Privacy Policy

Bridge Staff Solutions ("we", "us", or "our") is committed to protecting and respecting your privacy. As a healthcare staffing agency operating in the UK, we handle highly sensitive personal data. This policy explains how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect and process the following data about you:

• Identity & Contact Data: Name, address, email, telephone number, and date of birth.
• Professional Data: CVs, employment history, professional references, and NMC/HCPC PIN numbers.
• Compliance Data: Right to work documentation, passport copies, and visa status.
• Special Category Data: Health questionnaires, vaccination records (including COVID-19 and Hep B), occupational health assessments, and Enhanced DBS (Disclosure and Barring Service) certificates.
• Financial Data: Bank account details, National Insurance number, and tax codes for payroll processing.

2. Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Performance of a Contract: To assess your suitability for roles and provide you with work-finding services.
• Legal Obligation: To comply with employment laws, tax regulations, and statutory safeguarding requirements.
• Special Category Data: Our processing of health and criminal record data is carried out under the condition of obligations in the field of employment and social security, as mandated by UK healthcare regulations (e.g., CQC standards).

3. How We Share Your Data

We may share your data with strictly vetted third parties, including:

• Clients: Care homes, hospitals, and community care providers to facilitate your assignment. We only share necessary compliance profiles.
• Regulatory Bodies: The Care Quality Commission (CQC), Disclosure and Barring Service (DBS), and HMRC as required by law.
• Service Providers: Payroll umbrella companies (if applicable) and our occupational health screening partners.

4. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for. By law, we must keep basic information about our workers (including contact, identity, financial, and transaction data) for six years after they cease being active for tax and employment law purposes. Compliance documents (like DBS checks) are handled in accordance with strict retention policies and destroyed securely when no longer required.

5. Your Data Subject Rights

Under the UK GDPR, you have the right to:

• Request access to your personal data (a Data Subject Access Request).
• Request correction of incomplete or inaccurate data.
• Request erasure of your personal data ("right to be forgotten").
• Object to processing of your personal data or request restriction of processing.

To exercise any of these rights, please contact our Data Protection Officer at privacy@bridgestaffsolutions.co.uk.

6. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at info@bridgestaffsolutions.co.uk.