Legal
Candidate & Worker Privacy Notice
If you apply to Kome Staffing, register with us, or work on assignment through us, this notice explains what we collect, why, who sees it and how long we keep it.
It sits alongside our main Privacy Notice and gives more detail on the checks that healthcare and social care work requires.
Policy detail
Controller and contact
Kome Care Ltd, trading as Kome Staffing, is the controller for the data described here. Company number 12427516. ICO registration ZA769020.
- Data protection contact: info@komestaffing.co.uk
- Registered office: 408 Tower Bridge Business Centre, East Smithfield, London, E1W 1AW, United Kingdom
What we collect and when
When you apply or register
- Name, contact details, address and date of birth
- Right to Work documents and immigration status where relevant
- CV, employment history and explanation of any gaps
- Qualifications, training certificates and competency evidence
- Professional registration details (for example NMC, GMC, Social Work England, HCPC) where the role requires them
- Availability, preferred locations, shift preferences and pay expectations
- References from previous employers or professional referees
Before you are approved for assignments
- DBS certificate information at the level appropriate to the role and setting, and DBS Update Service status where used
- Occupational health clearance and immunisation or fitness information where a client or setting requires it
- Mandatory and role-specific training records
- Evidence of specific competencies where an assignment requires them
While you work through us
- Assignment history, bookings, shifts worked and timesheets
- Pay, tax, National Insurance and pension records
- Feedback, incidents, complaints and any safeguarding matters
- Correspondence with our staffing team
- Ongoing compliance monitoring — expiry dates and renewals of documents
Where we get your data
- Directly from you, through registration, forms, interviews and correspondence
- From referees you nominate
- From the Disclosure and Barring Service and our umbrella body
- From occupational health providers
- From professional regulators' public registers
- From training providers where you ask them to confirm your records
- From client organisations, in relation to assignments you have worked
- From job boards or referrals, where you have applied or consented to being introduced
Why we process it, and our lawful bases
| Purpose | Lawful basis (Art. 6) | Special category / criminal offence condition |
|---|---|---|
| Assessing your application and suitability | Steps prior to a contract; legitimate interests | — |
| Right to Work checks | Legal obligation | — |
| DBS and criminal record checks | Legal obligation; legitimate interests | DPA 2018 Sch. 1 Pt. 2 — employment, and safeguarding conditions |
| Occupational health and fitness | Legal obligation; legitimate interests | Art. 9(2)(b) and (h); DPA 2018 Sch. 1 Pt. 1 |
| Matching you to assignments | Contract; legitimate interests | — |
| Paying you and meeting tax duties | Contract; legal obligation | — |
| Safeguarding concerns | Legal obligation; vital interests | DPA 2018 Sch. 1 Pt. 2 — safeguarding |
| Equality monitoring, where carried out | Legitimate interests | DPA 2018 Sch. 1 Pt. 2 — equality of opportunity or treatment |
| Defending legal claims | Legitimate interests; legal obligation | Art. 9(2)(f) where relevant |
Providing some of this data is a statutory or contractual requirement. If you cannot provide it, we may not be able to put you forward for assignments — we will tell you where that is the case.
DBS and criminal record information
The level of DBS check required is determined by the role and the setting, not by preference. We only request the level the role lawfully allows.
DBS certificate information is handled under a written policy on the secure handling, use, storage, retention and disposal of certificate information, consistent with the DBS Code of Practice.
Certificate information is seen only by those who need to see it as part of their duties, is not kept for longer than necessary, and a disclosure does not automatically prevent you working — decisions consider the role, the setting and the circumstances.
Health and occupational health information
We may receive occupational health clearance, fitness-to-work outcomes, immunisation status and reasonable adjustment recommendations.
We normally receive an outcome and any adjustments needed, rather than your full clinical detail. We share with a client only what the assignment genuinely requires.
How long we keep it
Retention periods are set out on the Data Retention page. In summary, unsuccessful applicant records are kept for a limited period, worker records for longer because of tax, pension and legal-claim obligations, and DBS certificate information is not retained beyond what is necessary.
Your rights
You have the full set of UK GDPR rights over your data, including access, rectification, erasure, restriction, portability and objection. See Your Data Rights for how to make a request and what happens next.
Some rights are qualified. For example, we may not be able to erase records we must keep for tax, safeguarding or legal-claim purposes.
Complaints
Contact us at info@komestaffing.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Registering with Kome Staffing?
See what the process involves, the documents you will need and the checks that apply.
Prefer to talk? Call 020 8075 5966
