Privacy Policy
Last Updated: June 11, 2026
This Privacy Policy applies to Solid Rock Recruitment and Staffing Agency Limited ("Solid Rock", "we", "us", "our"), a company registered in Ireland. We are the data controller in respect of personal data processed through this website and our recruitment services.
1. Personal Data We Collect
We collect various categories of personal data depending on your relationship with SolidRock:
- Candidates & Healthcare Workers: Full name, date of birth, contact details (email, phone, address), nationality, passport or identity document, CV and professional history, qualifications, professional registration numbers (e.g. NMBI, CORU, IMC), vetting clearances, occupational health history, and financial details for payroll.
- Healthcare Employer Clients: Business name, facility registration, contact person name, staffing requests, billing coordinates, and communications.
- Website Visitors: IP address, device specifications, browser details, and contact forms information.
2. How We Use Your Personal Data
| Purpose of Processing | Legal Basis (GDPR Art. 6) |
|---|---|
| Recruitment and candidate matching | Legitimate interests / Contract performance |
| Compliance verification (Garda Vetting, check registrations) | Legal obligation / Legitimate interests |
| Payroll processing for temporary workers | Performance of a contract |
| Invoicing employer clients | Performance of a contract |
| Website analytics and improvements | Legitimate interests |
3. Special Category Data
We process sensitive personal data (Article 9 GDPR), including health status (occupational health immunisations) and criminal record data (Garda Vetting) only where strictly necessary for performance of healthcare placements, under candidate consent, or as required by Irish healthcare regulations.
4. How Long We Retain Your Data
- Active Candidate compliance file: Duration of relationship + 7 years
- Unsuccessful candidate applications: 6 months from last contact (unless consent is provided to keep longer)
- Financial / Payroll records: 7 years (Irish Revenue Commissioners requirement)
- Website analytics data: 24 months (anonymised)
5. Sharing and Transfers
We share data only as necessary with: Healthcare facilities (placements), An Garda Síochána (Vetting Bureau), regulatory bodies (NMBI, CORU, IMC), and payroll processing partners. If we transfer data outside the European Economic Area (EEA) for international recruitment, we ensure appropriate Standard Contractual Clauses (SCCs) are in place.
6. Your Rights
Under GDPR, you have the right to access, rectify, or erase your data, restrict or object to its processing, withdraw consent, and request portability.
To exercise your rights, email [email protected]. You also hold the right to lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.