Harbour Healthcare – Privacy Notice for Job Applicants

Caring for your information as carefully as we care for our residents

At Harbour Healthcare, we are proud to care — not only for our residents and their families, but also for the people who choose to join our team.

When you apply for a role with us, we process your personal data as part of our recruitment process. We are committed to handling your information fairly, transparently, and securely in line with UK GDPR and the Data Protection Act 2018.

Who is responsible for your data

Harbour Healthcare Ltd is the data controller for your personal information.

Data Protection Officer (DPO):
Sarah Campbell
Email: DPO-GDPR@harbourhealthcare.co.uk

What information we collect

As part of your application, we may collect and process:

Personal Data

• Name, address, and contact details
• CV, employment history, and qualifications
• References and application information
• Interview notes and assessment outcomes

Special Category Data (where relevant and voluntary)

• Equality and diversity information (e.g. ethnicity, disability)
• Health information where relevant to the role or reasonable adjustments

Providing this data is optional unless required for legal or safeguarding reasons.

Background Checks

Where required for the role, we may carry out pre-employment checks, including:

• Disclosure and Barring Service (DBS) checks
• Right to work checks
• Professional registration checks

These are carried out in line with legal and safeguarding requirements.

How we use your information

We use your data to:

• Assess your suitability for employment
• Manage the recruitment process
• Carry out background and safeguarding checks
• Communicate with you about your application
• Meet legal and regulatory requirements

Lawful Basis for Processing

We process your personal data under:

• Article 6(1)(b) – Contract (to take steps to enter into employment)
• Article 6(1)(c) – Legal obligation (e.g. right to work checks)

Where we process special category data, we rely on:

• Article 9(2)(b) – Employment and social protection
• Article 9(2)(g) – Substantial public interest (safeguarding and equality monitoring)

Sharing your information

We may share your information with:

• Recruitment system providers
• DBS and background checking services
• Regulatory bodies where required
• Professional referees (with your consent)

All third-party providers are subject to data protection obligations.

We do not sell your personal data.

How long we keep your information

If your application is unsuccessful, we will normally retain your information for 6 to 12 months after the recruitment process has ended.

If you are successful, your information will be transferred to your employee record and retained in line with our Employee Privacy Notice.

How we protect your data

We use appropriate technical and organisational measures to keep your information secure, including:

• Secure recruitment systems
• Access controls and restricted permissions
• Staff confidentiality and data protection training

Your rights

You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion where appropriate
• Object to or restrict processing

To exercise your rights, please contact our Data Protection Officer.

Complaints

If you are unhappy with how your personal data is handled, we encourage you to contact our Data Protection Officer in the first instance.

Data Protection Officer:
Sarah Campbell
Email: DPO-GDPR@harbourhealthcare.co.uk

We will investigate and respond in line with our procedures.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

You can contact the ICO at any time and do not need to contact us first.

Recruitment Fraud Warning

To protect you from fraud:

• We will never ask you to pay for a job application
• Job offers will not be made without an interview

If you receive a suspicious request, contact Action Fraud:
www.actionfraud.police.uk

Further Information

For more information about how we process personal data, please refer to our General Privacy Notice available on our website.

Harbour Healthcare Privacy Notice: Job Applicants

Version 2.0

Effective Date: July 2026

Review Date: Annually or upon significant change

Owner: Data Protection Officer