Privacy & Data
Protection Policy
Last Updated: Septmber 2026. We review this page at least once a year.
Who we are
Kura Connect Ltd, trading as Kura, is a healthcare technology recruitment company based in Belfast, working across the UK and Ireland. Our registered address is Catalyst, Innovation Centre, Queens Rd, Belfast BT3 9DT and our company number is NI730493.
We are the data controller for the information described on this page. We are registered with the Information Commissioner's Office, reference ZB964387.
If you have any question about your data, email Stephen.turkington@kuratech.co
What we collect
If you're a candidate: your name, email address, phone number and location; your CV and everything in it - work history, job titles, qualifications, skills; notes from our conversations with you; what you've told us you're looking for, including salary expectations; and where relevant, your right to work status.
If you're a client: your name, job title, work email and phone number, and the company you work for.
If you're just visiting the site: your IP address and basic information about how you used the site, collected through cookies. See our Cookie Policy.
We don't ask for sensitive information - health, ethnicity, religion, and so on. If it appears on your CV, we don't use it to assess you and we won't share it.
Where we get it
Most of it comes straight from you, when you upload your CV, fill in a form, or speak to us.
Some of it comes from public professional sources - most often LinkedIn, company websites and job boards. If we contact you off the back of that, we'll tell you where we found you and you can ask us to remove you on the spot.
Why we use it, and our legal basis
We match you to roles and talk to you about them. This is the service we provide, and we rely on our legitimate interests to do it.
We keep your details on our system so we can come back to you about future roles, so we're not starting from scratch each time. This is also based on our legitimate interests.
We send your CV to a client to put you forward for a specific role. This relies on legitimate interests too, but we never do it without asking you first.
We send you our email updates to keep you in the loop. This is based on your consent, and you can unsubscribe at any time.
We manage contracts, invoices and legal obligations because we have to - this is based on legal obligation and contract.
Where we rely on legitimate interests, we've weighed our interest in running a recruitment business against your right to privacy, and we're satisfied it doesn't override it. You can object at any time and we'll stop.
Your CV is never sent to a client without your permission. We'll always discuss the specific role with you first and get your go-ahead.
Who we share it with
Clients — only the ones we've discussed with you, only after you've said yes.
Our suppliers — the companies whose software we use to run Kura: our recruitment system, our email provider, our website host, and our call and meeting notes tools. Each of them is contractually required to protect your data and can only use it to provide their service to us.
Anyone we're legally required to share it with, such as HMRC or a regulator.We never sell your data, and we never pass it on for someone else's marketing.
Where it's stored
Your data is held in our recruitment system and business software, both password-protected and secured with multi-factor authentication. Access is limited to Kura staff who need it.
Some of our suppliers store data outside the UK. Where that happens, we make sure the transfer is covered by the safeguards UK data protection law requires.
How long we keep it
We keep candidate records for 3 years from our last meaningful contact with you, then delete them - unless you're in an active process or we have a legal reason to hold them longer. Financial records are kept for seven years, as required.You can ask us to delete your details before then and we will.
Your rights
You have the right to:
ask what we hold about you and get a copy
have anything inaccurate corrected
have your data deleted
restrict or object to what we're doing with it
receive your data in a portable format
withdraw consent to marketing at any time
Email Stephen.turkington@kuratech.co and we'll deal with it within one month.
If you're unhappy
If you think we've handled your data badly, tell us first - email Stephen.turkington@kuratech.co and mark it as a data protection complaint. We'll acknowledge it within 30 days, look into it properly, and come back to you with the outcome and what we've done about it.
If you're not satisfied with our answer, you can take it to the Information Commissioner's Office at ico.org.uk or 0303 123 1113. If you're based in Ireland, you can go to the Data Protection Commission at dataprotection.ie.
Changes
If we change how we handle your data, we'll update this page and change the date at the top.