Privacy Notice for contractor applicants and successful candidates

UnitedHealthcare Global Medical Services

UnitedHealthcare Global Medical (UK) Limited, trading as UnitedHealthcare Global Medical and its subsidiaries and affiliated companies (collectively, the “Company”) strives to properly address applicable data protection and privacy legal requirements. 

UnitedHealthcare Global Medical is the primary data controller in respect of your Candidate Data with which you are applying for work. 


This Privacy Policy for Applicants and Successful Candidates' Data (“Privacy Policy”) provides the individuals who apply to work with and / or who have been offered work by one of the Company’s subsidiaries and affiliates in the European Economic Area (EEA) ("Applicants" and "Successful Candidates" respectively) with certain important information about how the Company handles their personal data ("Candidate Data").

UHCG FZE, and its subsidiaries and affiliated companies (collectively, the “Company”) strives to properly address applicable data protection and privacy legal requirements. 

The primary data controller in respect of your Candidate Data is the entity with which you are applying for work.

Types of candidate data collected

Candidate Data is provided by Applicants and Successful Candidates, and includes the following types of data:

  • Name
  • Date of Birth
  • Address
  • Email Address
  • Telephone Number (landline and mobile)
  • CV
  • Employment history
  • Education history
  • Referee contacts
  • National Insurance Number/ social security number
  • Health information
  • Gender
  • Nationality
  • Place of Birth
  • Marital Status

Purpose of collection and uses, legal bases, and disclosures of candidate data

The Company will only use and otherwise process Candidate Data:

  • of  Applicants for recruiting and  placement purposes including notification of future  opportunities; and
  • of Successful Candidates for on-boarding purposes and background screening, including enrolment in payroll and applicable employee benefit schemes, preparation of the Contractor Agreement, and other administrative purposes necessary for the Successful Candidate to commence work with the Company.

Company’s legal bases to use and process Candidate Data include that the processing is necessary for:

  • the Company’s legitimate interests, including those described above, as processing Candidate Data is necessary to carry out the recruitment process and to make it possible for  Applicants and Successful Candidates to apply for and / or be appointed to work with the Company);
  • compliance with Company’s legal obligations, such as accounting and tax requirements;
  • the performance of the contractor agreement between the Company and Successful Candidates; 
  • where applicable, on the basis of the consent of Applicants or Successful Candidates, which may subsequently be withdrawn at any time by contacting us via the information in the “Contact Information” section, without affecting the lawfulness of processing based on consent before its withdrawal. 

As necessary in connection with these purposes, authorized processors and limited members of the Recruitment team, the Finance department, the IT department, and senior executive company managers may access and otherwise process Candidate Data in connection with their work responsibilities. Some of these personnel may be contracted by the Company at our various global locations outside of the EEA, including in countries that may not provide the same level of data protection as the home country of the Applicant and Successful Candidate, including without limitation locations in the United States of America, India, Canada, Australia, New Zealand, Brazil, China, Hong Kong, Singapore, Philippines, and United Arab Emirates. The Company takes appropriate steps to ensure that such personnel are bound to duties of confidentiality with respect to Candidate Data, and the Company implements measures such as standard data protection clauses to ensure that any transferred Candidate Data remains protected and secure. You can obtain a copy of these clauses by contacting us via the information found in the “Contact Information” section. The use and transfer of Candidate Data are only for the purposes outlined in this policy and in accordance with applicable law.

Use of candidate data for background checks and who we collect data from

Offers of work with the Company, where permitted by local law, may be subject to and conditional upon the completion of certain background checks which are permitted by applicable employment and other laws including searches of the following databases:

  • databases relating to serious and organised crimes, databases managed by regulatory and compliance authorities, web and media databases, and global sanctions and watch lists managed by financial regulatory bodies and law enforcement agencies);
  • standard sanctions databases (UN, EU, U.S. lists, etc.) in compliance with economic sanctions laws throughout the world; and

(the "Background Checks").  Candidate Data provided by the Successful Candidate following an offer of work may be used to facilitate the conduct of Background Checks.  No Background Checks will be undertaken prior to an offer of work being made. 

Due to the nature of the Company's business, it will carry out regular and ongoing screenings of the databases listed above during the course of the contractor agreement to ensure that the Successful Candidate remains suitable for work with the Company and are permitted without exception to provide services to all of the Company's clients and in particular to organisations who prohibit excluded or debarred individuals from working on their account. Any offer of work will be strictly conditional on passing these screenings during the course of work. 

Conduct of the Background Checks may involve the collection of additional information about the Successful Candidate from educational institutions, government agencies, previous employers, credit reporting agencies, information in the public domain and law enforcement agencies at the international, national or local level so far as is permitted by applicable law. If a Successful Candidate's prior employers and/or other references are contacted, the report may include information obtained through personal interviews.

In so far as permitted under applicable local law, the information collected may include, but is not limited to, educational and professional achievement / qualifications, employment references, information freely available in the public domain, and criminal history records including enhanced disclosure where required by law for a particular position (the "Background Check Data"). If Applicants and Successful Candidates provide the Company with data of third parties (such as former employers, references, etc.) it is the responsibility of Applicants and Successful Candidates to ensure that the communication of such data to the Company and further processing by the Company according to this Privacy Policy is lawful.

Transfer to third parties

The Company uses third party vendors for certain services, including:

  • the online recruitment portal in which Applicants enter and submit their application; and 
  • the conduct of the Background Checks described above. 

When the Company retains a third-party vendor, that vendor will be carefully selected and required to use appropriate measures to protect the confidentiality and security of personal data.

Some of these third parties are located outside the EEA, including in countries that may not provide the same level of data protection as your home country, such as the United States of America and India. To the extent required by applicable law, the Company will address any applicable requirement to assure an adequate level of data protection before transferring Candidate Data and Background Check Data by implementing measures such as standard data protection clauses to ensure that any transferred Candidate Data remains protected and secure. You can obtain a copy of such clauses by contacting us via the information found in the “Contact Us” section.

Retention of candidate data and background check data

Candidate Data and Background Check Data will be retained only for so long as reasonably necessary for the purposes set out above, in accordance with applicable laws. 

When a Successful Candidate enters into a contractor agreement with the Company, his or her Candidate Data and relevant Background Check Data may be transferred to a contractor file and may be processed and retained in accordance with applicable law or the Company's Data Protection Policy from time to time in force, a copy of which is available on the Company website.

Data Security and Data Integrity

The Company maintains reasonable security measures to safeguard Candidate Data from loss, interference, misuse, unauthorized access, disclosure, alteration or destruction. The Company also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete and current.


Applicants and Successful Candidates are entitled to request access to, rectification or erasure of their own Candidate Data or restriction of processing or to object to processing of their own Candidate Data and other rights in accordance with applicable law or Company policy. Requests should be submitted in writing (an email message is acceptable), to the Recruitment Team using the information below in the “Contact Information” section. 

If an Applicant or Successful Candidate is aware of changes or inaccuracies in his or her Candidate Data of which the Company is not aware, he / she should inform the local Recruitment Team of such changes so that the Candidate Data may be updated or corrected.  

Candidate Data from Applicants will be retained on file, to be used for future opportunities, subject to applicable law on retention of personal data. If at any point before an Applicant is offered an assignment they wish to have their application information removed from the recruitment database, the Applicant should send a written request to the local Recruitment Team with the subject line "Please remove me from your Recruitment database". Notwithstanding such a request, certain information may be retained as required by applicable law. In such cases, the Applicant will no longer be considered for opportunities unless he / she reapplies with the Company.

Applicants and Successful Candidates may lodge a complaint with a supervisory authority if they consider that Company’s processing of their Candidate Data infringes applicable law.

Disclosures Required or Permitted By Law

Regardless of any other provisions in this Privacy Policy, the Company may disclose or otherwise process Candidate Data in the context of any sale or transaction involving all or a portion of the business, or as may be required or permitted by law or required for the purposes of any regulatory audit to which the Company may be subject from time to time. 

Contact Information

Applicants and Successful Candidates can raise any issues regarding their Candidate Data with their local Recruitment Team at, Global Medical Privacy at, or our Data Protection Officer by emailing