Privacy Policy

Flame Health Associates LLP – Privacy & Data Protection (GDPR) Notice

Effective Date: 10 October 2025
Version: 2.0
Document Reference: DP5A

1. Introduction

Flame Health Associates LLP (“Flame Health”, “we”, “us”, or “our”) is a specialist healthcare recruitment business providing recruitment and career consultancy services to candidates and clients across the UK and Ireland.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

By engaging with us, submitting your CV, or using our website (flamehealth.com), you acknowledge that you have read and understood this Privacy Notice.

2. Company Details

Company Name: Flame Health Associates LLP
Address: Bridgford Business Centre, 29 Bridgford Road, West Bridgford, Nottingham, NG2 6AU
Email: [email protected]
Telephone: 0115 811 4370

Data Controller: Flame Health Associates LLP
Data Protection Contact: [email protected]

3. What Personal Data We Collect

We may collect and process the following personal information about you:

• Identification details: Name, address, contact information, date of birth, and right-to-work documentation.
• Employment information: CV, work history, education, professional qualifications, and references.
• Sensitive data (special category): Health data, professional registrations (e.g. GOC, HCPC, GPhC), or criminal record checks, only where relevant to specific roles.
• Digital data: Information submitted via our website, job portals, or social media platforms.

4. How We Obtain Your Data

We may collect your personal data:

• Directly from you (via our website, registration forms, job applications, or during phone/email communication).
• From publicly available sources such as LinkedIn, CV databases, or job boards.
• From third parties such as referees, clients, or background screening providers.

5. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Legitimate Interest:
As a recruitment business, it is in the legitimate interest of Flame Health, our candidates, and clients to process personal data to identify suitable job opportunities, verify credentials, and ensure compliance with employment regulations.

6. Data Sharing

We may share your data with:

• Our clients, but only where you have provided consent or expressed interest in a specific opportunity.
• Background check or verification providers.
• Professional regulatory bodies, if legally required.
• Our website hosting, CRM, or IT support providers under strict data protection agreements.

We do not sell or rent your data to third parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this notice or as required by law.

• Under the Conduct of Employment Agencies and Employment Businesses Regulations 2003, we are required to keep work-seeker records for at least one year from the date of last contact or service provision.
• With your consent, we will retain your personal and sensitive data for up to three (3) years to inform you of relevant roles and updates.
• After this period, we will seek renewed consent or securely delete your data.

8. Your Data Protection Rights

You have the following rights under data protection law:

• Right to be informed – about how your data is used.
• Right of access – to request a copy of your data.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure – to request deletion in certain circumstances.
• Right to restrict processing – where accuracy or legality is contested.
• Right to data portability – to obtain and reuse your data.
• Right to object – to processing based on legitimate interests.
• Right to withdraw consent – at any time, where processing is based on consent.
• Right not to be subject to automated decision-making or profiling without human involvement.

To exercise any of these rights, please contact us at [email protected] or call 0115 811 4370.

9. International Data Transfers

Your personal data is primarily stored and processed within the UK.
If we transfer data outside the UK (for example, to cloud or CRM providers), we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the UK ICO.

10. Data Security

We implement appropriate technical and organisational measures to safeguard personal data, including encrypted systems, access controls, and secure disposal processes to prevent unauthorised access, alteration, or loss.

11. Complaints and Queries

If you have any questions or concerns about this Privacy Notice or how we handle your data, please contact our Data Protection Contact:

📧 [email protected]
📞 0115 811 4370

If you remain dissatisfied, you can contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns/
Telephone: 0303 123 1113

12. Updates to This Privacy Notice

We may update this notice from time to time to reflect legal, technical, or operational changes. The latest version will always be available on our website.
Last Updated: 10 October 2025