Nu-Gen1. Who we are
Nu-Gen Healthcare ("Nu-Gen", "we", "us", "our") is a nursing and care staffing agency based at Office 311, City East Business Centre, 68-72 Newtownards Road, Belfast, BT4 1GW. We supply registered nurses, healthcare assistants and support staff to care homes and healthcare facilities across Northern Ireland.
We are the data controller for the personal data described in this policy, which means we decide how and why it is used. This policy explains what we collect through this website and our recruitment and staffing services, why, and the choices and rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Questions about this policy or your data can be sent tocontact@nugen-healthcare.co.uk, by phone on028 9018 4412, or by post to the address above, marked "Data Protection".
2. What we collect
If you request staff (care homes and facilities)
When you use our "Request staff" form, call or email us, we collect your organisation or facility name, your name, work phone number and email address, the roles you need and when you need cover, plus anything else you tell us about the booking.
If you apply for a job
When you apply through our careers pages, we collect the role you're applying for, your name, email address, phone number, preferred shift pattern, whether you have the right to work in the UK, your CV and any message you add. If your application progresses we will collect further information needed to place you safely, described in section 4.
If you contact us
We keep the emails, messages and call notes needed to deal with your enquiry.
When you visit the website
Our hosting provider automatically processes technical information such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. If — and only if — you accept analytics or marketing cookies, we also collect information about how you use the site. SeeCookies.
3. How we use it and our legal basis
| Purpose | Legal basis (UK GDPR Article 6) |
|---|---|
| Responding to staffing requests, arranging cover and managing our relationship with client facilities | Legitimate interests (running our business) and, once you book with us, performance of a contract |
| Considering job applications, interviewing and recruiting staff | Taking steps at your request before entering into a contract, and legitimate interests (recruitment) |
| Carrying out pre-placement vetting and meeting regulatory requirements (RQIA, NMC, NISCC, AccessNI) | Legal obligation |
| Answering general enquiries | Legitimate interests |
| Keeping the website secure and working | Legitimate interests |
| Analytics and advertising measurement cookies | Consent — which you can withdraw at any time |
We do not sell your personal data, and we won't send you marketing unless you have asked us to. We do not make decisions about you based solely on automated processing.
4. Sensitive information and vetting checks
Because we place people in health and social care settings, recruitment involves some more sensitive information. Before a first placement we carry out enhanced AccessNI (criminal record) checks, verify NMC or NISCC registration, take references, confirm right to work and check mandatory training. We may also collect health information needed to confirm fitness for a role or make reasonable adjustments.
We process this information because it is necessary to meet our obligations in employment and social protection law and to safeguard the people our staff care for (UK GDPR Article 9(2)(b) and (h), and Schedule 1 of the Data Protection Act 2018). These checks are carried out directly with you during the recruitment process, not through this website.
Please don't include sensitive information such as health conditions, religion or ethnicity in your CV or online application unless you want us to take it into account.
5. Who we share it with
We only share personal data where we need to, with:
- Client facilities — when we propose or place a member of staff, we share the information the facility needs to accept them (such as name, role, registration and compliance status).
- Regulators and vetting bodies — such as AccessNI, the NMC, NISCC and RQIA, where the law or our registration requires it.
- Service providers acting on our instructions, under contracts that require them to keep your data secure and use it only for us:
- Vercel Inc. — hosts this website and runs the forms.
- Mailgun Technologies, Inc. — delivers form submissions to our inbox by email.
- Google — Google Analytics and advertising measurement, only if you consent to those cookies; and Google Maps, only if you choose to load the map.
- Others where required by law — for example the police or courts, or professional advisers such as our accountants and solicitors.
6. International transfers
Some of our service providers are based in, or have staff in, the United States. Where personal data is transferred outside the UK, we make sure it is protected by an adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Addendum to standard contractual clauses.
7. How long we keep it
| Information | How long we keep it |
|---|---|
| Staffing requests and client contact details | For as long as we work together, then up to 6 years for contract, tax and audit purposes |
| Unsuccessful job applications and CVs | Up to 12 months after the recruitment decision, unless you ask us to delete it sooner |
| Staff and placement records (including vetting) | For the length of your engagement, then for the period required by regulators and employment law |
| General enquiries | Up to 2 years after our last contact |
| Analytics data (if you consent) | Up to 14 months |
When information is no longer needed, we securely delete or anonymise it.
8. Keeping it secure
This website is served only over encrypted HTTPS connections. Form submissions are sent straight to our inbox and are not stored in a website database. Access to personal data is limited to staff who need it for their role, and we expect the same of our service providers.
9. Your rights
Under UK data protection law you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is inaccurate or incomplete.
- Erasure — ask us to delete your data where we no longer have a reason to keep it.
- Restriction — ask us to limit how we use your data in certain circumstances.
- Objection — object to processing based on our legitimate interests.
- Portability — ask for data you gave us in a commonly used electronic format.
- Withdraw consent — where we rely on consent (such as cookies), you can withdraw it at any time without affecting anything done before.
To use any of these rights, email contact@nugen-healthcare.co.uk. There's normally no charge, and we will respond within one month. We may need to confirm your identity first.
10. Cookies
Cookies are small files that a website stores on your device. Similar technologies, such as your browser's local storage, work in the same way and are covered here too. We only use cookies that aren't strictly necessary if you agree to them through our cookie banner. Nothing is loaded from Google Analytics or Google Ads until you do.
| Name | Category | Purpose | Duration |
|---|---|---|---|
nugen-cookie-consent (local storage) | Strictly necessary | Remembers your cookie choices so we don't ask on every page | Until you change your choice or clear your browser data |
_ga, _ga_* | Analytics (optional) | Google Analytics — counts visits and shows which pages are used, so we can improve the site | Up to 2 years |
_gcl_au and other Google Ads cookies | Marketing (optional) | Measures whether our online adverts lead to enquiries | Up to 90 days |
| Google Maps cookies | Third party (optional) | Set by Google only if you click "Load map" on our map | Set by Google — see Google's privacy policy |
We use Google Consent Mode, so Google's tags respect the choices you make. You can change or withdraw your consent at any time with the button above or the "Cookie settings" link at the bottom of every page. Withdrawing consent removes our analytics and marketing cookies from your browser. You can also block or delete cookies in your browser settings. Learn more about how Google uses data atpolicies.google.com.
11. Other things you should know
- Children — our website and services are aimed at adults and care providers. We don't knowingly collect data from children under 16 through this website.
- Other websites — links to other sites, such as our social media pages, are covered by those sites' own privacy policies.
- Changes — we may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes we'll ask for your cookie consent again where relevant.
12. Contact and complaints
If you have a concern about how we've handled your data, please contact us first atcontact@nugen-healthcare.co.uk so we can try to put it right. You also have the right to complain to theInformation Commissioner's Office (ICO), the UK's data protection regulator, on 0303 123 1113.