Skip to main content

Privacy Policy

1. Who We Are

FosterMatch is a platform operated by One City Global Ltd that supports the foster carer recruitment process for local authority councils across the United Kingdom.

Legal review required: The controller/processor determination depends on the engagement model with each council. Under Article 28, FosterMatch may act as a data processor on behalf of the council (controller). Under Article 26, FosterMatch and the council may be joint controllers. This must be confirmed with legal counsel.

2. Data We Collect

We process personal data of adult foster carer applicants only. No children's data is stored in the system. Data categories include:

  • Name, contact details, and address
  • DBS (Disclosure and Barring Service) check information
  • References and employment history
  • Medical disclosures
  • Training records and qualifications
  • Assessment notes and visit records
  • Uploaded documents (ID, certificates)

3. Lawful Basis for Processing

  • Legitimate interest: Operating the platform, analytics, and service improvement
  • Legal obligation: Fostering Services (England) Regulations 2011 and safeguarding duties
  • Contract:Processing necessary for the applicant's fostering application
  • Consent: Optional communications and marketing (where applicable)

4. How We Use Your Data

We process your data for the following purposes:

  • Managing the foster carer recruitment pipeline
  • Facilitating assessments and home visits
  • Document management and verification
  • Communication between applicants and social workers
  • Platform analytics and service improvement

5. Who We Share Your Data With

Your data is shared with:

  • The subscribing local authority council processing your application
  • Microsoft Azure (UK data centres only) for hosting and infrastructure

We do not sell your data or share it with third-party advertisers.

6. International Transfers

Your data is processed and stored exclusively within the United Kingdom (Azure UK South and UK West regions). We do not transfer your data outside the UK.

7. Data Retention

We retain applicant data for 10 years from the date of approval termination, in accordance with the Fostering Services (England) Regulations 2011. Data may be deleted earlier upon a valid erasure request (see section 8).

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectification of inaccurate data
  • Erasure of your data — this right is fully applicable as we process adult data only
  • Data portability — receive your data in a structured, machine-readable format
  • Restriction of processing
  • Object to processing based on legitimate interest

To exercise any of these rights, contact your subscribing council directly.

9. Cookies

FosterMatch uses essential cookies only: session management and CSRF protection. We do not use analytics, advertising, or tracking cookies. No cookie consent banner is required under PECR as only strictly necessary cookies are used.

10. Automated Decision-Making

FosterMatch may use AI-assisted features to support the assessment process. All AI-generated outputs are reviewed by a human social worker before any decision is made. No fully automated decisions are made under Article 22 of the UK GDPR.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Last updated: April 2026

← Back to home