Privacy Policy

1. Introduction

Penn Skill Search ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, submit your CV, or engage with our recruitment services.

We act as a data controller and process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data: Name, date of birth, nationality, and professional registrations.

Contact data: Email address, phone number, postal address.

Professional data: CV, qualifications, work history, licensing information, references, and right-to-work documentation.

Technical data: IP address, browser type, device information, and website usage data collected through cookies and analytics.

Communication data: Correspondence with our team including emails, form submissions, and call notes.

3. How We Use Your Data

We use your personal data for the following purposes: matching candidates with suitable job opportunities; communicating with you about roles, applications, and our services; verifying qualifications, licensing, and right-to-work status; sharing your profile with prospective employers (with your consent); fulfilling our contractual obligations to clients and candidates; complying with legal and regulatory requirements; and improving our website and services through analytics.

4. Legal Basis for Processing

We process your data on the following legal bases: Consent — where you have given clear consent for us to process your data for specific purposes. Legitimate interest — where processing is necessary for our legitimate business interests in providing recruitment services. Contractual necessity — where processing is necessary to fulfil a contract with you. Legal obligation — where processing is required to comply with law or regulation.

5. Data Sharing

We may share your personal data with prospective employers and healthcare organisations (with your prior consent); regulatory and licensing bodies; background check and vetting providers; our group companies within the Pennrose group; IT and service providers who support our operations; and legal or regulatory authorities where required by law.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with data protection law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Candidate data is typically retained for up to 3 years after your last interaction with us, unless you request earlier deletion.

7. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict processing; request data portability; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please email [email protected].

8. Cookies

Our website uses cookies to improve your experience and to analyse site traffic. You can control cookie preferences through your browser settings. For more information, please refer to our cookie notice.

9. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.