Data Controller & Legal Framework

1. Identity of the Data Controller

In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, your personal data may be processed by [Your Company's Legal Name] ("Company" or "Platform") acting as the Data Controller, within the scope described below.

2. Processed Personal Data and Purposes of Processing

Our platform serves "Care Seekers" and "Caregivers". Your data is processed in two categories: mandatory data required for membership, and optional data you voluntarily provide to enhance your profile:

• Mandatory Identity and Contact Data: Your name, surname, email address, and phone number, which are essential for account creation and platform communication, are processed for the performance of a contract.
• Optional Verification Data (Identity & DBS Checks): To increase trust levels (e.g., obtaining a "Verified Profile" badge), Caregivers may voluntarily provide identity documents and criminal records (Disclosure and Barring Service - DBS checks), which are considered special category data. These are processed solely for profile verification based on your explicit consent. Failure to provide this data does not prevent you from using the core functions of the platform.
• Location Data: City, district, and neighborhood information processed to geographically match caregivers and care seekers accurately.
• Professional and Educational Data (For Caregivers): Resume, education status, and experiences processed to create your profile.
• Transaction Security Data: IP address and log records processed to fulfill our legal obligations.

3. Data Sharing and Third Parties

Your collected personal data may be shared within the conditions specified by UK GDPR:

• Other Users: Profile information of "Caregivers" and "Care Seekers" (including voluntarily provided verification badges) is shared mutually when a service request occurs.
• Service Providers: Transferred to our domestic/international business partners providing server hosting, SMS, and email delivery services to operate our infrastructure.
• Authorized Public Institutions: May be transferred to law enforcement or judicial authorities to fulfill our legal obligations.

4. Method and Legal Basis of Data Collection

Your personal data is collected electronically via forms and profile screens on our website/application. This data is processed based on the following legal grounds under UK GDPR:

• Processing is necessary for the performance of a contract (For mandatory membership data),
• Processing is necessary for compliance with a legal obligation to which the data controller is subject,
• Explicit consent for optional identity verification documents and special category personal data (DBS criminal records).

5. Your Rights as a Data Subject

Under the UK GDPR, you have the right to request access to, rectification, or erasure of your personal data. Most importantly, you have the right to withdraw your explicit consent for the optional DBS (criminal records) and identity verification data at any time, and request the immediate deletion of this data from our systems. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

To exercise your rights, you can contact us at destek@bakimplatformu.com using your registered email address.