Privacy Policy

Information we collect

We collect only the information you choose to give us through a form on this website. If you contact us, we may collect:

• Your name.
• Your email address.
• Your company or organisation name.
• Your telephone number, if you provide one.
• Your preferred method of contact (email or phone).
• The services you are interested in, the number of people you need, working hours and time zone, and your expected start timing.
• Any description or additional details you choose to include in your message.
• For a Home Care enquiry (Canada only): the care setting, types of support, schedule, preferred language and location or postal code.
• Technical information generated by your browser and our web server when you visit the site or submit an enquiry. Depending on the interaction this can include your IP address, browser and operating-system information, device and screen characteristics, language and timezone settings, the referring page, the pages you requested, request timing, marketing attribution parameters such as UTM values or advertising click identifiers, and security-related request information.

How we use your information

We use the information you submit to respond to your enquiry, to prepare and send you information about our staffing services, and to manage our business relationship with you. We do not sell your personal information, and we do not use it for automated decision-making or profiling.

We use technical and access-log information to operate the website, to monitor for and prevent abuse and automated scanning, to investigate and troubleshoot delivery problems, and to produce internal aggregate analytics about how the site is used. When you submit an enquiry we include relevant technical context with that enquiry so our team can understand the context of the request and respond appropriately.

Access logs and security monitoring

Our servers keep access logs for website operations, security monitoring, abuse prevention, troubleshooting and internal analytics. Depending on the request these can include your IP address, the time of the request, the requested path, the response status, browser (User-Agent) information, the referring page, protocol and TLS information, and limited marketing attribution parameters.

These logs are used to detect and investigate automated scanning, denial-of-service attempts and other abuse, and to understand how visitors use the site. Requests that match known scanning patterns are recorded as security events.

We do not intentionally record contact-form message bodies, account credentials, cookies or form security tokens in these analytics access logs.

Approximate location derived from your IP address

We may derive approximate geographic and network information from your IP address using MaxMind GeoLite2 databases held on our own server. Depending on the data available, this can include country, region, city, postal area, approximate latitude and longitude, time zone, accuracy radius, autonomous system number (ASN) and network organisation name.

IP-based location is approximate. It is not intended to identify a precise street address, a household, or your exact physical location, and it may be wrong or incomplete. IP geolocation derived from MaxMind GeoLite2 data.

This information is used internally to understand where enquiries and visits originate, to operate the service and to support security monitoring. It is not used to identify you, and we do not offer a public address-lookup service or publish any database of visitor locations.

Cookies and similar technologies

This website sets no advertising or analytics cookies. Two limited, functional items are involved in submitting a contact form:

• A strictly necessary session cookie, named us360_form_session, is set when you open a contact form. It is HttpOnly, SameSite=Strict, restricted to the /api/leads path, and expires automatically. It exists only to protect the form against cross-site request forgery and cannot be used to identify you for any other purpose.
• A short-lived form token and CSRF token are fetched from our server when a form opens and sent back when you submit. These are not tracking technologies and store nothing about you.

How we protect your information

Contact form submissions are encrypted before they are written to storage, using AES-256-GCM authenticated encryption with a unique initialisation vector for each submission. Access to the encryption key is restricted to our server.

Once a submission has been delivered to us by email, the encrypted copy held in our system is deleted. If delivery has to be retried, the encrypted copy is retained only until delivery succeeds or the attempt is abandoned.

How long we keep your information

Enquiry details are retained for 30 days from the date of submission. After that period the stored submission is reduced to a minimal record — a reference number, a timestamp and a delivery-status log — which we keep so we can identify and answer any late or repeated enquiry, and to evidence that we received it.

If a submission could not be delivered, it is retained for the same period and then minimised in the same way.

Website analytics and access logs are retained on our server for approximately 30 days, after which they are deleted.

Daily internal reports about site traffic are emailed to our team. Those emails can contain visitor IP addresses and derived network and location information, and they are retained according to the retention settings of the receiving mailbox.

Where your information is sent

When you submit a form, the details you provided are emailed to our team so that a person can respond to you. That email is sent through our email provider over an encrypted connection.

We do not send your information to third parties for their own marketing, and we do not disclose it to third parties except where required by law or as necessary to protect the security of the service.

For IP geolocation we use MaxMind GeoLite2 databases, which are downloaded to our own server and queried locally. Your website requests are not sent to MaxMind for geolocation on each visit.

Security of the form

Our contact forms include anti-spam protection: submissions from automated tools are rejected, and submissions made implausibly quickly are paused. We also apply rate limits to protect the service from abuse.

Your choices and rights

You may ask us to correct, delete or provide a copy of the personal information we hold about you, or to stop contacting you. Because enquiry details are deleted or reduced to a minimal record after 30 days, it is quickest to contact us sooner if you would like something changed or removed.

You can also contact us if you have a question or concern about this policy or about how we handle your information.

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from children through this website.

Changes to this policy

We may update this policy from time to time. The version published on this page is the version that applies.