Privacy Policy

First Medical Consultancy ("we", "us") is a medical licensing, exam preparation and healthcare placement consultancy. We operate from Business Bay, Dubai, United Arab Emirates and from Hainault, United Kingdom, and we form part of Care Bridge HR Consultancy & Recruitment.

This policy explains what personal data we collect through firstmedicalconsultancy.com and our services, why we collect it, who we share it with and what you can ask us to do with it. It applies to candidates, customers of our practice question banks, and anyone who contacts us through the site.

Because we have a UK establishment we act as a data controller under the UK General Data Protection Regulation and the Data Protection Act 2018, and, for our UAE operations, under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Questions about this policy, or any request about your data, should go to info@firstmedicalconsultancy.com.

Information you give us. When you join the talent pool, run an eligibility check, book a consultation or buy a question bank, we collect:

• Identity and contact details: first and last name, email address, phone and WhatsApp number, nationality, country of residence.
• Professional details: profession, specialty, title level, years of experience, licences already held, preferred destination countries.
• Documents you upload: your CV, and where you engage us for a licensing file, your degree certificates, transcripts, passport page, experience letters, good standing certificates and licence documents.
• Anything you write to us in the contact form, the live chat, by email or on WhatsApp.

Information created by using the service. If you buy or are granted access to a practice question bank we record your account, your quiz attempts, scores and progress, and your order and payment history.

Information collected automatically. Page visits, referring source, approximate location derived from IP address, device and browser type, and similar analytics data. See the cookies section below.

Payment card details are never collected by us. Card payments are processed by Stripe on Stripe's own systems. We receive only the outcome of the payment, the last four digits and the card brand.

• To deliver the service you asked for - assessing eligibility, preparing and submitting a licensing file, arranging Dataflow verification, booking exams, giving access to a question bank. Legal basis: performance of a contract with you, or steps taken at your request before entering one.
• To present you to employers - sharing your CV and professional profile with hospitals and clinics that are hiring. Legal basis: your consent, given when you join the talent pool. You can withdraw it at any time.
• To contact you about your file - status updates, document requests, exam and deadline reminders. Legal basis: contract, or our legitimate interest in servicing your enquiry.
• To send marketing - occasional emails about exam dates, new question banks and licensing changes. Legal basis: consent, or a soft opt-in where you are already a customer. Every message carries an unsubscribe link.
• To improve the site and prevent abuse - analytics, spam and fraud detection on our forms. Legal basis: legitimate interest.
• To meet legal and accounting obligations - tax records, and responding to lawful requests. Legal basis: legal obligation.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.

We share your data only where it is needed to do the job:

• Licensing authorities and their agents - DHA, DOH, MOHAP, SCFHS, QCHP, NHRA, OMSB, Kuwait MOH, the Dataflow Group and Prometric, where you have engaged us to submit or support an application.
• Hospitals, clinics and recruiting employers in the GCC and the wider region, where you have joined the talent pool or asked us to represent you. We share your CV and professional profile; we tell you which employers we have shared it with if you ask.
• Companies in our group, including Care Bridge HR Consultancy & Recruitment, for placement and account management.
• Service providers who process data on our instructions - Supabase (database and document storage), Stripe (payments), Google (Analytics and Workspace email), our transactional email provider, and WhatsApp Business for messaging. Each is bound by a contract restricting them to our instructions.
• Professional advisers and authorities where the law requires it.

Your data is transferred outside the UK and the EEA - principally to the UAE and other GCC states - because that is where the licensing authorities and employers are. Where we transfer data out of the UK we rely on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or on your explicit consent to the transfer for the purpose of your application.

• Talent pool profiles and CVs: three years from your last interaction with us, then deleted. We email you before that point so you can keep the profile active.
• Licensing files and the documents in them: five years after the file closes, because authorities can reopen or query a licence within that window.
• Orders, invoices and payment records: seven years, to meet tax and accounting requirements.
• Question bank accounts and quiz history: for as long as the account is active, and two years after it goes dormant.
• Contact form and chat messages: two years.
• Analytics data: retained in aggregate; the identifiable portion expires within 14 months.

You can ask us to delete anything sooner - see your rights below.

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything inaccurate or incomplete;
• delete your data - including removing your CV from the talent pool and withdrawing it from employers we have shared it with;
• stop or restrict a particular use, including all marketing;
• transfer your data to you or another provider in a machine-readable format;
• withdraw a consent you previously gave, without affecting anything done before you withdrew it.

Email info@firstmedicalconsultancy.com with "Data request" in the subject line. We respond within 30 days and we do not charge for it. We may ask you to confirm your identity first, so that we do not hand your file to somebody else.

If you are unhappy with how we handled a request you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the UAE Data Office. We would rather you came to us first so we can put it right.

We use a small number of cookies and similar technologies:

• Strictly necessary - keeping you signed in, holding your cart, and remembering that you dismissed a banner. These cannot be switched off without breaking the site.
• Analytics - Google Analytics 4, which tells us which pages are read and which search terms bring people here. It sets cookies in your browser and records a truncated IP address.

We do not run advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; the strictly necessary ones will simply be re-set, and blocking them may sign you out.

Data is held in managed, access-controlled infrastructure. Documents and CVs are stored in private buckets that are not publicly listable, and are reachable only through short-lived signed links. Access inside the company is limited to the consultants working on your file. Traffic to and from the site is encrypted in transit. Card details never touch our systems.

No system is perfect. If a breach occurs that is likely to risk your rights, we will notify you and the relevant regulator without undue delay.

Our services are for qualified and training healthcare professionals. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.

We update this policy when our processing changes. The date at the top always reflects the current version. Where a change materially affects how we use your data, we will tell registered candidates by email before it takes effect.

First Medical Consultancy
🇬🇧 Units L & L1, Core 3, 2nd Floor, 43-49 Fowler Road, Hainault, IG6 3FF🇦🇪 Office 3318, Floor 33, Prime Business Center LLC, Prime Tower, Business Bay, Dubai, UAE

Email: info@firstmedicalconsultancy.com
Phone and WhatsApp: +971 55 162 7220

Prefer a form? Use the contact page.