Privacy Policy

Amanda Armada UK Ltd
Privacy & GDPR Policy

Effective Date: 18th May 2025

1. Introduction
Amanda Armada UK Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This policy outlines how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect
We may collect and process the following types of personal data:

• Name, address, and contact details
   
• Identification documents
   
• Employment and qualification history
   
• DBS certificate and right to work documentation
   
• Health and vaccination information (where required for placement)
   
• Payroll and financial information
   
• Communication records and correspondence
   

3. How We Use Your Data
We use personal data to:

• Process job applications and vet candidates
   
• Fulfil staffing requests for healthcare providers
   
• Communicate with clients and staff
   
• Maintain compliance with regulatory requirements (e.g., NHS, CQC, NMC)
   
• Process payroll, taxes, and employment contracts
   

4. Legal Basis for Processing
We process data based on the following lawful bases:

• Consent
   
• Performance of a contract
   
• Legal obligation
   
• Legitimate interest (e.g. managing operations and staff placement)
   

5. Data Sharing and Disclosure
We may share personal data with:

• NHS trusts and care providers (for placement purposes)
   
• HMRC and legal authorities
   
• DBS service and training providers
   
• Insurance and payroll services
   

We do not sell or trade your personal data.

6. Data Storage and Security
All personal data is securely stored:

• Electronically on password-protected, encrypted systems
   
• In physical records held in locked cabinets (where applicable)
   
• Access is restricted to authorised personnel only
   

7. Data Retention
We retain data only as long as necessary:

• Candidate data: Up to 7 years after final placement
   
• Financial records: 6 years (HMRC requirement)
   

8. Your Rights
Under UK GDPR, you have the right to:

• Access your data
   
• Rectify inaccurate data
   
• Request erasure (where applicable)
   
• Object to or restrict processing
   
• Data portability (in certain cases)
   

To exercise your rights, contact us at: dataprotection@amandaarmada.co.uk

9. Cookies and Website Data
Our website may use cookies for functionality and analytics. You may choose to disable cookies in your browser settings.

10. Contact Us
Amanda Armada UK Ltd
3rd Floor, Suite 207, Regent Street, London, W1B 3HH
Email: dataprotection@amandaarmada.co.uk
Company Number: 14271822

If you have concerns about how we handle your data, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.