Privacy notice
Draft for review by a qualified adviser. Highlighted items must be completed before launch. Version 2026-10.
Who we are
HealthData Talent UK Limited (“we”, “us”) is a recruitment agency registered in England and Wales, company number 17492692, registered office 74 Fishponds Road West, Woodthorpe, Sheffield, S13 8EB, UK. We are the data controller for the personal information described here and are registered with the Information Commissioner's Office, registration number [ICO number]. Contact our data protection lead at privacy@[yourdomain].
What we collect
Candidates
- Contact details: name, email, phone, location.
- Career information: CV, job titles, skills, qualifications, experience, salary expectations and availability.
- Right-to-work information, when needed for a specific role.
- For doctors: specialty and professional registration details.
- Notes from our conversations and records of the roles we discuss with you.
- A record of when you accepted this notice, including the date, your IP address and browser type.
Please do not include special category data such as health information, religion or ethnicity in your CV. If you choose to share it, we will only use it where the law allows, for example to make reasonable adjustments for an interview.
Employers and NGOs
- Business contact details and information about your vacancies.
Why we use it, and our lawful basis
- To find you suitable work and introduce you to employers: legitimate interests, and steps taken at your request before entering a contract.
- To meet our legal duties, including the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and right-to-work checks: legal obligation.
- To send job alerts: your consent, which you can withdraw at any time.
- To manage our relationship with employers: legitimate interests and contract.
Who we share it with
We send your CV and details to an employer only after you have agreed to be put forward for that specific role. We also use trusted service providers to host our website, email and database, under contracts that require them to protect your data. [List providers, e.g. hosting, email, CRM.]
International transfers
Where we introduce candidates to organisations outside the UK, such as international NGOs, or use providers that store data abroad, we use appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
How long we keep it
We keep candidate profiles for 24 months after our last meaningful contact, then delete them, together with the CV file, unless you ask us to keep them. We keep records required by the Conduct Regulations for at least one year from their creation, or longer where the law requires.
Your rights
You can ask us to access, correct, delete or restrict your data, to object to how we use it, or to transfer it to you. Email privacy@[yourdomain] and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.
Security
Our website uses encrypted connections (HTTPS). Access to candidate data is limited to staff who need it and protected by two-factor authentication. CV files are held in private storage that cannot be reached from the public web, and each time a member of staff opens a profile or downloads a CV it is recorded.
Cookies
We use only cookies that are strictly necessary for the website to work: one that keeps your form session secure. If we add analytics, we will ask for your consent first.