top of page

Privacy Policy

AMD HEALTH CARE LTD – WEBSITE & RECRUITMENT PRIVACY POLICY

​

1. Introduction

AMD Health Care LTD ("we", "us", "our") is a healthcare staffing agency operating as an Employment Business supplying temporary support workers and healthcare assistants across Wirral, Merseyside, and the wider North West.

We are committed to protecting and respecting the privacy of all visitors to our website (www.amdhealthcare.co.uk), prospective and registered agency workers, and representatives of our client care facilities.

This Privacy Policy explains how we collect, process, store, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Who We Are (Data Controller)

AMD Health Care LTD is the Data Controller responsible for your personal information.

  • Company Name: AMD Health Care LTD

  • Company Registration Number: 17488871

  • Registered Office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

  • Telephone: 0151-452-4572

  • Email: info@amdhealthcare.co.uk

  • Data Protection Lead: Mark Danby - mark@amdhealthcare.co.uk

3. Information We Collect

3.1 Website Visitors & General Enquiries

When you browse our website or contact us via our online contact forms, email, or telephone, we may collect:

  • Your full name, job title, and organisation name.

  • Contact details (email address, telephone number, business postal address).

  • The contents of your enquiry, booking requests, or correspondence.

  • Technical data automatically collected by our web server (IP address, browser type, operating system, and visit timestamps) strictly for site security and performance.

3.2 Prospective & Registered Agency Workers (Recruitment & Vetting)

If you apply to join our agency or register as a temporary worker, we collect comprehensive personal and sensitive data to comply with statutory Safer Recruitment requirements:

  • Identification & Contact Details: Full legal name, date of birth, home address, personal phone number, email address, and National Insurance number.

  • Right to Work & Immigration Status: Passport, Biometric Residence Permit (BRP), share codes, or birth certificates.

  • Employment & Training Records: Curriculum Vitae (CV), employment history, qualifications, training certificates, and references from former employers.

  • Special Category Data: Occupational health declarations, fitness-to-work questionnaires, immunisation records, and Enhanced Disclosure and Barring Service (DBS) check certificates or update service reference numbers.

  • Payroll & Financial Data: Bank account details and tax codes (required to process statutory wage payments).

3.3 Client Representatives

From care homes, supported living providers, and local authority commissioners, we collect:

  • Names, business emails, and direct phone numbers of shift coordinators, procurement officers, and Registered Managers.

  • Site-specific service user risk profiles and shift booking requirements.

4. Lawful Bases for Processing (UK GDPR Articles 6 & 9)

We process your personal data under the following legal bases:

  • Contractual Necessity (Article 6(1)(b)): To enter into and perform the terms of our Agency Worker Agreement or client supply contracts, allocate shifts, and administer payroll.

  • Legal Obligation (Article 6(1)(c)): To comply with UK employment laws, Conduct of Employment Agencies and Employment Businesses Regulations 2003, HMRC statutory tax reporting, and Right to Work verifications.

  • Legitimate Interests (Article 6(1)(f)): For day-to-day business administration, communicating shift availability, securing our digital systems, and providing responsive customer service.

  • Special Category Data (Article 9(2)(b) & (h)): Occupational health and criminal record vetting are processed strictly under statutory obligations relating to employment, social security, and health and social care system management.

5. How We Share Your Information

We will never sell, rent, or trade your personal information. We share personal data only on a strictly necessary "need-to-know" basis with:

  • Client Care Facilities: Relevant candidate profiles (name, DBS status, training certifications, and relevant experience) are provided to host facilities prior to shift commencement in compliance with Regulation 19 of the Conduct Regulations 2003.

  • Regulatory & Statutory Authorities: The Disclosure and Barring Service (DBS), Home Office (Immigration Enforcement), HM Revenue & Customs (HMRC), the Care Quality Commission (CQC), or local authority safeguarding teams where required by law.

  • Accredited Third-Party Service Providers: Secure cloud database hosts, payroll processing software, and accredited umbrella companies operating strictly under written data processing agreements conforming to UK GDPR standards.

6. International Data Transfers

All personal data is primarily stored and processed within the United Kingdom or the European Economic Area (EEA). If any cloud software provider transfers data outside the UK, we ensure adequate safeguards are in place (such as UK International Data Transfer Agreements or adequacy regulations).

7. Data Retention & Secure Storage

  • Recruitment & Worker Files: Retained for the duration of your registration plus 6 years following termination of engagement (in line with the Limitation Act 1980 and HMRC audit rules).

  • Unsuccessful Job Applicants: Stored securely for 6 months after the recruitment decision, after which they are permanently deleted.

  • Client Records & Invoices: Retained for 6 years following the financial year-end to comply with statutory accounting requirements.

  • Technical Security: All digital data is protected by encryption, role-based access controls, and multi-factor authentication (MFA). Physical paper files are kept in secure, fireproof, locked facilities.

8. Cookies & Tracking

Our website operates on the Wix platform. We use strictly necessary cookies required for system navigation, load balancing, and security. We do not use intrusive third-party advertising cookies or behavioural tracking trackers to compile user profiles. You can manage or disable cookies via your browser settings at any time.

9. Your Legal Rights Under UK GDPR

You have statutory rights regarding the personal data we hold about you:

  • Right of Access: You may submit a Subject Access Request (SAR) to receive a copy of your personal data free of charge within one calendar month.

  • Right to Rectification: You may ask us to correct inaccurate or incomplete personal records.

  • Right to Erasure ("Right to be Forgotten"): You may request that we delete your data where there is no ongoing legal or contractual justification for retaining it.

  • Right to Restrict or Object to Processing: You may object to or restrict processing under certain circumstances.

  • Right to Data Portability: You may request that personal data provided by you be transferred to another organisation.

To exercise any of these rights, please contact our Data Protection Lead in writing at info@amdhealthcare.co.uk.

10. How to Make a Complaint

If you have concerns about how we handle your personal data, please contact us directly so we can resolve the matter promptly.

If you remain dissatisfied, you have the right to lodge a formal complaint with the UK supervisory authority:

  • Information Commissioner’s Office (ICO)

    Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

    Helpline: 0303 123 1113

    Website: ico.org.uk

​

Last Updated: 30 October 2026

bottom of page