Privacy Policy

Last Updated: April 2026

1. Introduction

Adesto ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our recruitment platform.

2. Information We Collect

Personal Information

When you register with us, we collect:

  • Name, title, and preferred name
  • Email address and phone number
  • Date of birth
  • Address and postcode
  • Professional role, grade, and speciality
  • Professional registration number (NMC, GMC, HCPC)
Professional Documentation

We collect and store:

  • Professional registration certificates
  • DBS certificates and update service information
  • Training certificates and qualifications
  • Right to work documentation
  • Occupational health records
  • References and appraisals
  • Insurance documentation
Work-Related Information
  • Availability and shift preferences
  • Shift assignments and work history
  • Timesheets and payment records
  • Performance feedback
Technical Information
  • IP address and browser type
  • Login times and system usage
  • Device information for push notifications

3. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Process your registration and onboarding
  • Verify your professional qualifications and compliance
  • Match you with suitable shift opportunities
  • Process shift bookings and assignments
  • Calculate and process payments
  • Communicate with you about shifts, compliance, and system updates
  • Send notifications about available shifts and important updates
  • Maintain compliance with applicable regulations
  • Improve our services and platform

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contractual Necessity: To fulfill our agreement with you for recruitment services
  • Legal Obligation: To comply with applicable regulations, right to work checks, and tax requirements
  • Legitimate Interest: To improve our services and ensure quality staffing
  • Consent: For marketing communications (which you can opt out of at any time)

5. Information Sharing

We may share your information with:

  • Client Facilities: When you are assigned to shifts, we share relevant professional information
  • Regulatory Bodies: To verify professional registrations (NMC, GMC, HCPC)
  • DBS Update Service: To check DBS certificate status
  • Umbrella Companies: If you use an umbrella company for payroll
  • Payment Processors: To process your payments
  • Training Providers: To sync and verify training records
  • Legal Authorities: When required by law

We do not sell your personal data to third parties.

6. Data Security

We implement appropriate security measures to protect your information:

  • Encrypted data transmission (HTTPS)
  • Secure password storage (hashed and salted)
  • Regular security updates and patches
  • Access controls and authentication
  • Regular backups
  • Staff training on data protection

7. Data Retention

We retain your information for:

  • Active Account: While you are registered and working with us
  • After Termination: Up to 6 years for tax and legal compliance
  • Compliance Documents: As required by applicable regulations

8. Your Rights

Under GDPR and UK data protection laws, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain types of processing
  • Withdraw Consent: For processing based on consent

To exercise these rights, please contact us using the details below.

9. Cookies and Tracking

We use essential cookies to:

  • Keep you logged in
  • Remember your preferences
  • Ensure security

We do not use advertising or tracking cookies without your consent.

10. Push Notifications

If you enable push notifications, we will send you:

  • Shift opportunities
  • Shift confirmations and updates
  • Compliance reminders
  • System notifications

You can disable push notifications at any time through your browser or device settings.

11. Third-Party Services

Our platform may use third-party services for:

  • Google Places API for address autocomplete
  • Email delivery services
  • Cloud hosting and storage

These services have their own privacy policies governing their use of your information.

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from minors.

13. International Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or system notification.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.

16. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately:

ICO
Website: ico.org.uk
Phone: 0303 123 1113

Your Privacy Matters: We are committed to protecting your personal information and complying with all applicable data protection laws.
Back to Registration Terms & Conditions