Privacy Policy

Last updated: 7 September 2026

This policy applies to ibcare.co.uk and the services provided under the iB Care brand by RAYBIC LIMITED, a company registered in England (Company No. 16461518), whose registered office is 121 Burney Drive, Eagle Farm South, Milton Keynes, England, MK17 7BT ("iB Care", "we", "us", "our").

iB Care is a healthcare staffing agency. Protecting the personal information of the clients, care professionals and website visitors we work with is central to how we operate. This Privacy Policy explains what personal data we collect, why, how we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is the data controller?

RAYBIC LIMITED, trading as iB Care, is the data controller responsible for your personal data. You can reach us using the details at the end of this policy.

2. The personal data we collect

If you are a client (care home, supported living or healthcare provider)

• Your name, job title, organisation, email address and telephone number;
• Booking and shift details, site addresses and any specific requirements you give us;
• Billing and account information.

If you are a care professional or job applicant

• Identity and contact details (name, date of birth, address, email, phone);
• Right-to-work documents, references and employment history;
• DBS certificate details and other pre-employment checks;
• Training records and certificates (for example the Care Certificate, safeguarding, moving & handling, infection prevention);
• Bank details and National Insurance number for payment, and pension information;
• Where relevant to a role, health and fitness-to-work information (special category data).

If you visit our website

• Information you submit through our contact and booking forms;
• Limited technical data and cookie preferences — see our Cookie Policy.

3. How and why we use your data (lawful bases)

Purpose	Lawful basis
Providing staffing services and fulfilling bookings	Performance of a contract
Recruiting, vetting and placing care professionals	Contract; legitimate interests; legal obligation
Right-to-work, DBS and safeguarding checks	Legal obligation; substantial public interest (safeguarding)
Processing pay, tax and pensions	Legal obligation; contract
Handling health / fitness-to-work information	Employment, social security and safeguarding (Article 9 conditions)
Responding to enquiries and website messages	Legitimate interests
Non-essential cookies and analytics	Consent

4. Who we share your data with

We only share personal data where necessary, and never sell it. Recipients may include:

• Client organisations, so a placement can go ahead;
• The Disclosure and Barring Service and reference providers, for vetting;
• HMRC, pension providers and payroll/umbrella partners, where relevant;
• Regulators, local authority safeguarding teams and law enforcement where we are legally required to, or to protect people at risk;
• Trusted IT and hosting providers who process data on our behalf under a written contract.

5. How long we keep your data

We keep personal data only for as long as necessary for the purposes above and to meet our legal, tax and regulatory obligations. Recruitment and placement records are generally retained in line with statutory requirements (for example payroll records for at least six years). When data is no longer needed, we securely delete or anonymise it.

6. Keeping your data secure

We use appropriate technical and organisational measures — including access controls, encryption in transit, and staff confidentiality obligations — to protect personal data against loss, misuse or unauthorised access. Our staff compliance records are held in a secure, access-controlled system.

7. International transfers

Your personal data is stored and processed within the UK/European Economic Area. If we ever need to transfer data outside the UK, we will ensure an appropriate safeguard (such as UK adequacy regulations or standard contractual clauses) is in place.

8. Your rights

Under the UK GDPR you have the right to: be informed; access your data; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to processing; data portability; and rights relating to automated decision-making. To exercise any of these, contact us using the details below — we will respond within one month.

9. Complaints

We hope to resolve any concern directly, but you have the right to complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, tel 0303 123 1113, ico.org.uk.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with a revised "Last updated" date.

Contact us

For any question about this policy, or to exercise your rights, contact us:

• Email: hello@ibcare.co.uk
• Phone: +44 121 816 2255
• Post: Data Protection, RAYBIC LIMITED (t/a iB Care), 121 Burney Drive, Eagle Farm South, Milton Keynes, England, MK17 7BT