Privacy Policy

Indigo Healthcare, a specialist division of Cubed Resourcing Ltd (“the Company”) of Salts Mill, Victoria Road, Saltaire, BD18 3LF 

The Company is a recruitment business which provides work-finding services to its clients and work-seekers and a training and development consultancy provider. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.

This notice applies to current and former employees, candidates, workers, contractors, suppliers and companies who use our services.
You may give your personal details to the Company directly in person or email, such as on an application, CV or registration form or via our website, or we may collect them from another source such as a jobs board, LinkedIn or a third party referral.  
The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services, training and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement.
  1. Collection and use of personal data
  1. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services, fulfilling a contract, delivering learning and development programmes.
We use information held about you in the following ways:-
  • To carry out our obligations arising from any contracts we intend to enter into (or have entered into between you and us); and to provide you with the information, products and services that you request from us or we think will be of interest to you because it is relevant to your career or to your organisation.
  • To provide you with information about other goods and services we offer that are similar to those that you have already purchased, been provided with or enquired about.
  • The core service we offer to our candidates and clients is the introduction of candidates to our clients for the purpose of temporary or permanent engagement and to deliver our learning and development programmes. Our services also involve supporting individuals throughout their career and supporting businesses’ recruitment needs and strategies.
  • Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data.
  • We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.
  • We will rely on legal obligation if we are legally required to hold information on to you to fulfil our legal obligations. 
  • We will process sensitive personal data such as medical information to ensure your health and safety in the workplace and to assess your fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence, process benefits and to comply with legal obligations.  We may process information about your race or ethnic origin, religion or gender for diversity/equal opportunities monitoring.
  • We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required.
  1. Categories of data
Candidate/Employee Data – the information we collect may include personal contact details, CV/Work history, education details, emergency contact details, immigration status to check your right to work in the UK, salary information, bank details to process payments to you, pension entitlement, working hours, referee details, a copy of your driving licence and/or passport/identity card, job preferences, training or education certificates, tax codes, leave records, training details, timesheet records, your photograph, dependent details, letters of concern or warning as part of disciplinary proceedings, internal performance data and related documents re capability procedures and appraisals
In order to carry out our legal or contractual obligations, we may also collect information you provide us related to your health or disability, diversity information or details of any criminal convictions required for the role you are interested in applying for.
Client or Supplier Data – individual contacts within organisations, including names, telephone numbers, email addresses, bank details for processing payments
  1. Our Legitimate Business Interests
The Company’s legitimate interests to process your personal data are as follows:
  • As a recruitment business and recruitment agency, we introduce candidates to clients for permanent employment, temporary worker placements or independent professional contracts.  The exchange of personal data of our candidates and our client contacts is a fundamental, essential part of this process.
  • In order to support our candidates’ career aspirations and our clients’ resourcing needs and strategies, we require a database of candidate and client personal data containing historical information as well as current resourcing requirements.
  • To maintain, expand and develop our business we need to record the personal data of prospective candidates and client contacts.
  • For employees, to carry out the employment contract you have entered into with us
  1. Recipient/s of data
The Company will process your personal data and/or sensitive personal data with the following recipients:
  • Prospective employers and our clients
  • Individuals and organisations who hold information related to your reference or application to work with us, such as current, past or prospective employers, educators, examining bodies, employment and recruitment agencies.
  • Professional associations, regulatory or law enforcement agencies
  • Third party service providers who perform functions on our behalf (including pension scheme providers, CRM provider, professional advisors such as lawyers, auditors, accountants, technical support functions)
  • Third party outsourced IT and document storage providers where we have an appropriate processing agreement (or similar protection) in place
  • If the Company merges with or is acquired by another business or company in the future, we may share your personal data with the (prospective) new owners of the business or company.
  1. Data retention
The Company will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
We must also keep your payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
Our minimum retention period for candidate files, personnel files and training records (including disciplinary records and working time records) is 7 years after the date on which we last provide services to the associated applicant or client or 7 years after employment has ended.  We may hold data longer if contractually required to do so, and for contract clients we will hold all data relating to service provided for a minimum of 7 years after the contract expires.  Where such records could be relevant to a claim for personal injury, we will retain them for a minimum of 21 years from contract expiry.
If you exercise your right to erasure, we will retain all information we are legal obligated to do so (such as employment contract data or financial payment), for the period that is set out by that legal obligation.  We may also keep your name and the bare minimum of contact details so that we do not contact you or re-enter your details inadvertently in the future.   Where technology allows, any data that we retain following an erasure request, will be anonymised.
  1. Your rights
Please be aware that you have the following data protection rights:
  • The right to be informed about the personal data the Company processes on you;
  • The right of access to the personal data the Company processes on you;
  • The right to rectification of your personal data;
  • The right to erasure of your personal data in certain circumstances;
  • The right to restrict processing of your personal data;
  • The right to data portability in certain circumstances;
  • The right to object to the processing of your personal data that was based on a public or legitimate interest;
  • The right not to be subjected to automated decision making and profiling; and
  • The right to withdraw consent at any time.
Where you have consented to the Company processing your personal data and sensitive personal data you have the right to withdraw that consent at any time by contacting
  1. Complaints or queries
If you wish to complain about this privacy notice or any of the procedures set out in it please contact: Operations Manager, Cubed Resourcing Ltd, Salts Mill, Victoria Road, Saltaire, Shipley, BD18 3LF.
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.