1. Introduction & Data Controller
Flexy Health Care Ltd ("we", "us", or "our"), based in Sheffield, England, is committed to safeguarding the privacy and personal data of our users, healthcare staff, and service provider partners in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
2. Information We Collect
We may collect and process the following categories of personal information:
- Personal Identification Data: Full name, date of birth, home address, email address, telephone number, and identity verification documents.
- Professional & Compliance Data: Clinical qualifications, training certificates, DBS certificates, professional registration numbers (e.g. PIN), and work history.
- Booking & Financial Information: Shift records, banking details for payment disbursements, invoice records, and performance ratings.
- Technical Information: IP address, device type, browser information, and platform access logs.
3. Purpose and Legal Basis for Processing
We process personal data based on the following legal grounds:
- Contractual Necessity: To operate our staffing platform, match workers with shifts, manage bookings, and execute disbursements.
- Legal Obligation: To verify right-to-work status, maintain healthcare regulatory compliance, and fulfill taxation obligations.
- Legitimate Interests: To improve platform security, prevent fraudulent activity, and support high-quality care standards.
- Consent: Where explicitly provided for communications, optional services, or specific document processing.
4. How We Share Your Information
We only share your information when necessary:
- With registered healthcare providers and facilities for confirming assigned shifts and verifying professional credentials.
- With trusted service providers supporting our IT infrastructure, email delivery, and secure payments under strict data processing agreements.
- With statutory authorities or law enforcement when legally mandated.
5. Data Security & Storage
We implement robust technical and organisational security measures, including encryption, access controls, and secure server environments, to protect your personal data from accidental loss, unauthorized access, or disclosure.
6. Data Retention
Personal data is retained only for as long as necessary to satisfy the purposes for which it was collected, or to comply with statutory healthcare compliance, accounting, and legal requirements.
7. Your Statutory Rights
Under UK data protection law, you have rights including:
- The right to access copies of your personal data held by us.
- The right to request rectification of inaccurate information.
- The right to request erasure ("right to be forgotten") subject to statutory retention obligations.
- The right to object to or restrict processing of your personal information.
- The right to data portability.
8. Contact Our Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Team at info@flexyhealthltd.com or write to Flexy Health Care Ltd, Sheffield, England.