How MAP Health Care collects, uses, stores, protects and shares your personal information across our website, mobile application and recruitment platform.
MAP Health Care LTD ("MAP Health Care", "we", "our", or "us") is committed to protecting the privacy, confidentiality and security of the personal information entrusted to us.
As a specialist healthcare recruitment and workforce management provider operating throughout the United Kingdom, we understand the importance of handling personal information responsibly. Our services require us to process information relating to healthcare professionals, healthcare providers and other individuals seeking or offering employment opportunities within the health and social care sector.
This Privacy Policy explains how MAP Health Care collects, uses, stores, protects and shares personal information when you access or use:
It also explains your privacy rights under applicable UK data protection legislation and how you may exercise those rights.
By using our Platform or submitting personal information to MAP Health Care, you acknowledge that you have read and understood this Privacy Policy.
MAP Health Care LTD is the Data Controller responsible for determining how your personal information is collected, used and protected.
MAP HEALTH CARE LTD
09723243
Unit 36, Kingswood House, South Road, Kingswood, Bristol, BS15 8JF, United Kingdom
info@maphealthcare.co.uk
Marius Popescu
If you have any questions regarding this Privacy Policy or wish to exercise any of your privacy rights, please contact us using the details above.
Protecting personal information is one of our core responsibilities.
We are committed to ensuring that every item of personal information entrusted to us is processed responsibly, securely and only where there is a legitimate legal basis for doing so.
Our privacy practices are designed to ensure that personal information is:
We continually review our privacy and security practices to ensure they remain aligned with current legislation, industry standards and evolving cyber security risks.
This Privacy Policy applies to anyone who interacts with MAP Health Care through our website, mobile application or recruitment platform.
This includes, but is not limited to:
Different categories of Users may provide different types of information depending upon the services they access.
The personal information we collect depends on the relationship you have with MAP Health Care and the services you use.
In most cases, we collect information directly from you. However, in certain circumstances we may also receive information from employers, recruitment partners, referees, regulatory bodies or publicly available professional registers where this is necessary for recruitment, compliance or legal purposes.
The categories of information we process are described below.
To establish and manage your account, we may collect personal information that identifies you as an individual.
This may include:
We collect only the identification information necessary to verify identity, comply with legal obligations and facilitate recruitment activities.
To communicate effectively with you throughout the recruitment process and during your use of the Platform, we collect contact information including:
You are responsible for ensuring that your contact information remains accurate and up to date.
Where you register as a Healthcare Professional, we collect information relevant to your employment history and professional experience.
This may include:
This information enables us to identify suitable employment opportunities and match you with appropriate healthcare providers.
Because MAP Health Care operates within the healthcare sector, we process professional information necessary to assess suitability for recruitment opportunities.
This may include:
Where applicable, professional registration status may be periodically verified with relevant regulatory bodies.
Healthcare recruitment requires strict compliance with employment legislation and sector-specific regulations.
Accordingly, we may collect and process compliance documentation including:
These documents are processed solely for recruitment, verification and compliance purposes.
Where payment or payroll services are required, we may collect limited financial information necessary to facilitate lawful payment processing.
This may include:
Financial information is processed securely and only where required for contractual or legal purposes.
Whenever you use our website or mobile application, certain technical information is collected automatically.
This may include:
This information assists us in maintaining the security, stability and performance of our Platform.
To improve our services and ensure reliable operation of the Platform, we maintain records of how Users interact with our systems.
This may include information relating to:
Activity logs help us maintain Platform security, investigate incidents and improve the overall user experience.
Due to the nature of our business, MAP Health Care may process Special Category Personal Data as defined under Article 9 of the UK General Data Protection Regulation.
This may include information relating to:
Special Category Personal Data receives additional legal protection and is processed only where an appropriate lawful basis and additional condition under UK GDPR has been satisfied.
Access to such information is restricted to authorised personnel who require access in order to perform their duties.
We collect personal information in several different ways.
Most information is provided directly by you when you:
We may also receive information from healthcare providers, professional referees, recruitment partners, regulatory organisations and public professional registers where appropriate and lawful.
In addition, certain technical information is collected automatically through cookies, application analytics and security monitoring technologies whenever you use our Platform.
The MAP Health Care Platform is intended exclusively for individuals aged 18 years or over who are legally eligible to work within the United Kingdom healthcare sector.
We do not knowingly collect personal information from children.
If we become aware that personal information relating to a child has been collected unintentionally, we will take appropriate steps to delete that information without undue delay.
MAP Health Care LTD processes personal information only where there is a valid legal basis under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the nature of our relationship with you and the services we provide, we may rely on one or more of the following lawful bases.
Most of the personal information processed through our Platform is necessary to fulfil our contractual obligations or to take steps at your request before entering into a contract.
This includes processing information to:
Without this information we may be unable to provide our services.
Certain information must be processed to comply with legal and regulatory obligations applicable to healthcare recruitment and employment within the United Kingdom.
Examples include:
We process certain information where doing so is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
These legitimate interests include:
Whenever we rely on legitimate interests, we carefully balance our interests against your privacy rights.
In certain circumstances we will ask for your consent before processing personal information.
Examples include:
Where processing is based upon consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
In exceptional circumstances we may process personal information where necessary to protect the vital interests of an individual.
This is expected to arise only in limited situations, such as safeguarding concerns or emergencies affecting health or safety.
Where required by law, we may process information in the public interest, including where necessary for safeguarding, regulatory compliance or cooperation with statutory authorities.
The information we collect enables us to deliver secure, efficient and compliant recruitment and workforce management services.
Depending on your relationship with MAP Health Care, your personal information may be used to:
We use only the minimum amount of personal information necessary to fulfil each purpose.
As a specialist healthcare recruitment provider, MAP Health Care processes compliance documentation that is essential for employment within the health and social care sector.
This includes verifying information such as:
Compliance information is processed solely to assess suitability for employment, satisfy legal and regulatory requirements, maintain workforce compliance and assist healthcare providers in making informed recruitment decisions.
Verification undertaken by MAP Health Care does not constitute a guarantee of a candidate's future performance, conduct or suitability.
Healthcare providers remain responsible for making their own employment decisions.
We treat personal information with strict confidentiality.
We do not sell personal information to third parties.
However, where necessary to provide our services or comply with legal obligations, we may share personal information with carefully selected recipients.
Depending upon the circumstances, information may be shared with:
Information is shared only where necessary and appropriate safeguards are in place.
MAP Health Care uses trusted technology providers to operate its digital Platform securely and efficiently.
These providers process personal information only on our documented instructions and are required to maintain appropriate technical and organisational security measures.
Our current providers include:
Supabase provides secure cloud database and encrypted document storage services used to host user accounts, recruitment information and compliance documentation.
Google Firebase is used to deliver push notifications, application messaging, authentication support and certain technical analytics necessary for operation of the mobile application.
Where you download our iOS application, Apple processes limited information relating to application distribution, updates and purchases in accordance with Apple's own privacy practices.
Where you download our Android application, Google processes limited information necessary for application distribution and updates.
MAP Health Care encourages Users to review the privacy policies of these providers where relevant.
MAP Health Care primarily stores and processes personal information within the United Kingdom and other jurisdictions recognised as providing an adequate level of data protection.
Where personal information is transferred internationally, appropriate safeguards will be implemented in accordance with UK GDPR.
Such safeguards may include:
We take reasonable steps to ensure personal information remains protected regardless of where it is processed.
The MAP Health Care mobile application may request access to certain features of your device where necessary to provide Platform functionality.
Depending on your device and operating system, permissions may include:
To capture profile photographs or scan identity and compliance documents.
To upload existing photographs or documents required during recruitment and compliance processes.
To upload compliance documentation including DBS certificates, Right to Work documentation and training certificates.
To receive important service notifications including:
You may manage device permissions at any time through your mobile device settings.
Disabling certain permissions may reduce the functionality of the application.
Protecting personal information is fundamental to the operation of MAP Health Care.
We implement appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures include:
While no online service can guarantee absolute security, we continually review and enhance our security controls in line with industry best practices.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Retention periods vary depending on the nature of the information, applicable legal obligations and operational requirements.
Examples include:
When information is no longer required, it is securely deleted, anonymised or archived in accordance with our Data Retention Policy.
Where required by law, certain records may be retained for longer periods.
MAP Health Care may use automated processes to assist with operational efficiency.
Examples include:
These processes support our services but are not intended to make solely automated decisions that produce legal or similarly significant effects without appropriate human involvement where required by law.
MAP Health Care LTD is committed to ensuring that you can exercise your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the circumstances, you may be entitled to exercise the following rights.
You have the right to know how and why your personal information is collected, used, stored and shared.
This Privacy Policy is intended to provide clear and transparent information about our processing activities.
You have the right to request confirmation that we process your personal information and to obtain a copy of the information we hold about you.
Where applicable, we will also provide information regarding:
Requests may be submitted using the contact details provided at the end of this Policy.
You have the right to request correction of inaccurate or incomplete personal information.
We encourage all users, particularly healthcare professionals, to keep their profiles, compliance documents and contact details up to date to ensure the accuracy of recruitment and workforce management records.
In certain circumstances, you may request that we delete your personal information.
This right is not absolute and may be limited where we are required to retain information for reasons including:
Where deletion cannot be completed immediately, we will explain the reasons and retain only the information that is legally required.
You may request that we temporarily restrict the processing of your personal information where:
Where processing is based on your consent or a contract and carried out by automated means, you may request a copy of your personal information in a structured, commonly used and machine-readable format.
Where technically feasible, you may also request that the information be transferred directly to another organisation.
You may object to processing carried out on the basis of legitimate interests.
We will carefully consider your request and will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is necessary for legal claims.
You have the right not to be subject to decisions based solely on automated processing where those decisions produce legal or similarly significant effects.
MAP Health Care does not make recruitment decisions solely through automated processing.
Where automation assists operational processes, appropriate human oversight is maintained.
If you wish to exercise any of your privacy rights, please contact us using the details provided in Section 26.
We may request reasonable proof of identity before responding to your request to protect your personal information from unauthorised disclosure.
Unless an exemption applies, we aim to respond to requests within one calendar month.
Our website and mobile applications use cookies and similar technologies to improve functionality, enhance security and provide a better user experience.
Cookies may be used to:
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
Further information is available in our separate Cookie Policy.
From time to time, MAP Health Care may send communications relating to:
Where marketing communications require consent, you may withdraw your consent at any time by:
Operational communications relating to your account, recruitment activities, compliance documentation or Platform security are considered essential service communications and cannot be opted out of while your account remains active.
Our website or mobile application may contain links to third-party websites, applications or services that are not operated by MAP Health Care.
These third-party services have their own privacy policies and terms of use.
MAP Health Care does not control and is not responsible for the privacy practices, security or content of external websites.
Users are encouraged to review the privacy policies of any third-party services they choose to access.
We may update this Privacy Policy from time to time to reflect:
Whenever significant changes are made, we will publish the updated Privacy Policy on our website and, where appropriate, notify registered users through the Platform or by email.
The "Last Updated" date shown at the beginning of this document indicates when the Policy was most recently revised.
We encourage Users to review this Privacy Policy periodically to remain informed about how we protect personal information.
If you have any questions regarding this Privacy Policy, your personal information or your privacy rights, please contact us.
Company Number: 09723243
Registered Office
Unit 36, Kingswood House, South Road, Kingswood, Bristol, BS15 8JF, United Kingdom
Marius Popescu
We are committed to resolving privacy-related enquiries promptly, professionally and transparently.
If you believe that your personal information has not been handled in accordance with applicable data protection laws, we encourage you to contact MAP Health Care first so that we have an opportunity to investigate and resolve your concerns.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the independent supervisory authority responsible for data protection within the United Kingdom.
Submitting a complaint to the ICO does not affect any other legal rights or remedies that may be available to you.
The Information Commissioner's Office is responsible for enforcing data protection legislation within the United Kingdom.
Further information about your rights, data protection guidance and the complaints process is available directly from the ICO.
Document Title: Privacy Policy
Document Owner: MAP Health Care LTD
Status: Public
Applies To: Website, Mobile Application and Recruitment Platform
Jurisdiction: United Kingdom (England and Wales)
Review Frequency: Annually or following any significant legal, regulatory or operational change.
MAP Health Care LTD is committed to maintaining the confidentiality, integrity and security of the personal information entrusted to us.
We continually review our privacy practices, technical safeguards and operational procedures to ensure that personal information is processed responsibly, securely and in accordance with applicable law.
By using our website, mobile application or recruitment platform, you acknowledge that you have read and understood this Privacy Policy and the manner in which MAP Health Care collects, uses and protects your personal information.
We appreciate the trust placed in us by healthcare professionals, healthcare providers and business partners across the United Kingdom and remain committed to maintaining the highest standards of privacy, transparency and data protection.