International Legal Partners FZE-LLC ("ILP", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ILP Digital Portal ("Platform") for healthcare recruitment services.
1. Information We Collect
1.1 Personal Information
We collect information that you voluntarily provide when registering as a Candidate or Employer, including:
- Identity Data: Full name, date of birth, nationality, passport/ID information
- Contact Data: Email address, phone number, postal address
- Professional Data: Professional registration numbers (NMC, GMC, HCPC, CORU, etc.), qualifications, employment history, specialisations
- CV Documents: Curriculum vitae, certificates, references, DBS/background check results
- Health Data: Where relevant to placement, information about fitness to practise (processed under UK GDPR Article 9)
1.2 Special Category Data
As a healthcare recruitment platform, we may process special category data including health information and professional registration status. We rely on explicit consent and legitimate interest bases under UK GDPR Article 9.
Regulatory Compliance Notice
All health data is processed in accordance with the UK Data Protection Act 2018, UK GDPR, and relevant healthcare regulatory requirements (CQC, NMC, GMC, HCPC guidelines).
1.3 Technical Data
When you access the Platform, we automatically collect:
- IP address and device identifiers
- Browser type, version, and settings
- Pages visited, time spent, and navigation patterns
- Cookies and similar tracking technologies (see Section 7)
2. How We Use Your Information
2.1 Primary Purposes
- Processing and matching Candidates with suitable Employer opportunities
- Verifying professional qualifications and regulatory registrations
- Facilitating interviews, shortlisting, and placement processes
- Communicating about opportunities, updates, and platform changes
- Maintaining compliance with UK employment law and healthcare regulations
2.2 Employer Services
For Employers, we use collected data to:
- Search and filter Candidate profiles based on criteria
- Verify professional registrations via NMC, GMC, HCPC, and other regulatory body databases
- Manage shortlists, interview scheduling, and placement documentation
- Generate compliance reports for regulatory purposes
2.3 Candidate Services
For Candidates, we use collected data to:
- Create and maintain professional profiles visible to Employers
- Match opportunities based on qualifications, location preferences, and experience
- Process CV uploads and verify credentials
- Notify of relevant opportunities via email and platform notifications
3. Legal Basis for Processing
We process your personal data under the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration | Contract performance (Art 6(1)(b)) |
| Professional verification | Legitimate interest (Art 6(1)(f)) |
| Marketing communications | Consent (Art 6(1)(a)) |
| Regulatory compliance | Legal obligation (Art 6(1)(c)) |
| Health & fitness data | Explicit consent (Art 9(2)(a)) |
4. Information Sharing and Disclosure
4.1 Within ILP Network
Your information may be shared with:
- Employers searching for healthcare professionals (with your consent)
- Regulatory bodies for verification purposes (NMC, GMC, HCPC, etc.)
- Third-party service providers (CV hosting, email services, payment processors)
4.2 International Transfers
As a global recruitment platform, your data may be transferred to:
- UK/EU: Protected under UK GDPR adequacy decisions
- UAE: Processed in accordance with DIFC Data Protection Law
- Other countries: Only with appropriate safeguards (Standard Contractual Clauses)
4.3 Legal Requirements
We may disclose your information when required by law, including:
- CQC, NMC, GMC, HCPC regulatory investigations
- UKVI/Right to Work verification
- DBS criminal record checks
- Court orders or legal proceedings
5. Data Retention
We retain your personal data for the following periods:
- Active Profiles: Duration of your account + 2 years after last activity
- Completed Placements: 7 years (UK tax and employment law requirement)
- Professional Records: In accordance with NMC/GMC/HCPC retention guidelines
- Marketing Preferences: Until consent is withdrawn
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of your data (Subject Access Request)
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interest
- Rights Related to Automated Decision-Making: Request human intervention
ICO Registration
ILP is registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration number: ZA123456. You have the right to lodge a complaint with the ICO at ico.org.uk.
7. Cookies and Tracking
We use cookies and similar technologies to:
- Essential Cookies: Required for platform functionality (authentication, security)
- Analytics Cookies: Help us understand how you use the platform
- Marketing Cookies: Used with your consent for relevant advertisements
You can manage your cookie preferences through our Cookie Settings panel or your browser settings.
8. Data Security
We implement appropriate technical and organisational measures:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Staff training on data protection and confidentiality
- Incident response procedures for data breaches
9. Children's Privacy
The ILP Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected such information, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via:
- Email notification to registered users
- Notice on the Platform's login page
- 30 days' notice before changes take effect
11. Contact Us
Data Protection Enquiries
Data Protection Officer: dpo@ilp-services.com
Email: privacy@ilp-services.com
Address: International Legal Partners FZE-LLC, Head Office, United Arab Emirates
ICO Reference: ZA123456
This Privacy Policy is governed by the laws of England and Wales. For healthcare-specific data processing in Scotland, Northern Ireland, or the Republic of Ireland, additional local requirements may apply.