Imprint And Privacy Policy
PRIVACY POLICY
1. Imprint & Company Information
Last Updated: 18 Aug 2025
Company: MMA Healthcare Recruitment UK Limited
Registered Address: Delphian House 3rd Floor, Riverside, New Bailey St, Manchester, United Kingdom, M3 5FS
Managing Director: Bruce Roworth
E-Mail: admin@mmarecruitment.com
Website: www.mmarecruitment.com
Company Registration Number: 04331562
VAT Registration Number: 157622500
Responsible for Content: Bruce Roworth
2. Introduction & Scope
MMA Healthcare Recruitment UK Limited (“MMA”, “we”, “us”) is committed to protecting your privacy and ensuring that your personal data is processed in accordance with applicable data protection laws, including:
- UK General Data Protection Regulation (UK GDPR)
- EU General Data Protection Regulation (EU GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
- Other relevant international laws where we operate (including South Africa’s POPIA, India’s PDPB, and the Philippines’ DPA).
This Privacy Policy applies to:
(a) Applicants seeking employment as healthcare professionals.
(b) Institutions/Employers seeking qualified medical workers.
(c) Suppliers and Partners providing services to MMA.
(d) Website Users accessing or interacting with www.mmarecruitment.com.
3. Contact & Data Controller
The Data Controller for the purposes of data protection legislation is:
MMA Healthcare Recruitment UK Limited
Data Protection Officer (DPO): Melinda Moolman
Email: admin@mmarecruitment.com
If you have any questions about this policy or your personal data, you can contact the DPO at the above address or email.
You also have the right to lodge a complaint with:
- UK: Information Commissioner’s Office (ico.org.uk)
- Ireland: Data Protection Commission (dataprotection.ie)
- Or your local supervisory authority.
Staff Email Disclaimer for Confidentiality & Data Protection Notice
"This email and any attachments are confidential and may contain personal data. If you are not the intended recipient, please delete this message and notify the sender immediately. MMA Recruitment complies with UK GDPR and the Data Protection Act 2018. Candidate information is handled in accordance with our Privacy Notice."
Staff Access & training
Staff are trained in GDPR compliance and access to confidential information is role-based.
4. How We Collect Your Personal Data
We collect personal data in several ways:
- Directly from you – when you submit an application, fill in forms, contact us, or attend our events.
- During the provision of services – e.g. background checks, compliance verification, occupational health assessments.
- From third parties – such as job boards, recruitment partners, referees, or publicly available professional profiles (LinkedIn).
- Automatically – via cookies, analytics, and server logs when you visit our website.
5. Types of Personal Data Collected
Depending on your relationship with MMA, we may collect:
From Applicants:
- Name, date of birth, contact details.
- CV, qualifications, employment history, references.
- Passport, visa/immigration status, police checks, occupational health information.
- Professional licences and membership details.
- Language skills, nationality, place of professional training.
From Employers/Institutions:
- Contact name, organisation name, contact details.
- Recruitment needs, role specifications.
From Suppliers/Partners:
- Business and contact details.
- Service agreement and compliance documents.
Website & Marketing Data:
- IP address, device/browser type, usage patterns, marketing preferences.
6. Purposes & Lawful Bases for Processing
6.1 Consent Handling
- In certain cases (talent pool retention, marketing, WhatsApp groups), MMA relies on explicit consent from candidates according to GDPR Compliance.
- Consent is collected via SmartSheets tick-boxes, application forms, or email confirmation.
- Consent can be withdrawn at any time by emailing admin@mmarecruitment.com.
- Please note that withdrawal does not affect past processing, but we will delete or stop using the data for that purpose going forward.
Example Activities | Example Activities | Legal Basis |
|---|---|---|
Candidate registration & matching | Adding CV to database, reviewing qualifications | Contractual necessity (Art. 6(1)(b)) |
Recruitment & selection | Shortlisting, interviews | Contractual necessity / Legitimate interest |
Compliance checks | Right-to-work, police vetting, visa processing | Legal obligation (Art. 6(1)(c)) |
Client relationship management | Contract negotiation, account servicing | Contractual necessity / Legitimate interest |
Occupational health screening | Medical assessments | Consent (Art. 6(1)(a)) |
Marketing communications | Sending job alerts, news | Consent |
Website analytics & optimisation | Tracking page visits | Legitimate interest |
7. Data Sharing & Disclosure
We may share your data with:
- Clients/Employers – to match applicants with vacancies.
- Affiliated Group Companies – for service delivery.
- Recruitment partners/other agencies – in multi-supplier chains.
- Service providers – IT, payroll, compliance, document management.
- Government & regulatory bodies – e.g., ICO, HMRC, Home Office, Garda Síochána.
- Professional advisers – legal, compliance, insurance.
- In case of mergers, acquisitions, or business transfers – as part of a sale or restructuring.
- Referees - we will only contact the referees with the candidate’s consent.
8. International Transfers
Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards, such as:
- Adequacy decisions by the UK or European Commission.
- Standard Contractual Clauses (SCCs) and UK IDTA (International Data Transfer Agreement)
- Binding corporate rules or equivalent protections.
9. Data Retention
We retain personal data only as long as necessary:
Data Type | Retention Period |
|---|---|
Candidate (not placed) | 1 year from leaving programme, unless consent is given for 2 years |
Candidate (placed) | Up to 6 years (to comply with immigration / right-to-work obligations) |
Employer (with contract) | 1 year after contract ends |
Employer (no contract) | 1 year from initial contact |
Compliance records | 7 years |
Occupational health data | Duration of employment + 7 years |
Marketing data | Until consent withdrawn |
10. Cookies
Our website uses session and permanent cookies:
- Essential cookies – required for core functionality.
- Analytics cookies – to improve site usability.
- Marketing cookies – with your consent, for targeted ads.
You can adjust cookie preferences via your browser settings or our cookie banner. For details, see our Cookie Policy.
11. Your Rights
Under applicable law, you may:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request erasure where data is no longer needed.
- Restrict processing in certain circumstances.
- Request portability of your data.
- Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent where processing is based on consent.
- Not be subject to solely automated decision-making with significant effects (MMA does not use such processes).
- Candidates may withdraw consent at any time by emailing admin@mmarecruitment.com
We will respond within one month of receiving your request, extendable by two months for complex cases.
12. Security Measures
We use appropriate organisational and technical measures, including:
- Data encryption and secure servers.
- Access controls and staff confidentiality agreements.
- Regular security audits and breach response protocols.
13. Marketing
With your consent, we may send you marketing communications. You can opt out at any time via:
- The “unsubscribe” link in our emails, or
- Emailing admin@mmarecruitment.com.
14. Changes to This Policy
We may update this policy to reflect changes in law or our operations. Updates will be posted on our website with the new “Last Updated” date.
MMA Healthcare
University of Reading
United Kingdom
Contact Number:
+441189879240
