top of page

Privacy Policy

PRIVACY NOTICE
Priority Recruitment Services Ltd (t/a Thriving)
 

INTRODUCTION

Priority Recruitment Services Ltd (trading as Thriving) is committed to protecting and respecting your privacy.
 

As part of our services, we process personal data relating to our staff, service users, clients, and other relevant individuals. Processing includes collection, storage, sharing and secure deletion of data.

We are registered with the Information Commissioner’s Office (ICO):
Registration number: ZA542395

Data Protection Officer (DPO):
Email: dpo@thriving.healthcare
Address: 4th Floor, 39 Deansgate, Manchester, M3 2BA
 

SERVICE USERS


What data we collect
To provide safe and effective care, we process:

  • Personal details (name, address, date of birth, next of kin)

  • Financial information (funding arrangements and payments)

  • Health and social care data (physical and mental health)

  • Where required: equality and diversity data
     

Why we process this data

We process personal data under the following lawful bases:

  • Legal obligations under health and social care legislation

  • Provision of care services

  • Safeguarding and protection requirements

  • Public interest (including regulatory requirements such as the CQC)

  • Consent, where applicable
     

Confidentiality

We comply with the common law duty of confidentiality.

Information is shared only where:

  • The individual has consented

  • There is a legal requirement

  • There is an overriding safeguarding or public interest justification


Who we share data with

Where necessary, we may share information with:

  • NHS and healthcare professionals (GPs, hospitals, pharmacies)

  • Local authorities, commissioners and case managers

  • The Care Quality Commission (CQC)

  • Family members (with consent)

  • Law enforcement agencies (where required by law)
     

STAFF
 

What data we collect

We maintain records including:

  • Personal details (name, address, National Insurance number)

  • Payroll, pension and financial information

  • Training and compliance records
     

We may also process:

  • Health information (e.g. fit notes)

  • Equality and diversity information (where appropriate)
     

Disclosure and Barring Service (DBS)

Where required for a role:

  • DBS checks are carried out in line with legal requirements

  • We do not retain copies of DBS certificates

  • We record that a check has been completed and the outcome

  • We do not routinely share DBS certificates with third parties

  • Where necessary, we provide confirmation of DBS status or relevant safeguarding information only
     

FRIENDS, RELATIVES AND EMERGENCY CONTACTS

We may hold:

  • Name and contact information

This is used for:

  • Emergency contact purposes

  • Supporting service delivery and safeguarding
     

DATA STORAGE AND SYSTEMS

We operate a secure, cloud-based environment.

Personal data is stored and processed using:

  • Microsoft 365 (Exchange, OneDrive, SharePoint)

  • Care platform: OneTouch Health

  • Recruitment/CRM system: Vincere

  • Payroll providers: Workwell and Evertime

  • Pension provider: NEST Pensions

We do not store personal data on unsecured local devices.

Access is restricted to authorised personnel only.
 

DATA RETENTION

Personal data is retained:

  • Only for as long as necessary

  • In line with legal and regulatory obligations

  • In accordance with the NHS Records Management Code of Practice and internal policies

When no longer required, data is securely deleted or destroyed.
 

WEBSITE DATA

When using our website, we may collect:

  • Contact details submitted via forms

  • Job application information

  • Technical data (such as IP address and browser data)

Cookies are used to support functionality and improve user experience.
 

MARKETING

We may contact individuals regarding:

  • Job opportunities

  • Care services

  • Industry updates

You can opt out of marketing communications at any time.
 

YOUR RIGHTS

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion where appropriate

  • Restrict processing of your data

  • Withdraw consent

  • Object to processing
     

To exercise your rights, contact:
dpo@thriving.healthcare


You also have the right to complain to the Information Commissioner’s Office at Wycliffe House, Wilmslow, Cheshire.


UPDATES

We keep this privacy notice under regular review and will update it as required.

Last updated June 2026

bottom of page