1. Who we are
Blupulse Ltd is a recruitment and staffing business. We support roles across care and support, nursing, interpreting, security and related staffing services.
If you have questions about this Privacy Notice or want to exercise your data protection rights, contact us at info@blupulse.co.uk.
2. What information we collect
Candidates and workers
When you apply for work or register with BluPulse, we may collect:
- name, address, postcode, email address, phone number and emergency contact details;
- date of birth, National Insurance number and right-to-work information;
- role applied for, employment history, CV, covering letter, interview notes and suitability notes;
- DBS information, training records, references, qualifications and compliance documents;
- role-specific details such as NMC PIN/revalidation for nurses, SIA licence information for security officers, and languages/qualifications for interpreters;
- bank details, payroll records, timesheets, expenses, mileage, leave requests and payment statements;
- documents uploaded by you or about you, such as CVs, ID evidence, training certificates and compliance evidence.
Clients and client contacts
For client organisations, we may collect organisation details, contact details, shift locations, timesheet authoriser details, staffing requests, feedback, complaints, invoices and payment records.
Website enquiries
If you submit a contact form, we collect the details you provide, such as your name, email address, phone number, subject and message, so we can respond to your enquiry.
If you send a care-provider enquiry (to request staff, register your organisation or book a portal demo), we also collect your organisation name, type of service, job title, town or postcode, the roles you need, when you need them or your preferred demo times, and anything else you add. It is stored as an enquiry record in the BluPulse Portal and emailed to our team so we can respond.
3. How candidate data is submitted and stored
When you submit an application on the BluPulse website, the information is sent securely to the BluPulse Portal at portal.blupulse.co.uk. The portal stores application details in the BluPulse recruitment database. Uploaded files, such as CVs or covering letters, are stored in the portal's secure upload storage and linked to your application record.
Access to portal records is role-based. Administrators can review applications and compliance records. Clients and workers are restricted to information relevant to their own organisation or profile.
4. Why we use your information
We use personal data to:
- process applications and assess suitability for work;
- conduct interviews, onboarding, reference checks and compliance checks;
- verify identity, right to work, qualifications and role-specific licences or registrations;
- match workers to suitable shifts and client requirements;
- manage timesheets, expenses, leave, payroll, payment statements and client invoices;
- communicate with applicants, workers, clients and portal users;
- handle feedback, complaints, safeguarding matters and disputes;
- maintain security, audit logs, backups and fraud prevention records;
- meet legal, tax, employment, recruitment, accounting and compliance obligations.
5. Our lawful bases
Depending on the context, we may rely on:
- Contract: to provide recruitment, staffing, worker and client services.
- Legal obligation: for right-to-work, payroll, tax, accounting and statutory compliance.
- Legitimate interests: to manage recruitment, staffing, business administration, security, audit and client service delivery.
- Consent: where we specifically ask for consent, for example optional information or certain communications.
- Special category conditions: where necessary for employment, social security, safeguarding, legal claims or explicit consent where applicable.
6. Who we share information with
We may share relevant information with:
- client organisations where you are being considered for work or are assigned to shifts;
- accountants, payroll bureaux, pension providers and HMRC where needed for payroll or tax;
- DBS, right-to-work, professional register or qualification-check providers;
- IT, hosting, email, portal and backup providers that support our systems;
- insurers, legal advisers, regulators, courts, law enforcement or public authorities where required.
We do not sell personal data.
7. How long we keep information
We keep personal data only for as long as necessary for recruitment, staffing, payroll, accounting, legal, audit, safeguarding, complaint and dispute purposes.
| Record type | Typical retention period | Reason |
|---|---|---|
| Website enquiries from non-applicants | Usually up to 12 months after last contact | Follow-up, enquiry handling and complaint records |
| Unsuccessful applications | Usually up to 12 months after decision | Recruitment audit and complaint/claim handling |
| Successful applications and staff records | Usually up to 6 years after the relationship ends, unless a longer period is required | Employment, tax, audit, client and compliance records |
| Right-to-work records | Duration of engagement plus a further period required by law/guidance | Legal right-to-work compliance |
| DBS certificate copies | Not kept longer than necessary; usually no longer than 6 months unless there is a clear lawful reason | DBS handling expectations |
| DBS status/number/expiry metadata | Usually up to 6 years after the relationship ends | Compliance audit evidence |
| Timesheets, invoices, expenses, payment and payroll records | Usually 6 years | Accounting, tax, payroll and dispute records |
| Complaints, safeguarding and serious incident records | Reviewed case-by-case and may be kept longer | Safeguarding, legal and client-framework requirements |
Retention periods may be extended where required by law, regulation, insurance, litigation, safeguarding, HMRC, client framework requirements or professional advice.
8. How we protect information
We use practical technical and organisational measures to protect personal information, including HTTPS encryption, role-based access controls, password controls, audit logs, restricted administrative access, file-access controls, backups and internal procedures. We regularly review and improve these measures.
9. Your rights
Depending on the circumstances, you may have the right to:
- ask for a copy of your personal data;
- ask us to correct inaccurate information;
- ask us to delete information where we no longer have a lawful reason to keep it;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent;
- complain to the Information Commissioner's Office.
To make a request, email info@blupulse.co.uk.
10. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve it. You can also complain to the Information Commissioner's Office at ico.org.uk.
11. Updates to this notice
We may update this Privacy Notice as our services, portal, compliance requirements or legal obligations change. The latest version will be published on this page.