Privacy Policy

Effective Date:  16/10/2025/ Last Updated: 03/11/2025

Trading Name: Tamara Murray trading as TM Compliance Consultancy

1. Introduction: Welcome to TM Compliance Consultancy. I provide healthcare compliance consultancy services to recruitment agencies that supply staff to the NHS and private healthcare sectors. I am committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how I collect, use, and protect your personal data.

2. Data Controller: Tamara Murray trading as TM Compliance Consultancy, Email: [tamara@tmcomplianceconsultancy.co.uk], ICO Registration Number: 00011870759. As a sole trader, I am the Data Controller responsible for any personal data processed in the course of providing consultancy services. 

3. Information I Collect: Depending on the nature of our engagement, I may collect and process: From Clients (Recruitment Agencies) - Name, business name, and contact details. Details about your compliance processes and systems. Documentation necessary for consultancy or audit work.  From Candidates (Indirectly, via Clients) - Limited personal data for compliance purposes, such as: DBS certificate information. Training or qualification records. Vaccination evidence or occupational health checks. Proof of ID and right-to-work documentation. Candidate data is handled only when required for consultancy purposes and is securely deleted once the project concludes.

4. How I Use Personal Data: I use personal information to: Deliver consultancy and audit services. Communicate with clients about projects or services. Support compliance with NHS and private healthcare standards. Maintain professional and financial records. Comply with legal and regulatory requirements.  

5. Lawful Basis for Processing: Your personal data is processed under one or more of the following lawful bases:  Legitimate Interests: to deliver agreed consultancy services and maintain client relationships. Legal Obligation: to meet audit or record-keeping requirements. Consent: where explicit permission is provided for specific processing activities. 

6. Data Storage and Security: All data is stored digitally on a secure, password-protected laptop. Information is not shared with third parties unless required by law or contract. Candidate data is deleted upon completion of consultancy work. Appropriate measures are in place to prevent unauthorised access, alteration, or loss of information.  

7. Data Retention: Client data: kept for up to 6 years after the end of the project for record-keeping and professional purposes. Candidate data: deleted once consultancy or audit work concludes, unless otherwise required by law. 

 8. Sharing of Data: Personal data will never be sold or shared for marketing purposes. It may be shared only with: Legal or regulatory authorities where required. Professional advisers (e.g., accountants, insurers) who are bound by confidentiality obligations. 

9. Your Rights: Under the UK GDPR, you have the right to: Access the personal data I hold about you. Request correction of inaccurate data. Request erasure of your data (“the right to be forgotten”). Object to or restrict how your data is processed. Request transfer of your data to another organisation (where applicable). To exercise these rights, please contact me at [tamara@tmcomplianceconsultancy.co.uk].

10. Data Breaches: In the unlikely event of a personal data breach, I will notify affected individuals and the Information Commissioner’s Office (ICO) within 72 hours, as required by law. 

11. Updates to This Policy: This Privacy Policy may be updated periodically to reflect legal or operational changes. The most current version will always be available on this page: 👉 www.tmcomplianceconsultancy.co.uk/privacy-policy

12. Contact: If you have any questions about this Privacy Policy or how your data is handled, please contact: Tamara Murray Trading as TM Compliance Consultancy.

📧 Email: tamara@tmcomplianceconsultancy.co.uk

📍 Website: www.tmcomplianceconsultancy.co.uk