shows your job alert and the applications you've sent through our form. We sign you in with one-use links sent to your email, and a cookie keeps you signed in for up to 90 days. Recently viewed jobs are kept only in your browser.
- Lawful basis
- Contract (providing the account you asked for).
- Kept for
- Until you delete your account from your account page, or automatically after 2 years without signing in. While you have an account, we keep your application history so you can see it; otherwise it's deleted after 30 days.
Advertising enquiries
The contact details you give us, used only to reply.
- Lawful basis
- Legitimate interests.
- Kept for
- Up to 24 months.
Employer reviews
If you write a review, you sign in with Google and we receive your Google account ID, verified email address and name. We store these with your review so we can check it's genuine, stop duplicates and tell you when it's published. Your review is shown anonymously or with your first name and initial — your choice. We never show your email or share your identity with the employer.
- Lawful basis
- Legitimate interests (keeping reviews genuine and useful).
- Kept for
- While your review is on the site, then 12 months. Ask us to delete your review and account details at any time.
Employers we invite
If your organisation advertises social care jobs, we may create a free profile from those public adverts and, if we find a work contact (for example on your website), email that contact once — with at most one follow-up — to invite you to claim it. We keep the contact's name, work email or phone, where we found it and whether you replied or opted out.
- Lawful basis
- Legitimate interests (telling employers about their free profile). Every email lets you opt out with one click, and we then never email that address again.
- Kept for
- Until you claim the profile, or 24 months after our last email; opt-outs are kept so we don't contact you again.
Verified employer profiles
The name, job title, work email and optional phone number of the person who verifies a profile, the profile details they add, and billing records (Stripe customer and subscription references — we never see or store card numbers). The work email is shown on the profile as the recruitment contact and used for renewal notices and monthly reports.
- Lawful basis
- Contract (providing the verified profile you pay for).
- Kept for
- While the profile is verified, then up to 6 years for billing records, as tax law requires.
Your location (optional)
To show jobs near you. If you tap “Use my location”, or have already allowed location for this site, your browser shares your position and we send rounded coordinates to postcodes.io to find your nearest town. We keep only the town name, in your own browser — never your coordinates. Our hosting provider may also give us an approximate town based on your internet connection; we use it only to suggest nearby jobs and don't store it. You can change or clear your town at any time.
Usage statistics
Counts of searches and clicks, without names, emails or cookies, so we can improve the service. We also keep daily totals of views and clicks on employer profiles, job pages and sponsored jobs, which we send to those employers and advertisers as monthly reports. These are totals only — they never say who viewed or clicked.
- Kept for
- Search and click records up to 13 months; daily totals up to 25 months.
Who we share it with
- Job boards (such as Reed.co.uk, Adzuna and Careerjet): we send them the role, location and filters you searched for to fetch vacancies. For some providers we must also pass your IP address and browser type with the search. When you open a job you go to their website, and their privacy policy applies.
- Anthropic: the text of your chat messages is processed by Anthropic's Claude AI to understand your search.
- Google, when you sign in to write a review: Google confirms your account and email address to us. Google's privacy policy applies to your Google account.
- Stripe, which takes card payments for verified employer profiles and manages the yearly subscription. Stripe handles card details directly under its own privacy policy.
- Employers you apply to, when you use our apply form: they receive the details and CV you send, and their own privacy policy applies from then on.
- Our email provider (Brevo), to send the emails you asked for, and our hosting provider.
- Google, only if advertising is switched on and you agree to it through the consent banner shown at that time.
Some of these providers process data outside the UK under UK-approved safeguards such as the International Data Transfer Addendum.
Your rights
You can ask to access, correct or delete your data, object to processing, or withdraw consent at any time (every email has a one-click unsubscribe link). Email [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Job adverts
We don't employ, recruit for, or vet the employers whose vacancies we show. Always check the full advert and the employer before sharing personal information with them.