LUMINE HEALTHCARE – Recruitment Data Protection Privacy Notice
This privacy notice explains how Lumine Healthcare Ltd (“the Company”) collects, handles, stores, and shares personal information during our recruitment processes. We are legally required to inform you of how we process your data. Please read this notice carefully, together with any supplementary privacy notices we may issue at the time we collect your personal information.
1. Data Controller
Lumine Healthcare Ltd is the data controller responsible for deciding how and why your personal data is used. Your information may also be processed by approved affiliated partners, service providers, and regulatory bodies where required.
2. Data Protection Principles
We comply with all applicable data protection laws and adhere to strict principles when collecting, storing, and using personal information, in accordance with our internal Data Protection Policy.
3. Information We Collect and Hold
A. Up to and Including Shortlisting
We may collect the following personal data during the initial recruitment stage:
Name and contact details (home address, telephone numbers, email)
Qualifications, professional history, employment details, skills, and interests
Racial or ethnic origin, sex, sexual orientation, and religious or similar beliefs
Criminal record information, including DBS disclosures
Referee details
B. After Shortlisting and Before Final Hiring Decision
Additional personal information may be collected at this stage:
Academic and employment history, including conduct and performance information obtained through references
Academic and/or professional qualifications
Criminal record certificates (where applicable)
Nationality, immigration status, and supporting identification documents
Driving licence information (where relevant to the role)
You may be legally required to provide some of this information to verify your right to work and suitability for employment.
4. How We Collect Information
We may collect personal data from:
You directly
Your referees
Education or training providers
Professional bodies
The Disclosure and Barring Service (DBS)
The Home Office
5. Why We Collect Information and How We Use It
We process your personal information for the following lawful purposes:
To take steps towards entering an employment contract with you
To meet legal obligations (such as right-to-work checks)
To fulfil tasks carried out in the public interest
To pursue legitimate business interests, provided these do not override your rights
We strive to ensure that information collection remains proportionate and necessary. Any updates to this notice will be communicated to you.
6. Sharing Your Information
We may share personal data when necessary with:
Clients or partner organisations
Framework and regulatory authorities
Managed service providers
Third-party service suppliers (e.g., IT, payroll, benefits administrators)
Prospective purchasers of Lumine Healthcare Ltd (confidentially)
Legal or regulatory bodies, as required by law
Access is strictly controlled and limited to individuals who genuinely need it.
7. Where Information Is Stored
Your personal information may be held:
On Lumine Healthcare Ltd systems and secure storage
By approved third-party service providers
Within group-company systems, where relevant.
8. Data Retention
We keep personal data only as long as necessary:
Unsuccessful applicant data is kept only for a reasonable period aligned with limitation periods for legal claims.
Successful applicant information is transferred into the personnel file, with only relevant recruitment records retained.
Further details regarding retention are outlined in our Data Protection Policy.
9. Your Rights
You have the right to:
Access your personal information
Request corrections
Request erasure (“right to be forgotten”) in certain circumstances
Ask questions about how your information is processed
To exercise these rights, please contact our Data Protection Officer: Admin
Admin, Lumine Healthcare Ltd
Email: admin@luminehealthcare.co.uk
10. Keeping Your Data Secure
We use technical and organisational measures to safeguard personal information, including limiting access to authorised personnel only. All individuals handling data are bound by confidentiality obligations.
We maintain procedures for identifying and responding to data breaches. Where legally required, we will notify you and any relevant authorities.
11. How to Complain
If you have concerns, please raise them first with our Data Protection Officer.
If unresolved, you may contact the Information Commissioner’s Office (ICO):
www.ico.org.uk/concerns
Telephone: 0303 123 1113
Schedule: Information We Collect and Hold
A detailed schedule (Part A and Part B) listing:
Personal data collected
How and why it is collected
How it is used and shared
is fully included in the structure above and mirrors the original requirements for transparency and accountability.