Privacy Policy

Flame Health Associates LLP  Privacy & Data Protection (GDPR) Notice 

Company Name: Flame Health Associates (‘the Company’) 

Company Contact Details: Flame Health Associates, Bridgford Business Centre, 29 Bridgford Rd, West Bridgford, Nottingham NG2 6AU

– mydata@flamehealth.com

Document DP5A

Privacy Notice 

Topic: Data Protection

Date: [01/01/2020]

Version: [No 1]

The Company is a recruitment business, which provides recruitment services to its clients and candidates. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller. 

You may give your personal details to the Company directly, such as on an application or registration form or via our website, or we may collect them from another source such as a jobs board or social media. The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you, we will only use your personal data in accordance with the terms of the following statement. 

1. Collection and use of personal data         

a. Purpose of processing and legal basis 

The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services. The legal bases we rely upon to offer these services to you are:

• [Consent]
• [Legitimate interest]
• [Legal obligation]
• [Contractual obligation]

b. Legitimate interest

Where the Company has relied on a legitimate interest to process your personal data our legitimate interests is/are as follows:

The Company provide recruitment services to both candidates and clients as part of their business. They process personal data in order to be able to provide these services, they need to check the identity of candidates, verify CV detail, qualifications and governing body details if required, undertake references confirm their right to work to ensure suitability. It is in the legitimate interests of all parties involved – The Company, the Candidate and the Client – that the recruitment business can process personal data.

c. Recipient/s of data

The Company will process your personal data and/or sensitive personal data with the following recipients:

• Client/Clients that both The Company and The Candidate agree to approach in order for the Company to provide recruitment services to The Candidate and The Client.

d. Statutory/contractual requirement 

In order for The Company to provide recruitment services, your personal data is required by law and/or a contractual requirement (e.g. our client may require this personal data), and/or a requirement necessary to enter into a contract. You are obliged to provide the personal data and if you do not the consequences of failure to provide the data are:

• The Company is unable to introduce you/your details to the Client/Clients, resulting in The Company not being able to progress and process your application to The Client/Clients.

2. Data retention 

The Company will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time. 

The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.

Where the Company has obtained your consent to process your personal and sensitive personal data, we will do so in line with our retention policy. Upon expiry of that period (3 years), the Company will seek further consent from you. Where consent is not granted the Company will cease to process your [personal data/sensitive personal data].

3. Your rights

Please be aware that you have the following data protection rights:

• The right to be informed about the personal data the Company processes on you;
• The right of access to the personal data the Company processes on you;
• The right to rectification of your personal data;
• The right to erasure of your personal data in certain circumstances;
• The right to restrict processing of your personal data;
• The right to data portability in certain circumstances;
• The right to object to the processing of your personal data that was based on a public or legitimate interest;
• The right not to be subjected to automated decision making and profiling; and
• The right to withdraw consent at any time.

Where you have consented to the Company processing your personal data and sensitive personal data, you have the right to withdraw that consent at any time by contacting in the first instance the Data Processor or the Data Controller either by email: mydata@flamehealth.com or alternatively 01158114370. 

4. Complaints or queries 

If you wish to complain about this privacy notice or any of the procedures set out in it please contact The Data processor or Data Controller, either by email: mydata@flamehealth.com or alternatively 01158114370. 

You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.