Nursewell Logo
Nursewell

Privacy Policy


Introduction


Nursewell Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare staffing platform.


We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Information We Collect


Personal Information

We collect personal information that you voluntarily provide when registering on our platform, including:


For Healthcare Workers (Staff):

  • Full name, date of birth, and contact details
  • National Insurance number
  • Right to work documentation and share codes
  • Professional qualifications and certifications
  • DBS check information and update service details
  • Employment history and references
  • Bank account details for payment purposes
  • Professional registration numbers (NMC, HCPC, etc.)
  • Training certificates and compliance documents
  • Photographs for identification purposes

    • For Clients (Care Providers):

  • Company name and registration details
  • Contact person information
  • Operational center addresses
  • Billing and payment information

    • Automatically Collected Information

    We automatically collect certain information when you access our platform, including:

  • IP address and device information
  • Browser type and operating system
  • Pages viewed and time spent on the platform
  • Referral URLs

    • How We Use Your Information


    We use your personal information to:


  • Verify your identity and right to work in the UK
  • Process DBS checks and professional registration verification
  • Match healthcare workers with appropriate job opportunities
  • Process timesheets, invoices, and payments
  • Ensure compliance with healthcare regulations
  • Communicate about shifts, bookings, and platform updates
  • Improve our services and user experience
  • Comply with legal and regulatory requirements

    • Legal Basis for Processing


    We process your personal data based on:


  • Contract Performance: To provide our staffing services
  • Legal Obligation: To comply with employment, tax, and healthcare regulations
  • Legitimate Interests: To improve our services and prevent fraud
  • Consent: Where specifically requested for marketing communications

    • Data Sharing


    We may share your information with:


  • Clients: To facilitate job placements and bookings
  • Regulatory Bodies: Including the Care Quality Commission (CQC), NMC, and HCPC
  • Background Check Providers: For DBS verification
  • HMRC: For tax and payroll purposes
  • Professional Indemnity Insurers: When required
  • Payment Processors: To process your payments securely

    • We never sell your personal information to third parties.


    Data Retention


    We retain your personal data for:


  • Active Users: For the duration of your account plus 6 years after last activity
  • Compliance Documents: As required by regulatory bodies (typically 6-10 years)
  • Financial Records: 7 years as required by HMRC
  • DBS Information: In accordance with DBS Code of Practice

    • Your Rights


    Under UK GDPR, you have the right to:


  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain types of processing
  • Withdraw Consent: Where processing is based on consent

    • To exercise these rights, please contact us at privacy@nursewell.co.uk


    Data Security


    We implement appropriate technical and organisational measures to protect your personal data, including:


  • Encryption of data in transit and at rest
  • Secure authentication systems
  • Regular security assessments
  • Staff training on data protection
  • Access controls and audit logging

    • International Transfers


    Your data is primarily stored and processed within the UK and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place.


    Cookies


    Our platform uses cookies to enhance your experience. For more information, please see our Cookie Policy.


    Changes to This Policy


    We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.


    Contact Us


    If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:


    Data Protection Officer

    Nursewell Ltd

    Email: privacy@nursewell.co.uk


    Complaints


    If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):


    Website: www.ico.org.uk

    Telephone: 0303 123 1113