Log in Request staff
Data Protection

Account & Data Deletion

How to request deletion of your account and personal data, and how MAP Health Care processes, restricts or retains data under applicable legal obligations.

MAP Health Care LTD Company No. 09723243 Version 1.0 Effective 28 June 2026

1Introduction

MAP Health Care LTD ("we", "our", "us") is committed to respecting the privacy rights of all users and ensuring that individuals have clear control over their personal data.

This Account & Data Deletion Policy explains how users can request deletion of their account and associated personal data, as well as how MAP Health Care processes, restricts or retains data in accordance with applicable legal obligations.

This Policy applies to all users of the MAP Health Care Platform, including healthcare professionals, healthcare providers and administrative users.

This Policy should be read alongside:

  • Privacy Policy
  • GDPR & Your Rights
  • Data Retention Policy
  • Terms & Conditions

2Your Right to Delete Your Account

Under UK General Data Protection Regulation (UK GDPR), you have the right to request deletion of your personal data in certain circumstances.

This includes the right to request deletion of your MAP Health Care account and associated personal data where:

  • the data is no longer necessary for the purposes for which it was collected
  • you withdraw consent (where processing is based on consent)
  • you object to processing and there are no overriding legitimate grounds
  • the data has been unlawfully processed

However, this right is not absolute and may be subject to legal, regulatory and safeguarding limitations.

3Scope of Deletion

When a user requests account deletion, MAP Health Care will assess and determine which data can be:

  • permanently deleted
  • anonymised
  • retained for legal or regulatory purposes
  • restricted from active processing

Account deletion may include removal of:

  • user profile data
  • CV and recruitment history
  • communication records (where applicable)
  • platform activity data
  • uploaded documents (subject to legal retention requirements)

However, certain categories of data may be retained where required by law.

4Legal Grounds for Retention After Deletion Request

MAP Health Care may retain certain data even after an account deletion request where required for:

  • compliance with UK employment law
  • safeguarding obligations in healthcare environments
  • tax and financial record-keeping requirements
  • fraud prevention and security investigations
  • legal claims or dispute resolution
  • regulatory or statutory obligations

In such cases, retained data will be:

  • restricted from active use
  • securely stored
  • accessible only to authorised personnel
  • retained only for the required duration

5Types of Data Affected by Deletion

A deletion request may apply to the following categories of data:

5.1Account Data

Includes:

  • name
  • email address
  • phone number
  • login credentials
  • profile settings

5.2Recruitment Data

Includes:

  • CVs and applications
  • job history
  • placement records
  • interview data
  • employer interactions

5.3Compliance Documentation

Includes:

  • DBS certificates
  • Right to Work documents
  • ID verification documents
  • training and certification records

(These may be retained longer due to legal obligations)

5.4Communication Data

Includes:

  • messages between users
  • support requests
  • platform notifications

6Account Deletion Process

Users may request deletion of their MAP Health Care account at any time by contacting us using the details provided in this Policy.

Upon receiving a deletion request, MAP Health Care LTD will:

  • Verify the identity of the requesting user
  • Confirm ownership of the account
  • Assess the legal basis for deletion
  • Determine applicable retention obligations
  • Process deletion, restriction or anonymisation where permitted
  • Provide confirmation of the outcome

We aim to process all valid deletion requests within one calendar month, in accordance with UK GDPR requirements. In complex cases, this period may be extended by up to two additional months.

7Account Deactivation vs Permanent Deletion

MAP Health Care distinguishes between account deactivation and permanent deletion.

7.1Account Deactivation

Account deactivation is a temporary suspension of access.

During deactivation:

  • the account is no longer accessible to the user
  • data remains stored securely
  • compliance and legal obligations remain active
  • reactivation may be possible upon request

7.2Permanent Deletion

Permanent deletion involves the removal or irreversible anonymisation of personal data, subject to legal retention requirements.

During permanent deletion:

  • user access is permanently removed
  • personal identifiers are deleted where legally permissible
  • compliance and financial records may be retained where required
  • system references are anonymised or replaced

8Partial Deletion and Retention Exceptions

In certain cases, full deletion may not be possible due to legal obligations.

MAP Health Care may therefore apply:

8.1Partial Deletion

Certain data elements may be removed while others are retained, for example:

  • removing profile data while retaining payroll records
  • deleting communication data while retaining compliance logs
  • removing CV data while retaining safeguarding records

8.2Retention Exceptions

Data may be retained where required for:

  • safeguarding investigations
  • employment law compliance
  • tax and accounting regulations
  • regulatory inspections
  • legal claims or disputes
  • fraud prevention and security monitoring

In such cases, data will be strictly restricted and not used for active processing.

9Data Anonymisation

Where deletion is not legally or operationally possible, MAP Health Care may anonymise personal data.

Anonymisation ensures that:

  • data can no longer be linked to an identifiable individual
  • all personal identifiers are permanently removed
  • data may be used for statistical, operational or analytical purposes

Anonymised data is no longer considered personal data under UK GDPR.

10Third-Party Data Deletion

MAP Health Care LTD uses third-party service providers to support Platform operations, including:

  • Supabase (database and storage)
  • Google Firebase (messaging and analytics)
  • Apple services (iOS infrastructure)
  • Google services (Android infrastructure)

Where a valid deletion request is processed, MAP Health Care will take reasonable steps to ensure that personal data held by third-party processors is also deleted or anonymised, subject to their technical capabilities and legal obligations.

Third-party providers may retain limited data where required for security, fraud prevention or legal compliance purposes.

11Security During Deletion Process

All deletion processes are carried out securely to prevent accidental loss, unauthorised access or data corruption.

Security measures include:

  • identity verification before processing requests
  • encrypted deletion workflows
  • access-controlled deletion systems
  • audit logging of all deletion actions
  • secure removal from primary and backup systems (subject to retention cycles)

Backup data may persist for a limited period until automatically overwritten under secure retention schedules.

12Record of Deletion Requests

MAP Health Care maintains internal records of deletion requests for compliance and audit purposes.

These records may include:

  • request date
  • identity verification status
  • type of request (deletion / restriction / anonymisation)
  • outcome of request
  • legal basis for retention (if applicable)

These records are retained for compliance purposes only and are not used for operational processing.

13Safeguarding and Legal Restrictions

Deletion requests may be refused or partially restricted where data is required for safeguarding purposes in healthcare environments.

This includes situations involving:

  • risk to vulnerable individuals
  • ongoing safeguarding investigations
  • suspected abuse or neglect
  • regulatory investigations
  • law enforcement requests

In such cases, MAP Health Care will retain only the minimum necessary data for the required purpose.

14Consequences of Account Deletion

Once an account is permanently deleted:

  • access to the Platform is permanently revoked
  • recruitment history may no longer be accessible
  • job applications and placements may be removed or anonymised
  • communications may no longer be recoverable

Users acknowledge that deletion is irreversible where fully executed.

15Re-Registration After Deletion

Users who have had their account permanently deleted may create a new account, subject to:

  • identity verification
  • compliance checks
  • eligibility requirements
  • Platform acceptance

MAP Health Care reserves the right to reject new registrations where previous serious breaches occurred.

16Policy Updates

MAP Health Care LTD may update this Account & Data Deletion Policy from time to time to reflect:

  • legal or regulatory changes
  • improvements to Platform functionality
  • changes in data processing practices
  • security enhancements

The latest version will always be available on our Platform.

Continued use of the Platform constitutes acceptance of any updated version.

17Contact Information

For all account deletion requests or enquiries, please contact:

MAP HEALTH CARE LTD

Company Number: 09723243

Registered Office:

Unit 36, Kingswood House, South Road, Kingswood, Bristol, BS15 8JF, United Kingdom

Email: info@maphealthcare.co.uk

Data Protection Contact: Marius Popescu

18Final Statement

MAP Health Care LTD is committed to respecting user rights under UK GDPR, including the right to erasure, while ensuring compliance with legal, regulatory and safeguarding obligations within the healthcare sector.

This Policy ensures that all account and data deletion requests are handled fairly, securely and transparently.

By using the MAP Health Care Platform, you acknowledge and understand the procedures described in this document.