Amanah Talent Ltd is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under the UK GDPR and the Data Protection Act 2018.
1. Who We Are
Amanah Talent Ltd is a company registered in England and Wales (Companies House No. 17192974). We operate as a specialist healthcare recruitment agency and are the data controller for personal data we collect through our website and services.
Contact: info@amanahtalent.co.uk | 07885 373 212
2. What Personal Data We Collect
From Candidates
- Full name, contact details (email, phone), address
- CV, work history, qualifications, and professional registrations
- Right to work documents, DBS certificate details, reference information
- Sensitive data where relevant to a role (e.g. disability, health information) — only with your explicit consent
From Client Employers
- Business contact details (name, job title, email, phone)
- Organisation details and billing information
- Role requirements and vacancy details
From Website Visitors
- Name and email (if you submit our contact or vacancy form)
- Technical data: IP address, browser type, pages visited (via standard web server logs)
3. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Matching candidates to suitable roles | Legitimate interests / Contract performance |
| Compliance verification (DBS, RTW, qualifications) | Legal obligation / Legitimate interests |
| Responding to enquiries | Legitimate interests |
| Sending candidate engagement communications | Legitimate interests (you can opt out at any time) |
| Processing sensitive personal data (health, disability) | Explicit consent |
| Processing payments | Contract performance |
4. How We Use Your Data
- To match candidates with relevant job opportunities and share profiles with potential employers (with candidate consent)
- To verify compliance documentation before a placement is made
- To communicate with candidates about their job search and relevant new roles
- To process payments and manage client accounts
- To comply with our legal and regulatory obligations
- To improve our website and service quality
- AI‑assisted processing (with your explicit consent): our AI registration assistant collects candidate details conversationally, and AI reads uploaded CVs and compliance documents to extract information, verify document types, and generate profile‑completeness scores and recruiter summaries. This is performed by Anthropic as a data processor; content is not used to train their models. Every AI output is reviewed by a human recruiter before any decision is made, and AI scores are guidance only — never a guarantee of employment. You may withdraw consent at any time via info@amanahtalent.co.uk.
5. Who We Share Data With
We may share your personal data with:
- Client employers — candidate profiles are shared with prospective employers only with the candidate's knowledge and agreement
- DBS checking services — to verify criminal record certificates
- IT and software providers — including Google (Workspace), Stripe (payments), Netlify (website hosting), Resend (email delivery), and Anthropic (AI document analysis, with your consent), all under appropriate data processing agreements
- Legal or regulatory bodies — where we are required to by law
We do not sell your personal data to third parties.
6. Data Retention
- Active candidates: retained while actively seeking work and for 2 years after last contact
- Placed candidates: retained for 6 years after the placement ends (legal requirement)
- Client data: retained for 6 years after the end of the business relationship
- Website enquiries: retained for 2 years
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data (the "right to be forgotten") in certain circumstances
- Restrict processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at info@amanahtalent.co.uk. We will respond within 30 days.
8. Cookies
Our website uses only technically necessary cookies (session management, security). We do not use tracking or advertising cookies. No cookie consent banner is required as we do not set non-essential cookies.
9. Security
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, and regular security reviews. In the event of a data breach we will notify the ICO and affected individuals in accordance with our legal obligations.
10. International Transfers
Your data is stored and processed in the UK and EEA. Where we use third-party services based outside the UK/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or adequacy decisions).
11. Complaints
If you have a concern about how we handle your personal data, please contact us first at info@amanahtalent.co.uk. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113.
12. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page. Material changes will be communicated to affected individuals directly.