Privacy Notice

Maple Reach Ltd
Last updated: April 2026

1. Introduction

Maple Reach Limited acts as a recruitment business and recruitment agency, as defined under the Conduct of Employment Agencies and Employment Businesses Regulations 2003, providing work‑finding services to organisations and professionals across education, healthcare and specialist settings. To deliver these services, we process personal data, including special category data where required. In doing so, we act as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting your privacy, handling personal data responsibly, and complying with applicable data protection law. This Privacy Notice should be read alongside our Cookies Policy.

2. How we collect personal data

We may collect personal data: Directly from you (for example via our website, application forms, CVs, emails, phone calls or meetings). From clients or organisations you are introduced to. From referees you nominate. From publicly available sources (such as professional networking sites). From job boards where you have chosen to make your details visible.

3. Who we process data about

We process personal data relating to: Candidates and prospective candidates, Individuals working within education, healthcare or client organisations, referees and emergency contacts, website visitors

4. Purpose of processing

We process personal data to: Provide work‑finding and recruitment services. Assess suitability for roles across education, therapy, clinical and specialist settings. Introduce candidates to organisations. Carry out safeguarding and compliance checks where required. Communicate with candidates and clients. Maintain accurate recruitment records. Meet legal, regulatory and safeguarding obligations. This may include roles and environments aligned with professional, regulatory or NHS-related requirements. The more relevant information you choose to share, the better we can support you appropriately.

5. Categories of personal data

Personal data may include: Name, address, email address and telephone number, CVs, qualifications, training and employment history, Right‑to‑work information, references and referee contact details, communications with us, website usage data and IP address. Special category data (where required): Date of birth, information relating to safeguarding checks, including DBS, Health or disability information (where relevant and lawful), Equality and diversity information (where provided voluntarily), We only collect special category data where it is necessary and lawful to do so.

6. Legal basis for processing

We rely on one or more of the following lawful bases:
Consent: where you have given clear permission.
Contract:where processing is necessary to provide recruitment services
Legal obligation: including safeguarding and employment law.
Legitimate interests: where processing is reasonably expected and does not override your rights.

Where we rely on consent, you may withdraw it at any time.

7. Who we may share data with

We may share personal data with: Clients or organisations (with appropriate safeguards), Referees (for reference purposes), Safeguarding and background checking providers (e.g. DBS), Professional advisers, insurers or regulators where required by law, Technology providers supporting our recruitment systems.

We do not sell personal data.

8. Data retention

We retain personal data only for as long as necessary. As a general guide: Candidate records are reviewed regularly. Where there has been no meaningful engagement, data may be deleted after a reasonable period. Where placements have occurred, records may be retained longer to meet legal, regulatory or safeguarding obligations. Retention periods are reviewed in line with legal requirements and ICO guidance.

9. Your rights

You have the right to: Access your personal data. Request correction of inaccurate data. Request erasure (where applicable. Restrict or object to processing. Withdraw consent. Lodge a complaint with the ICO.

Requests can be made by emailing:
info@maplereach.co.uk

10. Automated decision‑making

We do not use automated decision‑making or profiling that produces legal or significant effects.

11. Cookies and website use

We use cookies to help our website function properly and understand usage.
Please see our Cookies Policy for details.

12. Data security

We take appropriate technical and organisational measures to protect personal data, including access controls and secure systems. While we take reasonable steps to protect information, no method of transmission over the internet is completely secure.

13. Changes to this notice

We may update this Privacy Notice from time to time.
The latest version will always be available on our website.

14. Complaints

If you have concerns about how we handle personal data, please contact us first at:
info@maplereach.co.uk

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO):
Report a concern to the ICO