Privacy Policy

1. Who We Are

Hive Workforce Ltd (trading as Hive Healthcare) is a healthcare staffing agency registered in the United Kingdom.

Registered address: 33 North Street, Carrickfergus, BT38 7AQ

We act as the Data Controller for the personal data we collect and process. This means we are responsible for deciding how and why your personal data is used.

If you have any questions about this policy or how we handle your data, please contact us at the address above.

2. What Personal Data We Collect

Candidates (Nurses, Healthcare Assistants & other applicants)

When you apply for a role or register with us, we may collect:

Full name, address, email address and telephone number
CV, work history and employment references
NMC registration number or other professional registration details
Right to work documentation (e.g. passport, visa)
DBS certificate details
Bank details and National Insurance number (for payroll purposes)
Training records and qualifications
Availability and shift preferences
Any other information you voluntarily provide to us

Website & Social Media Visitors

If you interact with our Facebook ads or visit our website, we may collect:

Name, email address and phone number (if you complete a lead form)
Postcode and general location data
Responses to pre-screening questions in lead forms

3. How We Collect Your Data

We collect personal data through the following channels:

Facebook lead ad forms
Indeed job applications
Direct applications via email or phone
Referrals from existing workers
Our website contact or application forms

4. Why We Use Your Data (Legal Basis)

We process your personal data for the following purposes and on the following legal bases:

To process your application and place you in work

Legal basis: Performance of a contract / taking steps prior to entering a contract (Article 6(1)(b) UK GDPR).

To verify your right to work and suitability for healthcare roles

Legal basis: Legal obligation (Article 6(1)(c) UK GDPR) and, where special category data is involved, substantial public interest in healthcare staffing (Article 9(2)(g) UK GDPR).

To process payroll and make payments

Legal basis: Performance of a contract and legal obligation.

To contact you about relevant job opportunities

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — we have a legitimate interest in matching candidates to suitable roles.

To run recruitment advertising on Facebook and Indeed

Legal basis: Legitimate interests and, where applicable, consent obtained via platform lead forms.

5. Third Parties We Share Your Data With

We share your personal data only where necessary, with the following third parties:

Facebook (Meta Platforms Ireland Ltd)

We use Facebook to run recruitment advertising campaigns. If you submit a lead form via Facebook, your data is collected by Meta and shared with us. Facebook acts as a Data Controller for data collected on its platform. Please refer to Meta’s Privacy Policy at facebook.com/privacy for further details.

Indeed (Indeed Ireland Operations Ltd)

We advertise roles on Indeed. If you apply via Indeed, your application data is shared with us. Indeed acts as a Data Controller for data collected on its platform. Please refer to Indeed’s Privacy Policy at indeed.com/legal for further details.

Simplicity Payroll

We use Simplicity to process payroll for workers placed by Hive Healthcare. Simplicity acts as a Data Processor on our behalf and processes your data only in accordance with our instructions and applicable data protection law.

Hirers and Client Organisations

We may share relevant candidate information (such as name, registration details and availability) with healthcare organisations where we are seeking to place you in work. We will only do so where necessary and with your knowledge.

Regulatory and Legal Bodies

We may disclose your data where required by law, court order, or regulatory obligation (e.g. HMRC, the NMC, or the Information Commissioner’s Office).

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. As a general guide:

Active candidate records: for the duration of your engagement with us
Payroll and financial records: 7 years (legal requirement)
Right to work documents: 2 years after the end of employment
Unsuccessful applicants: up to 12 months, unless you consent to longer retention
Facebook lead form data: reviewed and actioned within 90 days

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access — you can request a copy of the data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data in certain circumstances
Right to restriction — you can ask us to limit how we use your data
Right to data portability — you can request your data in a structured, machine-readable format
Right to object — you can object to processing based on legitimate interests
Right to withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us in writing at 33 North Street, Carrickfergus, BT38 7AQ or by email. We will respond within one calendar month.

8. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.

9. Changes to This Policy

We may update this privacy policy from time to time. The most current version will always be available on request. The date at the top of this document indicates when it was last revised.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact:

Hive Workforce Ltd t/a Hive Healthcare

33 North Street

Carrickfergus

BT38 7AQ