Contents

1. Purpose 1.1 Company Information 1.2 Legislation 1.3 Queries and Complaints
2. How do we collect your personal data?
3. What personal data do we collect?
4. How do we use your personal data?
5. How long do we retain your personal data?
6. Who do we share your personal data with?
7. International Transfers
8. Data Subject Rights 8.1 Right of Access 8.2 Right to Rectification 8.3 Right to Erasure 8.4 Right to Restriction 8.5 Right to Data Portability 8.6 Right to Object 8.7 Right to Withdraw Consent 8.8 Right to Object to Automated Decision-Making
9. Marketing
10. Cookies
11. Changes to this Privacy Notice

Purpose

The purpose of this Privacy Notice is to outline how Azimi & Co. Vision Recruitment collects, processes and shares personal data we hold about you.

Azimi & Co. Vision Recruitment ("Azimi & Co.", "we", "us", "our") is committed to protecting and respecting your privacy. We wish to be transparent about how we collect, store and share personal data, and to ensure you understand your rights under the General Data Protection Regulation ("GDPR").

In this Privacy Notice, we outline:

• The types of personal data we collect;
• How we use your personal data;
• Your rights in relation to the data we hold about you; and
• How to contact us if you have any questions about your data.

This notice applies to candidates, employers, recruitment partner agencies, and visitors to our website.

1.1 Company Information

Azimi & Co. Vision Recruitment is a healthcare and global talent recruitment agency, connecting candidates with employers across Ireland, the United Kingdom, the United States, and other international markets, and collaborating with partner recruitment agencies on candidate-sharing and split-fee arrangements.

Company details:

Registered name: Azimi & Co. Vision Recruitment Ltd Offices: Dublin, Ireland & London, United Kingdom Data Protection Contact: Data Protection Lead Email: info@azimivision.com Phone: +353 89 963 7844 (Ireland) | +44 73 52 757530 (UK)

1.2 Legislation

All personal data we gather is processed in accordance with applicable data protection law, including:

• The General Data Protection Regulation (GDPR);
• The Data Protection Act 2018 (Ireland);
• The UK GDPR and Data Protection Act 2018, where we process data relating to UK-based candidates, employers or roles;
• The European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 ("ePrivacy Regulations"); and
• Applicable US state privacy laws, where we process data relating to candidates or placements in the United States.

1.3 Queries and Complaints

If you are unhappy with the way we have handled your personal data and wish to complain, or would like further information about how your personal data is used, please contact us at:

Data Protection Contact Azimi & Co. Vision Recruitment Ltd Dublin, Ireland & London, United Kingdom Email: info@azimivision.com Phone: +353 89 963 7844 (Ireland) | +44 73 52 757530 (UK)

If you are unsatisfied with our use of your personal data, or with our response to a request to exercise your rights, you have the right to complain to the relevant supervisory authority. Depending on where you are based, this may include:

• Ireland — Data Protection Commission 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland Email: info@dataprotection.ie Phone: +353 57 868 4800 / +353 761 104 800
• United Kingdom — Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom Phone: 0303 123 1113

How do we collect your personal data?

We collect personal data to enable us to provide recruitment services. Non-exhaustive examples of how we collect your data include:

• Directly from you, e.g. when you submit your CV, apply for a role, or contact us through our website or by email/phone.
• During the provision of our services, e.g. feedback from an employer following your interview, or updates shared by a partner recruitment agency.
• From third parties acting on your behalf, e.g. a partner agency submitting your profile to us as part of a candidate-sharing arrangement.
• From publicly available professional sources, e.g. LinkedIn, where you have made your professional information publicly accessible and it is relevant to a role we are recruiting for.
• Automatically, e.g. limited technical data collected when you visit our website (see our Cookie Policy).

It is important that the personal data you provide to us is accurate and up to date. If the personal data we hold about you is inaccurate or incomplete, please contact us using the details in Section 1.3 and we will update it.

What personal data do we collect?

The personal data we collect depends on the nature of our relationship with you. The table below outlines the categories of data we may collect and process.

• Candidate Recruitment & Placement: Name, date of birth, contact details, address, email address, passport/ID copy, CV, qualifications, professional registration (e.g. NMBI, NHS, or other licensing body numbers), employment history, education history, training records, references, right-to-work / visa documentation.
• Employer & Client Data: Name, job title, company name, business contact details, vacancy requirements, correspondence relating to candidate introductions.
• Recruitment Partner Agency Data: Company name, contact person, business contact details, candidate profiles shared under a partnership agreement, fee-split arrangements.
• Background / Compliance Checks: Professional licence verification, reference checks, right-to-work checks, criminal record / vetting checks where required by the role or jurisdiction.
• Direct Marketing: Name, email address, phone number.
• Website & Technical Data: IP address, browser type, device information, pages visited, cookies (see our Cookie Policy).

We do not intentionally collect special category data (e.g. health information, religion, ethnicity) unless it is voluntarily provided by you, required for a specific role (e.g. certain healthcare licensing or immigration processes), or requested as part of a client's equal opportunities monitoring, in which case it is processed only with your explicit consent or another valid legal basis.

How do we use your personal data?

The main purpose for which we process your personal data is to provide recruitment services and manage our relationship with you.

• Candidate Recruitment & Placement: To identify, assess and present candidates suitable for roles with our clients, and to support candidates through the application and placement process. Lawful basis: Necessary for the performance of a contract, or to take steps at your request prior to entering into a contract.
• Employer & Client Management: To understand client vacancy requirements and manage the recruitment relationship. Lawful basis: Necessary for the performance of a contract, and our legitimate interest in providing recruitment services.
• Recruitment Partner Agency Data: To manage candidate-sharing and split-fee partnerships with other agencies. Lawful basis: Necessary for the performance of a contract between Azimi & Co. and the partner agency.
• Background / Compliance Checks: To verify a candidate is qualified, licensed and eligible to work in a given role and jurisdiction. Lawful basis: Necessary to comply with legal obligations, and/or necessary for the performance of a contract.
• Direct Marketing: To keep candidates, employers and partners informed of relevant opportunities and updates. Lawful basis: Consent (candidates/individuals), or legitimate interest (existing business contacts, in accordance with applicable ePrivacy rules).
• Website & Technical Data: To operate our website securely and understand how it is used. Lawful basis: Consent (non-essential cookies) or legitimate interest (essential functionality).

How long do we retain your personal data?

We retain personal data only for as long as necessary for the purpose it was collected, and/or as required by law. Retention periods take into account the nature and sensitivity of the data, the purpose of processing, and any applicable legal or regulatory requirements.

Candidate Recruitment & Placement Data: 7 years from last contact with candidate (successfully placed or active candidates); 3 years for unsuccessful/inactive candidates. Background / Compliance Check Data: 7 years from last contact with candidate, or as required by the relevant licensing/regulatory body. Employer & Client Data: For the duration of the business relationship, plus 7 years for contractual and financial record-keeping purposes. Recruitment Partner Agency Data: For the duration of the partnership agreement, plus 7 years for financial record-keeping purposes. Direct Marketing Data: Until you withdraw your consent or object to further contact. Website & Technical Data: As set out in our Cookie Policy.

Where data is no longer required, it is securely deleted or anonymised.

Who do we share your personal data with?

We may disclose your personal data to the following categories of recipients:

• Employers / Clients: Where relevant to a specific vacancy, we share candidate profiles, CVs and supporting information with the employer considering your application.
• Recruitment Partner Agencies: Under candidate-sharing and split-fee partnership agreements, we may share candidate profiles (in blind or full form, as appropriate) with partner agencies to identify suitable vacancies, and vice versa.
• Service Providers: Third parties who provide services on our behalf, including IT and data hosting, email and communications platforms, applicant tracking systems, document storage, and website hosting/analytics providers.
• Government, Statutory and Regulatory Bodies: Where required by law, including licensing/registration bodies (e.g. NMBI), immigration authorities, tax authorities, and data protection regulators.

We may also disclose your personal data:

• In the event of a sale, merger, reorganisation, or transfer of all or part of our business or assets, in which case personal data may be one of the transferred assets;
• Where required to comply with a legal obligation, court order, or to establish, exercise or defend legal claims; and
• To protect the rights, property or safety of Azimi & Co. Vision, our candidates, clients, partners, or others.

We do not sell personal data.

International Transfers

As a global recruitment agency working across Ireland, the United Kingdom, the United States and other markets, we may need to transfer your personal data outside the European Economic Area (EEA).

Where this occurs, we ensure the transfer complies with applicable data protection obligations, using an approved transfer mechanism such as the European Commission's Standard Contractual Clauses, an adequacy decision, or another lawful transfer safeguard recognised under GDPR and, where applicable, UK GDPR.

Data Subject Rights

As a data subject, you have the following rights in relation to your personal data. These rights are not absolute, and certain restrictions may apply.

Please send all requests to info@azimivision.com with as much detail as possible to help us deal with your request efficiently. We may ask you to verify your identity before fulfilling your request.

Upon receipt of a valid request, we will respond within one calendar month, with the possibility of extending this by a further two months for complex requests. If we require more time, or if we refuse your request, we will notify you within 30 days of receipt, along with our reasons.

You are entitled to contact the relevant supervisory authority (see Section 1.3) if we refuse your request.

8.1 Right of Access

You have the right to know what personal data we hold about you, why we hold it, and how we process it. Please provide identifying information and as much detail as possible (e.g. date range, subject of request) to help us locate the relevant data. Access requests are free of charge, unless a request is manifestly unfounded or excessive, in which case a reasonable fee may apply.

8.2 Right to Rectification

You have the right to request that inaccurate or incomplete personal data we hold about you is corrected. We will action such requests as soon as reasonably possible upon receipt.

8.3 Right to Erasure

You may request erasure of your personal data where, for example: it is no longer necessary for the purpose it was collected; you withdraw consent and no other lawful basis applies; it has been unlawfully processed; or you object to processing and there are no overriding legitimate grounds.

We may be unable to fulfil an erasure request where the data is required for compliance with a legal obligation, performance of a contract, a task carried out in the public interest, archiving/research purposes, or the establishment, exercise or defence of legal claims.

8.4 Right to Restriction

You may request that we restrict the use of your personal data where, for example: you contest the accuracy of the data; processing is unlawful but you do not want erasure; we no longer need the data but you require it for a legal claim; or you have raised an objection pending our review. Where processing is restricted, we will only further use the data with your consent, for legal claims, to protect the rights of others, or for important public interest reasons.

8.5 Right to Data Portability

Where processing is based on a contract or your consent, and carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and to request that we transmit it to another organisation where technically feasible.

8.6 Right to Object

You have the right to object to processing based on our legitimate interests, processing for public interest reasons, or processing for direct marketing purposes. If you object, we will stop using your data for that purpose unless we have compelling legitimate grounds, or the processing is required for legal claims.

8.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time by contacting us. This will not affect the lawfulness of processing carried out before withdrawal.

8.8 Right to Object to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces a legal or similarly significant effect on you.

We do not currently use automated decision-making or profiling in our candidate selection process. Where this changes, or where a third-party system we use produces such effects, you will have the right to object.

Marketing

We may contact you with information about roles, services or updates that we believe may be of interest to you.

You have the right at any time to stop us from contacting you for marketing purposes. You can do this by using the unsubscribe link in any marketing communication, or by contacting info@azimivision.com.

Cookies

Our website uses cookies to operate effectively and to help us understand how visitors use our site. Full details are set out in our Cookie Policy.

Changes to this Privacy Notice

We review this Privacy Notice regularly and reserve the right to update it to reflect changes in our business, legal requirements, or how we process personal data. Material changes will be reflected with an updated "last reviewed" date below.

This Privacy Notice was last reviewed on: 11 September 2026.