Privacy Policy
1. Who we are
Beyond Healthcare Medical LLP ("we", "us") is a specialist recruitment business supplying staff to healthcare and social housing providers across the UK. Our registered office is 266 Rye Hill Park, Peckham, London SE15 3JX. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office under registration number ZC201310.
Questions about this policy or your data can be sent to contact@beyondmedical.co.uk or by post to the address above.
2. Who this policy covers
- Candidates and workers — people who apply for roles, register their interest, or are placed with our clients.
- Client contacts — people at hospitals, care providers, local authorities, housing associations and other organisations we supply staff to.
- Website visitors — anyone using this website.
3. What we collect
Candidates: name and contact details; your CV and the information in it (employment history, qualifications, skills); right-to-work documents; professional registration details where relevant (for example NMC or GMC registration); references; and the results of compliance checks required for the roles you apply for, including DBS (Disclosure and Barring Service) checks and, for security roles, SIA licence details. We may also collect bank details and payroll information once you are placed.
Client contacts: name, job title, organisation, business contact details and records of our dealings with you.
Website visitors: our hosting provider keeps standard server logs (IP address, browser type, pages requested, time of visit) for security and to keep the site running. This website does not use advertising or analytics cookies. Fonts are loaded from Google Fonts, which means your browser requests those files directly from Google; Google's own privacy policy applies to that request.
4. Why we use it and our lawful basis
- To find and place you in roles — assessing suitability, presenting you to clients, arranging interviews and placements. Lawful basis: taking steps at your request before entering a contract, and performance of that contract.
- To carry out the checks the law and our clients require — right-to-work checks under the Immigration, Asylum and Nationality Act 2006, DBS checks, professional registration checks. Lawful basis: legal obligation and, where applicable, substantial public interest conditions under the Data Protection Act 2018.
- To run the business — payroll, invoicing, record keeping required of employment businesses under the Conduct of Employment Agencies and Employment Businesses Regulations 2003. Lawful basis: legal obligation and legitimate interests.
- To keep in touch about roles that may suit you — lawful basis: legitimate interests, and consent where we send marketing by email. You can opt out at any time by contacting us.
5. Criminal records and other special category data
Because of the settings our staff work in, we process criminal records information (DBS certificates) and may process health information (for example occupational health clearance or fitness to work). We only do this where it is necessary for the role, under the employment and safeguarding conditions set out in Schedule 1 of the Data Protection Act 2018, and we keep this information more securely and for no longer than needed.
6. Who we share it with
- Clients you are put forward to or placed with, so they can consider you for and manage your placement.
- Compliance and referencing providers, the DBS, the Home Office right-to-work service, and professional registration bodies.
- Our payroll provider, BrightPay, and pension providers where relevant to your placement.
- Our IT, email and website hosting providers, who process data on our behalf under contract.
- Regulators, auditors or law enforcement where we are required to.
We do not sell personal data. Where a provider processes data outside the UK we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or an adequacy decision.
7. How long we keep it
We keep candidate records for one year after our last meaningful contact with you, unless you ask us to remove them sooner or a longer period is required by law (for example, employment business records must be kept for at least one year, and payroll records for six years). Client contact records are kept for the life of the relationship plus one year.
8. Your rights
You have the right to ask for a copy of your data, to have inaccurate data corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. To exercise any of these rights email contact@beyondmedical.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Security
We use appropriate technical and organisational measures to protect personal data, including access controls, secure storage of compliance documents and staff training. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your information.
10. Cookies
This website uses only the cookies strictly necessary for it to work, if any. We do not use tracking, analytics or advertising cookies. If that changes we will update this policy and, where required, ask for your consent first.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Continued use of the website after a change means you accept the updated policy.