Our data protection practices
MUKTalent Healthcare is committed to protecting the personal information of its employees, contractors, job applicants and healthcare candidates.
Personal information is collected only where necessary for legitimate recruitment, employment, administration and business purposes. This may include contact details, employment history, professional qualifications, references and other information relevant to recruitment or employment.
Information is stored using secure digital systems, with access restricted to authorised personnel according to their responsibilities. Appropriate technical and organisational measures are implemented to protect information against unauthorised access, loss, alteration or disclosure.
Personal information may be shared with relevant prospective employers, authorised recruitment partners, professional verification providers and service providers where necessary for legitimate purposes and subject to appropriate safeguards.
Information is retained only for as long as necessary, taking account of applicable legal, regulatory and contractual requirements. Retention periods are reviewed periodically.
When information is no longer required, electronic records are securely deleted or anonymised, and physical documents are securely destroyed in accordance with the organisation’s retention and disposal procedures.
Individuals may exercise their applicable data protection rights, including requesting access to or correction of their personal information and, where applicable, requesting erasure or restriction of processing.
MUKTalent Healthcare aims to comply with applicable UK data protection legislation, including the UK GDPR and Data Protection Act 2018. Where personal information is transferred internationally, the organisation assesses the applicable legal requirements and implements appropriate safeguards where required.
Technical and organisational measures
- Secure HTTPS hosting for the website and all systems.
- Individual user accounts for every team member; no shared logins.
- Role-based access permissions: administrators, consultants (who see only their assigned candidates) and candidates (who see only their own record).
- Multi-factor authentication for all administrative and consultant access to Healthcare records.
- Secure document uploads to private, encrypted storage, opened only through short-lived signed links.
- Encrypted backups managed by our database provider.
- Access and activity logs recording changes, the responsible user and the date.
- Secure deletion procedures, including deletion of stored files and anonymisation of records.
- Appropriate safeguards for international data transfers.