Who we are
This Privacy Policy explains what happens to your personal information when you register with, or are placed by, Direct Medics Limited, Lincoln Building, 6th Floor, 27-45 Great Victoria Street, Belfast, BT2 7SL ("Direct Medics", "we", "us").
Direct Medics is part of 1-Experience Group. As explained below, for certain purposes Direct Medics and other 1-Experience Group recruitment brands act as joint controllers of your information.
What information we collect
We collect the personal information you give us when you register as a candidate, including your name, contact details, CV, qualifications, job preferences and right to work information. Where relevant to your role, we also collect medical and vetting information needed to place you safely and lawfully, such as professional registration details, occupational health information and DBS/Access NI or equivalent checks.
How we use your information, and on what basis
We use your core candidate information (name, contact details, CV, job preferences) to register you, match you to suitable roles and manage your placement with Direct Medics. Where you have given us your consent to hold this information for this purpose, we rely on that consent.
We process medical and vetting information on the basis of our legitimate interests, for the narrow administrative purpose of confirming you are safe and eligible to work in a given role.
Sharing your information across 1-Experience Group
Direct Medics is part of 1-Experience Group, which also includes other medical recruitment brands. These other group brands act as joint controllers for the purpose of considering you for suitable opportunities across the wider group, not just with Direct Medics, under a joint controller agreement made under Article 26 UK GDPR.
We rely on our legitimate interests, and those of the other participating group brands, to do this: helping you access a wider range of suitable roles across the group, and helping our group brands fill roles efficiently, while keeping the way we handle your data consistent and providing you with one clear point of contact rather than several separate ones.
Where medical or vetting information is shared for this purpose, we rely on the same legitimate interests basis, together with the appropriate condition under Article 9 UK GDPR for special category data, restricted to what is necessary for assessing your suitability and eligibility for roles under consideration.
Your right to object
You have the right to object to your information being used in this way. If you do not want your information shared with, or used by, other 1-Experience Group brands for this purpose, you can tell us by emailing [email protected]. If we do not hear from you, we will proceed on the basis set out in this policy, but this is recorded internally as no objection having been raised, not as your having given consent to this specific use.
If you object, we will stop using your information for this purpose unless we can show compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is needed for the establishment, exercise or defence of legal claims.
This does not affect the separate service you receive from Direct Medics directly, which continues as before.
Who is responsible for your data
Direct Medics and the other participating 1-Experience Group brands are joint controllers for the group-matching purpose described above. Our joint controller agreement sets out each entity's responsibilities, including which of us you should contact for different purposes and how we each handle requests relating to your information. The essence of that agreement is set out in this policy; a full copy is available on request.
For Direct Medics-specific processing outside the group-matching arrangement (your day-to-day registration, booking, shift management and payroll), Direct Medics remains the sole data controller and your point of contact stays the same as it always has been.
Our Data Protection Officer
1-Experience Group has a single, group-level Data Protection Officer, who acts as the point of contact for data subjects and regulators across all participating group brands, including Direct Medics.
You can contact the Data Protection Officer at [email protected], or in writing at Lincoln Building, 6th Floor, 27-45 Great Victoria Street, Belfast, BT2 7SL.
International transfers
Where we or our group brands need to transfer your information between our offices in the United Kingdom and the Republic of Ireland, we do so on the basis that both jurisdictions maintain equivalent standards of data protection, and we put appropriate safeguards in place for any transfer outside the UK and EEA.
How long we keep your information
We keep your information for as long as is necessary to provide our services to you, to comply with our legal and regulatory obligations, and in line with our data retention schedule, details of which are available on request.
Your rights
Under UK GDPR (and EU GDPR, where you are based in the Republic of Ireland) you have the right to:
Access the personal information we hold about you; ask us to correct inaccurate information; ask us to erase your information in certain circumstances; ask us to restrict our use of your information; object to processing based on legitimate interests, including the group-matching use described above; and request that your information be moved to another organisation in a portable format, where technically feasible.
To exercise any of these rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or, if you are based in the Republic of Ireland, the Data Protection Commission (dataprotection.ie).
How we keep your information secure
Direct Medics maintains an Information Security Management System certified to ISO 27001, alongside ISO 9001 and Cyber Essentials Plus certification, and applies appropriate technical and organisational measures to protect your information, including access controls and password protection.
Changes to this policy
We may update this policy from time to time, including as the 1-Experience Group structure develops further. We will publish the current version here and, where the change is significant, notify existing candidates directly.
Contact us
If you have any questions about this policy or how your information is used, contact us at [email protected] or write to Lincoln Building, 6th Floor, 27-45 Great Victoria Street, Belfast, BT2 7SL.
Contact
Please address any questions, comments and requests regarding our data processing practices to Carla Reid – Data Protection Officer – [email protected].