Legal Compliance

Privacy Policy

Last Updated: June 15, 2026

1. Data Controller

Care2 Training Limited is the data controller for the personal data you provide through this website. For data subject requests, contact our Data Protection Officer at privacy@care2training.com.

2. What Data We Collect

We collect only the data necessary to provide our recruitment and education services:

• Identity Data: Full name, date of birth, nationality
• Contact Data: Email address, phone number, WhatsApp
• Professional Data: Occupation, experience, education level, language proficiency
• Service Data: Target country, programme of interest, enquiry messages
• Technical Data: IP address, browser type, device information (anonymised)

3. How We Use Your Data

We use your personal data solely for the following lawful purposes:

• Processing your application for international job placements or study programmes
• Communicating with you about your enquiry and next steps
• Sharing necessary information with verified employers or educational institutions
• Complying with immigration and visa processing requirements
• Anonymised analytics to improve our services

4. Legal Basis for Processing

Under UK GDPR, we process your data on the basis of consent (which you provide via the checkbox on our forms) and contractual necessity (to deliver the services you request). Under the New Zealand Privacy Act 2020, collection is necessary for our legitimate business functions and is authorised by your explicit consent.

5. Data Retention & Zero-Retention Policy

Care2 Training Limited operates a stateless transit architecture. Your personally identifiable information (PII) is encrypted in transit, routed to our designated corporate email, and hard-deleted from our web servers immediately upon successful SMTP dispatch. We retain only anonymised metadata (origin, target corridor, timestamp) for business intelligence. No PII is permanently stored on our shared hosting infrastructure.

6. Your Data Subject Rights

Under UK GDPR and the NZ Privacy Act 2020, you have the following rights:

• Right of Access: Request a copy of the data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Be Forgotten"): Request deletion of your data
• Right to Object: Object to processing for direct marketing
• Right to Data Portability: Receive your data in a structured format
• Right to Complain: Lodge a complaint with the ICO (UK) or Privacy Commissioner (NZ)

To exercise any of these rights, email privacy@care2training.com. We will respond within 30 days.

7. Data Sharing & Third Parties

We do not sell your data. We share your information only with:

• Verified employer partners in Canada, New Zealand, the UK, and Italy
• Partner universities and educational institutions
• Licensed immigration lawyers and visa consultants
• Cloudflare (bot protection and edge security)

8. Security Measures

We employ enterprise-grade security measures including: AES-256 encryption for data at rest, TLS 1.3 for data in transit, Cloudflare Turnstile bot mitigation, prepared statements to prevent SQL injection, and strict input sanitisation to prevent XSS attacks. Our web servers are protected behind Cloudflare's global edge network.

9. Cookies & Tracking

We use essential cookies for security (Cloudflare Turnstile) and minimal analytics cookies that do not identify individuals. We do not use third-party advertising cookies or trackers.

10. International Data Transfers

As a multinational organisation, your data may be transferred to Canada, New Zealand, the United Kingdom, Italy, and Bangladesh. We ensure appropriate safeguards are in place in compliance with UK GDPR Chapter V and NZ Privacy Act 2020 Principle 12.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

12. Contact Us

For privacy-related questions, data subject access requests, or complaints, please contact: