Recruitment GDPR statement and privacy policy
The full policy is set out below.
Consent to Store Your CV and Personal Data on our Secure Database
We take your data privacy seriously. In order for us to help you find a new opportunity, we need your permission to store your CV and some personal data on our secure database. This allows us to match you with relevant opportunities as we get them from our clients. It also enables us to send you information regarding new positions and other relevant news or information where appropriate (which you can unsubscribe from at any point).
(Please note, we will never send your details to a client of ours without first discussing the opportunity with you and obtaining your permission prior to doing so).
ID Request
In line with current recruitment law, we are required to obtain proof of identification (ID) for each candidate that we represent, this is to evidence your eligibility to work within the UK. When obtained, the ID will be stored on our secure database, in line with our privacy policy and GDPR guidelines.
Privacy Policy
To enable us to provide our services to you, we must process personal data (including sensitive personal data). This policy is to outline how we collect and use your personal data.
Collection of your personal data
You may give your personal details to HLTH Compliance directly, such as on an application or registration form or via our website, or we may collect your details from another source such as a job board, LinkedIn or via recommendation / referral.
HLTH Compliance must have a legal basis for processing your personal details. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you, we will only use your personal data in accordance with the terms of this policy.
Categories of personal data we may collect
The information we collect enables us to inform you of available opportunities and to assess your suitability. We may also collect sensitive personal data about you, we will only collect and process sensitive personal data from you, where you have given your explicit consent.
The information we may collect, includes: Personal Data
- Contact details, Name, Address, Email Address, Phone Number(s)
- Date of Birth
- CV / Employment history
- Education, Training & Qualifications
- Details of any professional registrations i.e. NMC, GMC etc.
- Identification documents
- National Insurance Number
- Immigration status
- Referee details
- Any additional information that you, your referees or our clients may provide about you.
Sensitive Personal Data
- Disability/health condition relevant to the role
- Criminal conviction
- Nationality
For the avoidance of doubt, the above lists of categories of personal data are not exhaustive.
How we will contact you
We may contact you through the following methods
- Telephone
- Text message
- Post
- Other social media platforms
How we use your personal data
HLTH Compliance will process your personal data to provide you with work-finding services. We use your personal data to match your skills, experience, training & qualifications with potential opportunities with clients who we work with. Once an opportunity has been identified of interest, we will pass your details on to our client for consideration.
We may collect further information from you throughout the interview process and beyond to support and comply with the whole recruitment process. This may include the processing of sensitive personal data that you or others may provide to us, in this instance, we will ask for your consent before processing this information.
Our legal basis for processing your personal data
The legal basis we rely upon to offer our services to you are
- Consent
- Legal obligation
- Contractual obligation
- Legitimate interest
Where we have relied on a legitimate interest to process your personal data, our legitimate interests are as follows:
- You have made an application or have sent your CV to HLTH Compliance
- To provide you with information on opportunities that may be of interest
- Assess suitability for potential job opportunities
- To find potential candidates for vacancies we are working on
- To keep work seeker records accurate and up to date
For clients, we will collect and store your company and employee’s personal data for the purpose of providing you with suitable candidates for job opportunities. The information we collect, and store will include information about job role requirements, meetings that have taken place, email communications and conversations taken place. This will enable us to continue to provide you with an effective and relevant recruitment service.
The HLTH Compliance may share your personal data as required by law, regulatory bodies or for accounting and audit purposes.
How long do we keep your personal data for?
The HLTH Compliance will retain your personal data for as long as is necessary. Different laws require us to keep different data for different periods of time.
The conduct of Employment Agencies and Employment Businesses Regulations 2003 require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
Should The HLTH Compliance have no meaningful contact with you for a period of 5 years, we will cease to process your personal data and/or sensitive personal data, unless we are required to keep it by law, for a regulatory body or for accounting and audit purposes.
Objection to providing information
Your information is required to enable The HLTH Compliance to provide you with work-finding services. Failure to provide the necessary personal data or object / restrict the processing of your personal data, will mean we will not be able to inform you of potential job opportunities or put your details forward to our clients for consideration.
Overseas Transfers
Some of the service providers we use to run our business, such as our email, IT and website providers, may process personal data outside the UK, including in the United States. Where personal data is transferred outside the UK, we make sure it is protected by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Your Rights
Please be aware that you have the following data protection rights:
- The right to be informed about the personal data the company processes on you;
- The right of access to the personal data the company processes on you;
- The right to revivification of your personal data;
- The right to erasure of your personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time
Where you have consented to The HLTH Compliance to process your personal data and/or sensitive personal data you have the right to withdraw that consent at any time by sending an email to for the attention of Danielle Bent (Recruitment Manager) at danielle.b@hlth-compliance.com
Complaints or Queries
If you wish to complain about this privacy policy or any of the procedures set out in it, please contact Danielle Bent by sending an email to danielle.b@hlth-compliance.com
You also have the right to raise concerns with Information Commissioners Office on 0303 123 1113 or at https://ico.org.uk/concerns/ , or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.
A clear next step, before a big commitment
Speak to one of our experts
Clinicians, a former CQC inspector and a former Registered Manager.
A 15-minute introductory call to explain your situation, explore the right support and discuss the next step.