Privacy Policy

This Privacy Policy explains what happens to your personal information when you register with, or are placed by, Coralta, Lincoln Building, 6th Floor, 27–45 Great Victoria Street, Belfast, BT2 7SL (“Coralta”, “we”, “us”).

Coralta is part of 1-Experience Group. As explained below, for certain purposes Coralta and other 1-Experience Group recruitment brands act as joint controllers of your information.

We collect the personal information you give us when you register as a candidate, including your name, contact details, CV, qualifications, job preferences and right to work information.

Where relevant to your role, we also collect medical and vetting information needed to place you safely and lawfully, such as professional registration details, occupational health information and DBS, Access NI or equivalent checks.

We use your core candidate information—name, contact details, CV and job preferences—to register you, match you to suitable roles and manage your placement with Coralta. Where you have given us your consent to hold this information for this purpose, we rely on that consent.

We process medical and vetting information on the basis of our legitimate interests, for the narrow administrative purpose of confirming you are safe and eligible to work in a given role.

Coralta is part of 1-Experience Group, which also includes other medical recruitment brands. These group brands act as joint controllers for the purpose of considering you for suitable opportunities across the wider group, under a joint controller agreement made under Article 26 UK GDPR.

We rely on our legitimate interests, and those of the other participating group brands, to help you access a wider range of suitable roles and help our brands fill roles efficiently, while keeping the way we handle your data consistent and providing one clear point of contact.

Where medical or vetting information is shared for this purpose, we rely on the same legitimate interests basis together with the appropriate condition under Article 9 UK GDPR for special category data, restricted to what is necessary for assessing your suitability and eligibility.

You have the right to object to your information being used in this way. If you do not want your information shared with or used by other 1-Experience Group brands for this purpose, email [email protected].

If you object, we will stop using your information for this purpose unless we can show compelling legitimate grounds which override your interests, rights and freedoms, or the processing is needed for the establishment, exercise or defence of legal claims. This does not affect the separate service you receive from Coralta directly.

Coralta and the other participating 1-Experience Group brands are joint controllers for the group-matching purpose described above. Our joint controller agreement sets out each entity’s responsibilities, including who you should contact for different purposes and how requests relating to your information are handled. A full copy is available on request.

For Coralta-specific processing outside the group-matching arrangement—such as day-to-day registration, booking, shift management and payroll—Coralta remains the sole data controller.

1-Experience Group has a single, group-level Data Protection Officer who acts as the point of contact for data subjects and regulators across participating group brands, including Coralta.

Contact the Data Protection Officer at [email protected], or write to Lincoln Building, 6th Floor, 27–45 Great Victoria Street, Belfast, BT2 7SL.

Where we or our group brands need to transfer your information between offices in the United Kingdom and the Republic of Ireland, we do so on the basis that both jurisdictions maintain equivalent standards of data protection. We put appropriate safeguards in place for any transfer outside the UK and EEA.

We keep your information for as long as necessary to provide our services, comply with legal and regulatory obligations, and follow our data retention schedule. Details are available on request.

Under UK GDPR—and EU GDPR where you are based in the Republic of Ireland—you have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to erase your information in certain circumstances.
• Ask us to restrict our use of your information.
• Object to processing based on legitimate interests, including the group-matching use described above.
• Request that your information be moved to another organisation in a portable format, where technically feasible.

To exercise these rights, email [email protected]. You may also complain to the Information Commissioner’s Office, or the Data Protection Commission if you are based in the Republic of Ireland.

Coralta applies appropriate technical and organisational measures to protect your information, including access controls and password protection.

We may update this policy from time to time, including as the 1-Experience Group structure develops. We will publish the current version here and, where a change is significant, notify existing candidates directly.

If you have questions about this policy or how your information is used, email [email protected] or write to Coralta, Lincoln Building, 6th Floor, 27–45 Great Victoria Street, Belfast, BT2 7SL.