Last Updated: 10.11.2025
In compliance with the EU General Data Protection Regulation (GDPR) (EU) 2016/679
CNC Empire Care Agency (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This policy explains how we handle your personal data.
1. Data Controller
CNC Empire Care Agency acts as the Data Controller for the personal information you provide.
Contact:
📧 info@palmerestates.co.uk
📍 3054 Lake Dr, Citywest Business Campus, Dublin 24, D24 HN20, Ireland
2. What Data We Collect
We may collect:
Personal data: Name, email address, phone number, postal address.
Employment data: CV, work history, references, qualifications (for job applicants).
Service data: Health or care preferences where necessary for care planning.
Technical data: IP address, browser type, cookies, analytics data.
We do not collect sensitive health data unless it is voluntarily and explicitly provided to support service delivery, and it is processed with your explicit consent.
3. How We Use Your Data
We process personal data for the following purposes:
Responding to inquiries and service requests.
Processing job applications.
Managing staff and client relationships.
Complying with legal obligations.
Improving our website and services.
4. Legal Basis for Processing
Under GDPR, we rely on the following lawful bases:
Consent: When you voluntarily provide data via forms or applications.
Contractual necessity: When data is required to provide our services.
Legal obligation: For employment, payroll, or care regulation compliance.
Legitimate interests: For internal administration, record keeping, and analytics.
5. Data Retention
We retain data only for as long as necessary for the purposes collected, or as required by law. Once no longer needed, data is securely deleted or anonymized.
6. Sharing of Data
We may share personal data with:
Authorized staff and contractors bound by confidentiality agreements.
IT or hosting service providers (e.g., website or cloud storage providers).
Regulators, auditors, or public authorities where legally required.
We never sell personal data to third parties.
7. International Data Transfers
We do not intentionally transfer your data outside the European Economic Area (EEA). If necessary, we ensure adequate safeguards are in place (e.g., EU Standard Contractual Clauses).
8. Your Rights under GDPR
You have the right to:
Access your data (Article 15).
Rectify incorrect or incomplete data (Article 16).
Request deletion (“right to be forgotten”) (Article 17).
Restrict or object to processing (Articles 18–21).
Data portability (Article 20).
Withdraw consent at any time.
To exercise these rights, contact info@palmerestates.co.uk. We aim to respond within 30 days.
9. Data Security
We use secure servers, encryption, and limited access controls to protect your data from unauthorized access, alteration, or loss.
10. Complaints
If you believe your data has been mishandled, you can contact the Data Protection Commission (DPC) in Ireland at www.dataprotection.ie.