Data Handling Notice

This notice summarizes how Citizens Care Connect handles sensitive employment and credential information. It complements our Privacy Policy.

Sensitive documents

• Documents such as identification, licenses, health records, and background-check materials are stored outside the public web directory and encrypted at rest.
• Files are never accessible through public or guessable links. Downloads are served only through authenticated, permission-checked, time-limited links.
• Every view, download, upload, and deletion of a sensitive document is recorded in an audit log.

Access control

• Candidates control their own profile and documents.
• Organizations can view an applicant’s credential and compliance status, and — only for candidates who applied to their roles — the underlying documents, with each access logged.
• Internal compliance reviewers access documents on a need-to-know basis to perform verification.

Retention and deletion

You can request deletion of your account and documents. Some credential, compliance, and hiring records may be retained for a defined period where required by law or by an organization’s regulatory obligations. Where records must be retained, access is restricted.

Third-party processors

Where verification, background-check, identity, or e-signature providers are used, information is shared only as needed for that check, under contract, and with your consent where required.

Contact

Questions about data handling can be sent through our contact page.