1. Who we are
Abrams Grp LLP (Company No. OC437246 · VAT No. GB400170172) of Enterprise House, David Lane, Basford, Nottingham NG6 0JU is the data controller for personal data collected through our websites, including abramsgrp.com and abramshealthcare.co.uk.
Privacy contact: info@abramsgrp.com · +44 115 777 0127. We have not appointed a statutory Data Protection Officer. Use the privacy contact for all data protection requests.
2. Whose data this covers
This notice covers website visitors, people who send enquiry or Find a Carer forms, learners and course buyers, staffing candidates and client contacts, and people who create an account. Staff and contractor HR files are covered by our internal employment notices, not this page.
3. What we collect
| Category | Examples | Typical source |
|---|---|---|
| Identity and contact | Name, email, phone, organisation, job title, address | You, your employer, or a form you submit |
| Account | Username, hashed password, login records | You, when you register |
| Orders and payments | Course purchases, order numbers, billing address, PayPal transaction references. We do not store full card numbers. | You and PayPal |
| Learning | Enrolments, progress, quiz results, certificates | Our training platform |
| Staffing and care enquiries | Role, availability, location, and any care-need details you choose to give | You or a client organisation |
| Identity documents (vetting only) | ID, proof of address, application forms for a DBS or similar check you have asked us to process | You |
| Technical | IP address, browser, device, pages viewed, cookies | Your device and our hosts |
| Messages | Emails and form contents | You |
Some staffing or Find a Carer details may be special category data (for example health or care needs) if you choose to provide them. We only use that information to handle the enquiry you sent.
4. Why we use it and the lawful basis
| Purpose | Lawful basis (UK GDPR Article 6) |
|---|---|
| Provide accounts, courses, certificates and support | Contract |
| Take payment, refunds, invoices and tax records | Contract and legal obligation |
| Answer enquiries, including Find a Carer and staffing | Contract or legitimate interests (responding to a request you made) |
| Vetting checks you have ordered | Contract, legal obligation, and explicit consent where special category data is involved |
| Service messages (receipts, access, expiry) | Contract |
| Optional marketing email | Consent (PECR). You can withdraw at any time. |
| Security, fraud prevention, improving the site | Legitimate interests |
| Non-essential analytics or advertising cookies | Consent (PECR) |
Where we rely on legitimate interests, those interests are running a secure UK training, staffing and business-support service and answering people who contact us. You can object. See section 9.
5. Who we share data with
We do not sell personal data. We share it only as needed with:
- Payment processors (PayPal)
- Website and LMS hosts (WordPress.com / Automattic and related plugins)
- Email and office tools (Google Workspace)
- The Disclosure and Barring Service or other vetting bodies, only for checks you have asked us to process
- Professional advisers (for example accountants) under confidentiality
- Regulators or law enforcement where the law requires it
- Client organisations, only where you are a candidate or worker they have engaged us about, and only as needed for that engagement
6. International transfers
Some providers (including Automattic / WordPress.com, PayPal and Google) may process data outside the UK. Where that happens we rely on UK adequacy regulations where they apply, or on standard contractual clauses or equivalent UK transfer tools. Ask us if you want more detail on the safeguards.
7. How long we keep data
- Accounts and learning records: while the account is active, then up to 12 months unless a certificate or legal record must be kept longer
- Orders and invoices: 6 years (tax and accounting)
- Enquiry forms: up to 12 months after we close the enquiry, unless a contract follows
- Vetting identity documents: only as long as the vetting body’s rules require, then deleted
- Marketing consent records: until you withdraw consent, then up to 12 months as proof of that withdrawal
- Security logs: as long as needed to investigate incidents, then deleted or anonymised
8. Cookies and similar technologies
PECR applies to cookies. Essential cookies keep you signed in, hold a basket, and protect the site. They do not need consent. Analytics, advertising or other non-essential cookies run only if you agree in the cookie banner. You can change that choice in the banner or in your browser. Blocking essential cookies may stop login or checkout from working.
9. Your rights
You can ask us to access your data, correct it, delete it (where the law allows), restrict or object to processing, and receive a portable copy where that right applies. If we use consent, you can withdraw it as easily as you gave it.
Right to object. You may object at any time to processing based on legitimate interests, including profiling related to those interests, and to direct marketing. We will stop marketing as soon as we can after you tell us.
Email info@abramsgrp.com from the address we hold for you. We aim to reply within one month. We may need to confirm your identity. You do not have to give data if a form is optional; if data is required for a course, payment or a check, we will say so on that form and we may not be able to provide the service without it.
10. Automated decisions
We do not make solely automated decisions that have legal or similarly significant effects on you.
11. Children
Our public sites and courses are aimed at adults. We do not knowingly offer accounts to children under 13.
12. Complaints
Please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
13. Changes
We will update this page when our processing or the law changes. The date at the top is the latest version.