This notice explains how BOMACARE collects and uses your personal data when you apply to join our provider network.
1. Data we collect
- Identity: full name, national ID, KRA PIN, photograph.
- Contact: phone, email, physical address, next of kin.
- Qualifications: certificates, professional licence numbers (e.g. NCK), CV, references.
- Background: Certificate of Good Conduct, employment history, professional referees.
- Right-to-work and tax information.
2. Legal basis
We rely on: (a) steps taken at your request to enter into an engagement; (b) our legitimate interest in vetting professionals fairly and safely; and (c) compliance with legal obligations.
3. Uses
- Assess your application, verify credentials and take up references.
- Communicate with you about the application and, if successful, onboarding.
- Maintain a record of unsuccessful applications for equal-opportunity monitoring.
4. Retention
If your application is successful, your data becomes part of your provider file and is retained for the duration of the engagement plus a reasonable period thereafter. Unsuccessful applications are retained for up to 12 months, then deleted or anonymised.
5. Sharing
We share information with vetting partners (background-check providers), regulators (for licence verification), and referees you nominate. We do not sell applicant data.
6. Your rights
You may access, correct or delete your application data, and lodge a complaint with the Office of the Data Protection Commissioner. Contact info@bomahomecare.care.
