Privacy Policy

NL Group Limited (“NLG”) take the protection and security of your personal information very seriously and this policy sets out our responsibilities under The General Data Protection Regulation 2016 (“GDPR”) and other applicable laws in England and Wales relating to the processing and security of personal information.

As the operators of the NLG Health and NLG Home Care websites, NL Group Limited registered in England and Wales with Company Registration Number 04295083 and having its registered office address at NLG, Riverside House, 3 Earls Court, Henry Boot Way, Hessle, HU4 7DY ("We", "Us", “NLG”) is committed to protecting and respecting your privacy. 

This policy explains to you how NLG uses and secures your personal information whilst you are using the NLG website and or when you enter into a contract with NLG to provide recruitment services to you.

This Privacy and Cookies Policy ("Policy") relates to services provided through our website and recruitment agency (“Services”) and sets out the basis on which the personal data collected from you, or that you provide to Us will be processed by Us. Please read the following carefully to understand our views and practices regarding your personal data and how We will treat it.

For the purpose of, the General Data Protection Regulation (“GDPR”), from the GDPR implementation date or, until GDPR implementation date, the Data Protection Act 1998 (collectively the “Data Protection Laws”):

  • in respect of the personal data of users of the Website and the recruitment services (“Services”) and business contacts and prospects of NLG, the Data Controller is NL Group Limited;
  • In respect of the personal data of candidates who apply for an Opening (as the term is described in NLG’s Terms) (“Candidates”) NLG shall process personal information as a data processor on behalf of the Candidate, who use Our Services to assist with their temporary healthcare assignments.  

NLG has offices in 1 location; our registered head office is located within the United Kingdom.

NL Group Limited
Riverside House
3 Earls Court
Henry Boot Way

Company Registration Number: 04295083

Our Data Protection Officer is Mark Hathway, please contact Mark if you have any questions about how your personal information is used by NLG, or 01482 606040 (Option 1).

NLG review our Privacy Policy on an annual basis, sooner if changes to regulation require or NLG changes the way it processes personal information.

This policy was last updated on 15th May 2018.

Collection of data

Browsing our website: When you browse our website or , we will collect the Internet Protocol (IP) address of the PC you are using, this data is anonymous and we cannot identify you at this point. We collect this data so that we can identify where customers are dropping out of the website and to identify areas of improvement to make the experience more engaging for our customers.

We use Cookies on our website so please see the Cookies section for more information.

Applying for a position: When you apply for a position with us or you interact with us in the different ways described below, we may ask you for the following information:

  • Personal and contact details (for example your name, email address, date of birth, gender and your choice of language with which you wish to interact with us).
  • Personal and contact details you give us when subscribing to receive emails, newsletters or marketing information from us.
  • During pre-assignment vetting we will request details from you including, your name, your work history, qualifications, contact details (such as email, telephone number and home address), your right to work documents, details required for equality and discrimination legislation checks and your personal preferences, choices and requirements specific to particular requests or services.
  • Details of your education, employment history, bank details and national insurance number, references, right to work and other information you tell us about yourself (eg the information contained within your CV) when you engage with us for the provision of services.
  • Information required for pre-assignment vetting, such as DBS checks and results of medical screenings.
  • Information we collect via cookies or similar technology stored on your device (find out more about cookies and how we use them in our Cookies Policy.
  • Your IP address.
  • Information from social media activity (such as likes, shares and tweets) when you interact with us on social media.
  • Information you provide if you report a problem with our website or service.
  • Additional information which you provide voluntarily and/or which we may ask from you to better understand you and your interests.

How, when and why do we collect your Personal Information?

We may collect your Personal Information when you apply for a role through us (or otherwise contact us from time to time) by:

  • Responding to an advert on a job board or other website.
  • By directly contacting our business.
  • By filling in an application form in a branch.
  • When you speak to one of our consultants by telephone.
  • Another agency or organisation passes your details to us.

Why do we collect your Personal Information?

We collect and use your Personal Information because it is necessary to obtain certain details including Personal Information from you in the work-searching process and it is in our legitimate interests in the course of operating our business, including:

  • Responding to your queries.
  • Providing work-finding services and/or information to you.
  • Transmitting Personal Information between our offices or functions for internal administrative purposes.
  • Setting you up on a work assignment with a client.
  • Hosting and maintaining our websites.
  • Ensuring network and information security.
  • Carrying out direct marketing.

However we will only collect, use and handle your Personal Information when:

  • It is necessary for our legitimate interests in connection with carrying out our business, as long as, in each case, these interests are in line with applicable law and your legal rights.
  • Where you have agreed.
  • Where this is necessary for legal obligations which apply to us.

How we use the Personal Information that you provide to us.

We undertake the following processing of your Personal Information on the legal basis that it is necessary to perform the contract with you and to provide the services we have agreed to provide to you. Where we have not entered into a contract with you, we may also carry out this processing because in that pre-contractual stage where we consider it is necessary in our legitimate business interests in order to deal with requests, enquiries or comments you have made to us.

Submission of details to clients

If you register to apply for a particular role, request to be put forward for a role or if you have asked us to put you forward for suitable roles, we will share some of your personal details including your name, work history and qualifications with our clients offering potential roles which might be suitable for you.

On-boarding for a work-assignment

If you are offered and accept a work assignment through us, we will need further Personal Information from you such as NI number, bank details, emergency contact details and some medical information in order to fulfil our statutory and contractual obligations to both you and our client.

Reporting to clients and managing timesheets, payroll and work performance

We sometimes have to prepare reports for clients relating to the services provided by us for example reports on financial or administrative matters or compliance with legal requirements. Such reports may contain your Personal Information such as your name, hours worked and pay rate. In addition we may need to manage submission of timesheets, payroll services and other Human Resourcing services such as managing your statutory rights and work appraisals for our clients, all of which would require use of your Personal Information.

Other lawfully permitted processing

We may also use any Personal Information that you provide to us for example to other companies within the NL Group or to employers or any other company who you ask us to approach on your behalf for work-searching purposes. If you choose not to provide Personal Information requested by us, we may not be able to provide you with the services and/or information you have requested or otherwise fulfil the purpose(s) for which we have asked for the Personal Information, including placing you in a work-assignment. We will where possible anonymise or aggregate such data for reporting purposes.

We undertake Pre-Assignment Vetting

Pre-Assignment Vetting

We collect your Personal Information which you provide to us when applying for a role or registering for our job-finding services to comply with our (and clients’) legal obligations regarding your right to work and any necessary qualifications for roles. We may also process your Personal Information for this purpose where we consider it necessary for the performance of the contract with you, or otherwise with your consent.

We undertake the following processing of your Personal Information with your consent.


Where legally permitted to do so where you have provided us with your contact details and have agreed to be contacted for marketing purposes, we may contact you by telephone or by post for marketing purposes relating to our services, our website, and/or to research opinion on proposed business developments. Your agreement to the use of your Personal Information for these purposes is optional (see Marketing Opt-out below) and if you fail to provide your agreement, your use of our work-finding services will not be affected.

Marketing Opt-Out

You are entitled to opt-out from receipt of marketing communication at any time and free of charge by emailing or by using the “unsubscribe” option included in any marketing e-mail or other marketing material received from us.

Website Cookies

We use cookies on our website. You can find out about the cookies we use and why we use them by viewing our Cookies Policy.

How and when do we share information with third parties?

Some services that we provide require the involvement of third parties. We have carefully selected these third parties and taken steps to ensure that your Personal Information is adequately protected. The third parties may include our clients, suppliers of IT services, pay-rolling services or vetting services.

Where we employ third party companies or individuals to process Personal Information provided by us on our behalf for business functions, including (without limitation) IT support, hosting our data on cloud platforms, legal, accounting, audit, consulting and other professional service providers, and providers of other services related to our business. Portions of our services may be provided by organisations with which we have a contractual relationship, including subcontractors, and, accordingly, your Personal Information may be disclosed to them. We only provide these organisations with the information that they need to be able to perform their services.

We will have in place an agreement with our service providers which will restrict how they are able to process your Personal Information.

Sharing within NL Group and to Service Providers

The Personal Information you provide to us is collected by NL Group Limited or one of its subsidiaries or trading brands as listed at Annex 1 below. However where we are legally permitted to do so in accordance with this Privacy Policy, we may transfer your Personal Information between and to other functions or offices within the same corporate group for the purposes set out above.

International Transfers of your Personal Information

We may share your Personal Information with our third party service providers based in the European Economic Area (“EEA”) who we engage to help us to process the information that we collect from you as part of our business function, and/or to host and maintain our CRM systems, content or services, on our behalf and in accordance with this Privacy Policy. We will only transfer your Personal Information outside of the EEA:

  • Where the transfer is to a place that is regarded by the European Commission as providing adequate protection for your Personal Information.
  • Where we have put in place appropriate safeguards, for example by using a contract for the transfer which contains specific data protection provisions that have been adopted by the European Commission or a relevant data protection authority. You can request a copy of these contracts by contacting us at: 
  • Where you have consented to it, or there is another legal basis to allow us to make the transfer.
  • Sharing with other third parties

We may also provide your information to other third parties such as regulators and law enforcement agencies, where we are required by law to do so, where necessary for the purposes of preventing and detecting fraud, other criminal offences and/or to ensure network and information security.

How long do we store Personal Information for?

It is our policy to retain your Personal Information for the length of time required for the specific purpose or purposes for which it was collected, which are set out in this Privacy Policy. However, on occasion we may be obliged to store some data for a longer time, for example, where a longer time period is required by applicable laws. In this case, we will ensure that your Personal Data will continue to be treated in accordance with this Privacy Policy.

Security and Confidentiality

We employ appropriate security measures to help protect your Personal Information and guard against access by unauthorised persons. Information storage is on secure computers in a secure environment, or in secure, locked storage in the case of hard copy information. The information is encrypted wherever possible and we undergo periodic reviews of our security policies and procedures to ensure that our systems is secure and protected. However the transmission of information via the Internet is not completely secure so we cannot guarantee the security of your information when it is transmitted to our website or from third party websites such as job boards.

We acknowledge that the information you provide may be confidential. We do not sell, rent, distribute or otherwise make Personal Information commercially available to any third party, but we may share information with our service providers for the purposes set out in this Privacy Policy. We will keep your information confidential and protect it in accordance with our Privacy Policy and all applicable laws.

IS027001 Certification

NLG is a nationwide supplier of temporary healthcare professionals, NLG aims to set the highest standards of Information security and in so doing so has developed an Information Security Management System (ISMS) to meet the requirements of the ISO27001:2013 standard. The aim of which is to protect the Confidentiality, Integrity and Availability of NLG and client held information resources and assets, thus safeguarding NLG and its clients from unauthorised access, compromise and or disclosure of data. NLG Are due to be awarded the 27001:2013 standard in July 2018.

Cyber Essentials Certification

In addition to the above, we have services that are Cyber Essentials accredited, this helps prevent the vast majority of cyber-attacks. Having a Cyber Essentials badge enables us to:

  • Protect our organisation against common cyber threats
  • Demonstrate our commitment to information security


Your Rights

You may withdraw your consent to receiving marketing at any time by emailing It is important to us that you are in control of your own information. As a result, we offer the following controls:

You may request access to or copies of the Personal Information that we hold about you. If you would like to exercise this right, please contact us at or the address below. If your request is made before 25 May 2018, we may charge you a fee of £10 for such access, and in some circumstances more for the provision of copies.

 If you believe that any information we have about you is incorrect or incomplete, please contact us as soon as possible. We will take steps to seek to correct or update any information if we are satisfied that the information we hold is inaccurate. You may request that we restrict our processing.

  1. You may request that your Personal Information be deleted, where it is no longer necessary for the purposes for which it is being processed and provided there is no other lawful basis for which we may continue to process such information.
  2. To the extent we are processing your Personal Information to meet our legitimate interests (as set out above), you may object to the processing of your Personal Information by us. If we are unable to demonstrate our legitimate grounds for that processing, we will no longer process your Personal Information for those purposes.
  3. You may object to our processing as set out above.
  4. You may withdraw any consent given to processing.
  5. Where we are processing your Personal Information automatically for the purposes of performing our contract with you, you may have the right to request that the Personal Information we hold about you be transferred to a third party data controller.
  6. Where we may undertake automated decision-making we will request your explicit consent if the decision-making is not authorised by law or necessity for the performance of a contract.

You may also request that we restrict the processing of your data to that to which you have consented or for the establishment, exercise or defence of legal claims or the protection of the rights of another person, whilst we verify your data as set out in point 2 above; pending verification of our legitimate grounds as set out in point 4 above; or if the processing is unlawful or no longer necessary, but you wish us to retain your data for the purposes of establishing, exercising or defending legal claims.

Please contact and we will assist you and provide you with all rights to which you are entitled in relation to your Personal Information under applicable data protection law.

If you are unhappy with the way that we have handled your Personal Information, you can make a complaint to the Information Commissioners Office (ICO) which is the UK authority responsible for data protection. Contact details are available online, or alternatively please ask us on for assistance.

Contact Us

If you have any questions in relation to this Privacy Policy, or if you would like to contact us to exercise your rights as stated in this Privacy Policy, you may contact us at:

How to complain

We appreciate that at NLG we do not always get things right, this section explains how you can make a complaint. It is regrettable for us as an organisation when we receive a complaint. We take all complaints seriously and can assure you we will do our best to deliver a satisfactory outcome. If you do wish to complain about how your personal information is used by NLG then please write to us at:

GDPR Compliance Team
NL Group Limited
Riverside House
3 Earls Court
Henry Boot Way

Alternatively, you can email us at

NLG will investigate and respond within 10 working days, this allows us time to investigate your complaint thoroughly.

Supervisory Authority Details

This section provides details of the Supervisory Authority and how they can be contacted.

Where you believe that NLG have not taken our responsibilities with your personal data seriously, you have the right to complain to the Supervisory Authority. Their details are:

Information Commissioners Office
Wycliffe House
Water Lane 

Telephone number: 0303 123 113 or 01625 545 745


Annex 1

NL Group Companies and Trading Brands


Annex 2

Cookie Policy

NLG Health

NLG Home Care

Cookie Policy

By using cookies, we are able to provide you with a better experience and to improve Our Site by better understanding how you use it. By continuing to use this website, you are agreeing to our use of cookies in the manner described in this policy. If you do not agree to our Cookie Policy, please stop using our website immediately.

1. Definitions

"cookie" - means a small file consisting of letters and numbers that our website downloads to your computer or device to recognise you as a user when you return to the website using the same computer and web browser, either for the duration of your visit (using a ‘session cookie’) or for repeat visits (a ‘persistent cookie’);

"web beacon" - means a small, transparent image file (usually only 1-pixel x 1-pixel in size) used for tracking user behaviour and activity around our website;

“we/us/our” - means NL Group Limited, a company registered in England under 4295083, whose registered address is NLG, Riverside House, 3 Earls Court, Henry Boot Way, Hessle, HU4 7DY and includes all its subsidiary companies as defined by s.1159 of the Companies Act 2006.

2. Find Out How We Use Cookies

2.1 We may use cookies on our website for a number of reasons, all of which are designed to improve your experience of using it. Cookies allow you to navigate around our website better and enable us to tailor and improve our website by saving your preferences and understanding your use of it.

2.2 We use the following types of cookie:

(a) Strictly Necessary Cookies

These cookies are essential in order to enable you to move around our website and use its features, such as accessing secure areas of the website. Without these cookies the services you have asked for may not be provided.

(b) Performance Cookies

It is important for us to understand how you use our website, for example, how efficiently you are able to navigate around it, and what features you use. Performance cookies enable us to gather this information, helping us to improve our website and your experience of it. These cookies collect anonymous information on the pages visited.

(c) Functionality Cookies

These cookies remember your choices to improve your experience. Functionality cookies enable us to provide additional functions to you on our website such as personalisation and remembering your saved preferences.

Strictly Necessary, Performance and Functionality Cookies

These three types of cookies are necessary to maintain the effectiveness of our website, use of use and to provide you with the best experience. As such we have not provided you an opportunity for these to be disabled independently and by using our website you are agreeing that we can place these types of cookies on your computer.

(d) Targeting Cookies

It is also important for us to know when and how often you visit our website, and which parts of it you have used (including which pages you have visited and which links you have clicked on). As with analytics cookies, this information helps us to better understand you and, in turn, to make our website and advertising more relevant to your interests. Some information gathered by targeting cookies may also be shared with third parties.

(f) Persistent Cookies

Any of the above types of cookie may be a persistent cookie. Persistent cookies are those which remain on your computer or device for a predetermined period and are activated each time you visit our website.

(g) Session Cookies

Any of the above types of cookie may be a session cookie. Session cookies are temporary and only remain on your computer or device from the point at which you visit our website until you close your browser. Session cookies are deleted when you close your browser.

2.3 Third party cookies are not placed by us and we have no control over them. Third party cookies may be used by advertising services to serve up tailored advertising to you on our website, or by third parties providing analytics services to us (these cookies will work in the same way as analytics cookies described above).

2.4 We also use web beacons on our website to track your navigation around it. As with analytics cookies described above, web beacons help us to understand how you use our website and enable us to improve it in the future.

2.5 Our cookies have variable expiry periods. This is detailed against each cookie in section three (3) below.

2.6 We have used the categories based on the International Chamber of Commerce (ICC) UK Cookie Guide (April 2012).


3. What Cookies Does Our Website Use?

You can find more information about the individual cookies we use and the purposes for which we use them by clicking on the relevant link in the list below:

Cookie Link

YouTube (including Google) 




4. How You Can Control Cookies

4.1 Internet browsers normally accept cookies by default. You can change these settings if you wish, however please be aware that this is not generally a per-site setting and will prevent all websites from using cookies, not just ours. Please also be aware that by disabling cookies in your browser, you may impair the functionality of our website.

4.2 The links below provide instructions on how to control cookies in all mainstream browsers:

4.2.1 Google Chrome: 

4.2.2 Microsoft Internet Explorer: 

4.2.3 Microsoft Edge: (Please note that there are no specific instructions at this time, but Microsoft support will be able to assist)

4.2.4 Safari (OSX): 

4.2.5 Safari (iOS): 

4.2.6 Mozilla Firefox: 


(Please refer to your device’s documentation for manufacturers’ own browsers)

Alternatively, you may wish to visit which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your computer, as well as more general information about cookies. Please note that, as these websites are not owned or operated by NL Group, we are not responsible for any of the content on them.


6. How Do We Use Cookies in Emails?

6.1 In addition to using cookies on our website, we use cookies and similar technologies in some of the emails we send to you. Just like the cookies on our website, these are used to help us understand your use of our website and to keep improving it.

6.2 We use web beacons in some of our emails. We use web beacons to detect when (or whether) you open an email and how you have interacted with it, and other information such as your email client, web browser, computer or device, and IP address. Web beacons may also be used to serve up emails in a particular format that is best suited to your computer or device.

6.3 Emails from us may contain links. Each one of those links will contain a unique tag which enables us to track which links are being used and by whom. This information can then be used to improve and tailor our emails in the future.


7. Cookies set by third parties

We also use and work with a number of third party suppliers and partners who set cookies on this website in order to deliver certain services and features. For example, we sometimes embed videos from seller’s websites, which set cookies on your device when you visit a page on this website containing embedded content. We do not control the dissemination of these cookies. If you would like more information about the cookies used by these organisations, as well as information on how to opt-out, please review the table below.

Cookie Name  and Purpose

YouTube  We use seller’s videos to show some the products in action and the seller may set cookies on your browser in order to display the video and monitor non-attributable statistical information.  Information on YouTube's privacy policy can be found here

Facebook  Facebook uses cookies and receives information when you visit those sites and apps, including device information and information about your activity, without any further action from you. This occurs whether or not you have a Facebook account or are logged in.

Google Adwords  Cookies help to make advertising more effective. Without cookies, it’s harder for an advertiser to reach its audience, or to know how many ads were shown and how many clicks they received. Many websites, such as news sites and blogs, partner with Google to show ads to their visitors. Working with our partners, we may use cookies for a number of purposes, such as to stop you from seeing the same ad over and over again, to detect and stop click fraud and to show ads that are likely to be more relevant (such as ads based on websites that you have visited). We store a record of the ads that we serve in our logs. These server logs typically include your web request, IP address, browser type, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser. We store this data for a number of reasons, the most important of which are to improve our services and to maintain the security of our systems. We anonymise this log data by removing part of the IP address (after nine months) and cookie information (after 18 months).


8. Changes

We may make alter this Cookie Policy at any time. If we do so, details of the changes will be highlighted at the top of this page. You are therefore advised to check this page from time to time. In the event of any conflict between the current version of this Cookie Policy and any previous version(s), the provisions and in effect shall prevail unless it is expressly stated otherwise.


9. Further Information

9.1 If you would like to know more about how we use cookies, please contact us at 

9.2 For more information about cookies, please visit (this is an external link and we are not responsible for its content).

9.3 For more information about privacy, data protection and our terms and conditions, please visit the following:

(a) Privacy Policy

NLG Health

NLG Home Care


(b) Terms:

NLG Health

NLG Home Care

What's next?

Join NLG Register Today!


Talk to our recruitment team
01482 60 60 40 (Option 1)

National Framework Supplier