MED PRIVACY POLICY
1. INTRODUCTION
1.1 Purpose
AlstraMed ("AlstraMed," "we," "our," or "us") recognizes that protecting personal information is fundamental to maintaining the confidence of the professionals we represent, the organizations we serve, and every individual who interacts with our business.
As a specialized workforce solutions company serving the medical aesthetics industry, we routinely process professional, employment, contractual, payroll, and business information in connection with our recruitment and staffing services. We understand that the individuals whose information we receive entrust us with information that may significantly affect their careers, businesses, and professional reputations.
Accordingly, protecting personal information is one of our core business responsibilities.
This Privacy Policy explains how AlstraMed collects, uses, stores, shares, transfers, protects, retains, and otherwise processes personal information when individuals interact with our website, communicate with our consultants, apply for employment opportunities, request staffing services, or otherwise engage with our business.
This Privacy Policy is intended to provide clear and transparent information regarding our data processing practices while supporting compliance with applicable privacy and data protection laws.
1.2 Our Commitment
AlstraMed is committed to processing personal information in accordance with the following principles:
Lawfulness
Fairness
Transparency
Purpose limitation
Data minimization
Accuracy
Storage limitation
Integrity
Confidentiality
Accountability
These principles guide every stage of our recruitment, staffing, contractor management, workforce administration, and client engagement processes.
1.3 Applicability
This Privacy Policy applies to all personal information processed by AlstraMed in connection with:
Direct Hire Recruitment
Executive Search
Contract Staffing
Temporary Staffing
Workforce Management
Contractor Administration
Payroll Administration
Candidate Sourcing
Candidate Screening
Client Relationship Management
Website Operations
Marketing Activities
Business Development
Vendor Relationships
This Privacy Policy applies regardless of whether personal information is collected electronically, verbally, or in written form.
1.4 Applicable Laws
Depending upon the jurisdiction in which an individual resides or where personal information is processed, AlstraMed may process information in accordance with applicable privacy legislation including, where relevant:
General Data Protection Regulation (EU) 2016/679 ("GDPR")
UK GDPR
California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA")
Other applicable United States federal and state privacy laws
Other applicable international data protection legislation
Nothing in this Privacy Policy is intended to limit any rights available under applicable law.
2. ABOUT ALSTRAMED
AlstraMed is a specialized talent acquisition and workforce solutions company dedicated exclusively to the medical aesthetics industry.
Unlike general staffing agencies, AlstraMed focuses on recruiting, evaluating, and placing highly qualified professionals within organizations that provide aesthetic medical treatments and related healthcare services.
Our clients include organizations such as:
Medical spas
Laser treatment clinics
Plastic surgery practices
Cosmetic dermatology practices
Aesthetic medicine clinics
Wellness clinics
Medical device companies
Pharmaceutical organizations serving aesthetic medicine
Multi-location healthcare groups
Private equity-backed healthcare organizations
Our services include:
Executive recruitment
Permanent placement
Direct hire recruitment
Contract staffing
Temporary staffing
Candidate sourcing
Candidate screening
Interview coordination
Reference verification
Credential verification
Workforce consulting
Contractor onboarding
Contractor administration
Payroll administration where applicable
Workforce management support
Providing these services necessarily requires the processing of personal information relating to candidates, clients, contractors, employees, vendors, and website visitors.
We recognize that much of this information is commercially sensitive, professionally significant, or legally protected.
Accordingly, we maintain administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of personal information throughout its lifecycle.
3. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy governs the processing of personal information obtained through:
3.1 Website
This includes:
www.alstramed.com
Landing pages
Contact forms
Newsletter registrations
Career pages
Downloadable resources
Online scheduling tools
Chat functionality
3.2 Recruitment Activities
Personal information may also be collected through:
Employment applications
Résumés
Curriculum vitae
Professional profiles
Telephone interviews
Video interviews
In-person interviews
Assessment processes
Skills testing
Candidate referrals
Recruiter communications
3.3 Client Services
Information may be collected while providing services including:
Staffing requests
Recruitment projects
Workforce consulting
Contractor management
Payroll administration
Vendor management
Contract negotiations
Service delivery
3.4 Business Communications
This Privacy Policy also applies to information exchanged through:
Telephone
Video conferencing
Messaging platforms
Conferences
Trade shows
Networking events
Social media communications
Customer support interactions
3.5 Third-Party Sources
In the ordinary course of providing recruitment services, AlstraMed may obtain professional information from:
Professional networking platforms
Job boards
Applicant Tracking Systems
Client referrals
Candidate referrals
Background verification providers
Publicly available professional sources
Industry associations
Licensing authorities where legally permitted
3.6 Exclusions
This Privacy Policy does not apply to:
Third-party websites linked from our website
Client internal systems
Third-party recruiting platforms operated independently of AlstraMed
Third-party software providers whose services are governed by their own privacy notices
Users should review the privacy policies applicable to those services before providing personal information.
4. DEFINITIONS
For purposes of this Privacy Policy, the following definitions apply.
4.1 Personal Information
"Personal Information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual.
Examples include:
Name
Home address
Business address
Email address
Telephone number
Date of birth
Employment history
Education
Certifications
Professional licenses
Compensation expectations
Interview notes
References
Device identifiers
IP addresses
Online identifiers
Location information where applicable
4.2 Candidate
A Candidate is any individual considered for employment, consulting, contract staffing, temporary staffing, executive search, or workforce placement opportunities through AlstraMed.
4.3 Client
A Client is any organization receiving recruitment, staffing, workforce management, payroll administration, or related consulting services from AlstraMed.
4.4 Contractor
A Contractor is an independent professional engaged through AlstraMed or one of its staffing partners for the purpose of providing services to a client organization.
4.5 Processing
Processing means any operation performed on personal information, whether automated or manual.
Examples include:
Collection
Recording
Organization
Storage
Retrieval
Consultation
Use
Analysis
Disclosure
Transmission
Deletion
Destruction
4.6 Sensitive Personal Information
Certain categories of information receive additional legal protection under applicable law.
Where necessary to provide recruitment or workforce services, AlstraMed may process sensitive personal information including:
Government-issued identification numbers
Tax documentation
Payroll information
Banking information
Work authorization documentation
Background verification information where legally permitted
Professional licensing information
Sensitive personal information is collected only where reasonably necessary for the provision of services or compliance with applicable legal obligations.
5. OUR PRIVACY PRINCIPLES
5.1 Our Commitment to Responsible Data Processing
At AlstraMed, protecting personal information is not merely a legal obligation—it is an integral part of our business philosophy.
Because our business is built upon trusted relationships with candidates, clients, contractors, business partners, and employees, we recognize that responsible information management directly affects our reputation and the confidence placed in our organization.
Accordingly, every AlstraMed employee, recruiter, consultant, contractor, and authorized representative is expected to process personal information responsibly and in accordance with this Privacy Policy, applicable laws, internal security procedures, and recognized industry best practices.
5.2 Lawfulness
AlstraMed processes personal information only where there is an appropriate legal basis to do so.
Depending on the circumstances, this may include:
Performance of a contract;
Taking steps prior to entering into a contract;
Compliance with legal obligations;
Protection of legitimate business interests;
Protection of vital interests; or
Consent, where required by applicable law.
We do not collect personal information simply because it may be useful in the future.
5.3 Transparency
Individuals have the right to understand:
what information is collected;
why it is collected;
how it is used;
who receives it;
how long it is retained; and
what rights they have regarding that information.
This Privacy Policy is intended to provide that transparency in clear, accessible language.
Where additional privacy notices are appropriate—for example, for candidates or contractors—those notices supplement, but do not replace, this Privacy Policy.
5.4 Purpose Limitation
Personal information is collected only for specific, explicit, and legitimate business purposes.
Examples include:
identifying qualified candidates;
evaluating professional qualifications;
presenting candidates to clients;
administering contractor engagements;
processing payroll;
complying with employment laws;
maintaining business relationships;
improving recruitment services;
protecting the security of our systems.
Personal information will not be processed for unrelated purposes unless permitted by applicable law or with appropriate consent.
5.5 Data Minimization
AlstraMed seeks to collect only the information reasonably necessary to accomplish legitimate business objectives.
Recruiters are instructed to request only information relevant to:
employment opportunities;
contractor engagements;
client services;
legal compliance;
payroll administration; or
other legitimate business activities.
We intentionally avoid collecting unnecessary personal information.
5.6 Accuracy
Maintaining accurate information is important both for privacy compliance and successful recruitment.
Reasonable efforts are made to ensure that personal information remains accurate, complete, and current.
Candidates are encouraged to notify AlstraMed whenever:
employment changes;
certifications expire;
licensing status changes;
contact information changes;
work authorization changes;
compensation expectations change.
5.7 Security
Appropriate administrative, technical, and organizational safeguards are implemented to reduce the risk of:
unauthorized access;
accidental disclosure;
alteration;
misuse;
destruction;
ransomware;
cyber intrusion;
loss of information.
Security measures are discussed further in Section 19.
5.8 Accountability
Privacy compliance is an ongoing responsibility.
AlstraMed periodically reviews its:
security procedures;
recruitment processes;
technology platforms;
third-party service providers;
retention practices; and
privacy documentation
to ensure continued compliance with applicable legal and business requirements.
6. CATEGORIES OF PERSONAL INFORMATION WE COLLECT
The categories of personal information processed by AlstraMed depend upon an individual's relationship with our organization.
Not every individual will provide every category of information described below.
6.1 Identification Information
We may collect:
Full legal name
Preferred name
Business name
Professional title
Date of birth (where legally required)
Government-issued identification (where legally required)
Professional photograph
Professional biography
6.2 Contact Information
Examples include:
Email address
Telephone number
Mobile number
Mailing address
Business address
Country
State or Province
Time zone
Preferred communication method
6.3 Professional Information
For recruitment purposes we may process:
Current employer
Previous employers
Employment history
Job titles
Areas of expertise
Technical skills
Professional certifications
Licenses
Continuing education
Languages spoken
Publications
Awards
Professional memberships
Portfolio links
LinkedIn profile
Professional website
6.4 Education Information
This may include:
Degrees
Institutions attended
Graduation dates
Academic qualifications
Continuing education
Specialized training
Industry certifications
6.5 Recruitment Information
Throughout the recruitment process, AlstraMed may collect information including:
Résumés
Curriculum vitae
Cover letters
Employment preferences
Salary expectations
Availability
Geographic preferences
Relocation preferences
Remote work preferences
Interview notes
Candidate evaluations
Recruiter observations
Reference information
Assessment results
Skills testing results
Recruitment information is collected solely for legitimate staffing and workforce management purposes.
6.6 Contractor Information
When administering contractor engagements, we may process:
Contractor agreements
Tax documentation
Payment instructions
Banking information
Insurance information
Invoicing records
Timesheets
Work authorization documents
Compliance documentation
6.7 Client Information
For business relationships, we may collect:
Company name
Business address
Hiring manager information
Human resources contacts
Finance contacts
Job descriptions
Hiring requirements
Organizational information
Billing information
Contract documentation
Purchase orders
Communications regarding staffing engagements
6.8 Website Usage Information
When visitors access our website, certain technical information may be collected automatically.
Examples include:
IP address
Browser type
Browser version
Operating system
Device type
Device identifiers
Referring website
Pages viewed
Date and time of visit
Session duration
Clickstream information
Error logs
Website performance information
This information is generally used to improve website functionality, maintain security, diagnose technical issues, and understand aggregate website usage patterns.
6.9 Marketing Preferences
Where individuals choose to receive communications from AlstraMed, we may record:
Newsletter subscriptions
Event registrations
Content downloads
Communication preferences
Email engagement statistics
Webinar participation
Individuals may update their marketing preferences or unsubscribe from non-essential communications at any time.
6.10 Sensitive Personal Information
Certain staffing engagements require AlstraMed to process information that may receive enhanced legal protection.
Where legally permitted and reasonably necessary, this may include:
Tax identification numbers;
Government-issued identification;
Payroll information;
Banking details;
Immigration or work authorization documentation;
Professional licensing documentation;
Background screening information;
Criminal history information where legally authorized and relevant to the position;
Drug testing results where legally required;
Employment eligibility documentation.
Sensitive personal information is processed only where reasonably necessary for employment, payroll, legal compliance, or contractual obligations.
AlstraMed does not use Sensitive Personal Information for purposes unrelated to providing recruitment, staffing, contractor administration, payroll administration, or legal compliance.
7. HOW WE COLLECT PERSONAL INFORMATION
AlstraMed collects personal information from a variety of sources depending upon the nature of our relationship with an individual.
7.1 Information Provided Directly by Individuals
Most personal information is obtained directly from the individual.
Examples include:
submitting a résumé;
applying for a position;
completing an online form;
scheduling a consultation;
communicating with one of our recruiters;
participating in interviews;
responding to employment inquiries;
registering for events;
subscribing to newsletters.
Individuals are responsible for ensuring that information they provide is accurate and current.
7.2 Information Provided by Clients
Clients may provide information necessary for staffing engagements, including:
job descriptions;
required qualifications;
interview feedback;
hiring decisions;
onboarding information;
project requirements.
Client-provided information is used solely to deliver the requested recruitment or staffing services.
7.3 Information Obtained from Professional Sources
As part of our recruitment activities, AlstraMed may obtain professional information from publicly available or commercially available sources where permitted by applicable law.
These sources may include:
Professional networking platforms (such as LinkedIn)
Professional association directories
Employer websites
Public licensing databases
Conference speaker listings
Industry publications
Professional biographies
Public resumes
Job boards
Candidate portfolios
Public business profiles
When information is obtained from public professional sources, it is used exclusively for legitimate recruitment, staffing, business development, or workforce management purposes.
AlstraMed does not scrape, collect, or aggregate personal information from sources where such activity is prohibited by law or by the applicable terms of service.
7.4 Information Obtained Through Referrals
Candidates may be introduced to AlstraMed by:
Existing candidates
Clients
Industry contacts
Business partners
Professional colleagues
Referral programs
Where appropriate, we may contact referred individuals regarding employment opportunities.
If an individual indicates that they do not wish to be contacted further, we will honor that request unless another lawful basis for communication exists.
7.5 Information Obtained During Recruitment
Throughout the recruitment lifecycle, additional information may be generated by AlstraMed, including:
Interview schedules
Recruiter notes
Candidate evaluations
Skills assessments
Hiring recommendations
Client interview feedback
Communication records
Scheduling information
Offer documentation
Placement history
This information is created solely for recruitment and staffing purposes and is retained in accordance with our retention practices.
7.6 Information from Background Verification Providers
Where permitted by law and authorized by the candidate, AlstraMed or its clients may obtain information from qualified third-party verification providers, including:
Employment verification
Education verification
Professional license verification
Reference verification
Criminal background screening
Identity verification
Work authorization verification
Drug screening results where legally required
Background screening is never performed without the legal authority required under applicable law.
In many jurisdictions, separate notices and authorizations are required before such information is collected.
7.7 Information from Technology Platforms
AlstraMed utilizes technology platforms to improve recruitment efficiency and service delivery.
These platforms may generate operational information including:
Applicant Tracking System records
CRM activity
Email communications
Calendar events
Scheduling history
Website interactions
Support requests
Form submissions
User preferences
Such information is used primarily for business operations, client service, recruitment management, and quality improvement.
8. PURPOSES FOR WHICH WE USE PERSONAL INFORMATION
Personal information is processed only for legitimate business purposes consistent with this Privacy Policy and applicable law.
The specific purposes depend upon the individual's relationship with AlstraMed.
8.1 Recruitment Services
Candidate information may be used to:
Identify suitable employment opportunities
Match candidates with client requirements
Evaluate qualifications
Review resumes
Assess technical skills
Coordinate interviews
Verify references
Verify certifications
Verify employment history
Present qualified candidates to clients
Prepare employment offers
Support hiring decisions
Maintain future recruitment opportunities
Recruitment decisions are never based solely on automated processing.
Human recruiters remain responsible for evaluating candidate suitability.
8.2 Workforce Management
Information may be processed to:
Manage contractor engagements
Coordinate project assignments
Monitor contract status
Support workforce planning
Manage staffing requests
Facilitate onboarding
Coordinate offboarding
Manage compliance documentation
Maintain client records
8.3 Contractor Administration
Where AlstraMed administers contractor engagements, information may be used to:
Prepare contracts
Verify work authorization
Process invoices
Administer payroll
Process payments
Maintain tax documentation
Track project assignments
Manage compliance requirements
Support audits
8.4 Client Relationship Management
Client information is processed to:
Respond to staffing requests
Prepare proposals
Negotiate agreements
Deliver recruitment services
Manage accounts
Issue invoices
Collect payments
Maintain business communications
Evaluate service quality
Support long-term business relationships
8.5 Website Administration
Information collected through our website is used to:
Operate the website
Maintain security
Detect fraud
Prevent cyber attacks
Improve user experience
Analyze website performance
Diagnose technical issues
Improve accessibility
Measure engagement
Optimize content
8.6 Communications
Personal information may be used to communicate regarding:
Employment opportunities
Recruitment updates
Interview scheduling
Client projects
Service inquiries
Contract administration
Payroll matters
Technical support
Event invitations
Industry updates
Individuals may opt out of marketing communications at any time; however, transactional or service-related communications may continue where necessary to fulfill contractual or legal obligations.
8.7 Business Operations
Personal information supports normal business operations including:
Internal reporting
Financial administration
Accounting
Auditing
Risk management
Insurance
Regulatory compliance
Corporate governance
Business continuity
Quality assurance
8.8 Legal and Regulatory Compliance
AlstraMed may process personal information to:
Comply with applicable laws
Respond to lawful governmental requests
Cooperate with regulatory authorities
Defend legal claims
Enforce contractual rights
Protect intellectual property
Prevent fraud
Investigate security incidents
Meet tax obligations
Comply with employment legislation
8.9 Service Improvement
Information may be analyzed to improve:
Recruitment methodologies
Candidate experience
Client experience
Website usability
Service quality
Operational efficiency
Recruiter performance
Staffing outcomes
Technology platforms
Whenever practical, aggregated or anonymized information will be used for these purposes instead of identifiable personal information.
9. LEGAL BASES FOR PROCESSING PERSONAL DATA
Where the General Data Protection Regulation (GDPR), UK GDPR, or similar legislation applies, AlstraMed processes personal information only where a lawful basis exists.
The applicable legal basis depends on the specific processing activity.
9.1 Performance of a Contract
We process personal information when necessary to:
Perform a staffing agreement
Administer contractor engagements
Deliver recruitment services
Process payroll
Manage employment-related obligations
Fulfill contractual commitments
Respond to pre-contractual requests
Examples include preparing employment offers, arranging interviews, issuing contractor agreements, and administering client engagements.
9.2 Legitimate Interests
AlstraMed frequently processes personal information based on legitimate business interests, provided those interests are not overridden by the rights and freedoms of the individual.
Legitimate interests may include:
Identifying qualified candidates
Maintaining candidate databases
Developing business relationships
Improving recruitment processes
Preventing fraud
Protecting information security
Managing client relationships
Conducting internal analytics
Responding to inquiries
Improving operational efficiency
Where legitimate interests are relied upon, AlstraMed considers the nature of the information, the reasonable expectations of the individual, the impact of the processing, and appropriate safeguards to ensure that privacy rights are respected.
9.3 Consent
Certain processing activities are based on an individual's consent.
Examples may include:
Subscription to marketing communications
Optional recruitment alerts
Certain categories of background screening where required by law
Non-essential website cookies in jurisdictions requiring consent
Participation in surveys or promotional activities
Individuals may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
9.4 Compliance with Legal Obligations
AlstraMed may process personal information where necessary to comply with legal or regulatory obligations, including those relating to employment, taxation, accounting, anti-fraud measures, regulatory reporting, and court or governmental orders.
9.5 Protection of Vital Interests
In exceptional circumstances, personal information may be processed where necessary to protect the vital interests of an individual or another person, such as in situations involving an imminent threat to health or safety.
10. RECRUITMENT AND CANDIDATE INFORMATION
Recruitment is the core of AlstraMed's business. Because we specialize in identifying, evaluating, and placing highly qualified professionals within the medical aesthetics industry, we maintain extensive safeguards governing the collection, processing, disclosure, and retention of candidate information.
AlstraMed recognizes that a candidate's professional reputation, career opportunities, and personal privacy are closely connected. Accordingly, candidate information is processed only for legitimate recruitment and workforce management purposes.
10.1 Candidate Information We Collect
Depending upon the position and stage of the recruitment process, AlstraMed may collect information including:
Identity Information
Full legal name
Preferred name
Professional title
Country of residence
State or province
Work location
Citizenship where legally relevant
Work authorization status
Contact Information
Email address
Telephone number
Mobile number
Professional website
LinkedIn profile
Preferred communication method
Professional Information
Resume or Curriculum Vitae
Employment history
Previous employers
Job titles
Employment dates
Responsibilities
Professional achievements
Technical competencies
Leadership experience
Clinical experience where applicable
Sales experience where applicable
Management experience
Languages spoken
Software proficiency
Professional affiliations
Education Information
We may collect:
Degrees
Certifications
Professional licenses
Continuing education
Training courses
Medical aesthetics certifications
Laser certifications
State licensing information where applicable
Recruitment Information
Throughout the recruitment lifecycle we may generate or collect:
Recruiter notes
Interview notes
Candidate evaluations
Interview feedback
Technical assessments
Behavioral assessments
Skills testing
Salary expectations
Benefits expectations
Availability
Geographic preferences
Relocation preferences
Travel availability
Work schedule preferences
10.2 Why We Collect Candidate Information
Candidate information is collected exclusively for legitimate employment and recruitment purposes.
These purposes include:
evaluating qualifications;
identifying suitable employment opportunities;
matching candidates with client requirements;
presenting candidates to prospective employers;
coordinating interviews;
verifying employment history;
verifying education;
verifying certifications;
conducting reference checks;
negotiating offers;
facilitating onboarding;
managing contractor engagements;
administering payroll where applicable;
complying with employment laws;
maintaining future recruitment opportunities.
We do not collect candidate information for unrelated commercial purposes.
10.3 Candidate Profiles
AlstraMed may maintain professional candidate profiles within its Applicant Tracking System ("ATS").
These profiles may include:
recruitment history;
previous interviews;
recruiter communications;
positions considered;
placement history;
certifications;
interview feedback;
professional interests;
availability;
geographic preferences.
Maintaining candidate profiles enables AlstraMed to efficiently identify future opportunities that may be relevant to the candidate's skills and career objectives.
10.4 Candidate Matching
AlstraMed compares candidate qualifications with client hiring requirements.
This process may consider factors including:
technical qualifications;
years of experience;
certifications;
licensing;
management experience;
language proficiency;
location;
compensation expectations;
work authorization;
availability.
Candidate matching assists recruiters in identifying potentially suitable opportunities.
Candidate matching does not constitute an employment offer or guarantee placement.
10.5 Human Review
Although AlstraMed may utilize technology to organize candidate information, recruitment decisions are not made solely through automated processing.
Every candidate presented to a client is reviewed by qualified recruitment professionals.
Human recruiters evaluate:
qualifications;
employment history;
communication;
cultural alignment;
client requirements;
interview outcomes;
references;
professional judgment.
Technology supports—but does not replace—human recruitment expertise.
10.6 Candidate Disclosure to Clients
Candidate information is disclosed only when reasonably necessary for a recruitment engagement.
Depending upon the stage of the recruitment process, information shared with prospective employers may include:
résumé;
professional summary;
employment history;
education;
certifications;
recruiter observations;
interview feedback;
compensation expectations where appropriate;
availability;
work authorization where applicable.
Information is shared only with organizations actively evaluating the candidate for a legitimate employment opportunity.
10.7 Background Verification
Where legally permitted and appropriate for the position, background verification may include:
employment verification;
education verification;
credential verification;
license verification;
reference checks;
criminal background screening;
identity verification;
sanctions screening where required by law.
Background verification is conducted only where authorized by applicable law and, where required, with the candidate's consent.
10.8 Candidate Communications
Candidates may receive communications relating to:
employment opportunities;
interview scheduling;
interview reminders;
recruiter feedback;
offer discussions;
onboarding;
payroll administration;
contractor management;
future opportunities.
Candidates may opt out of marketing communications while continuing to receive communications necessary to administer active recruitment processes.
11. CLIENT INFORMATION
AlstraMed processes client information to provide recruitment, staffing, workforce management, contractor administration, and related business services.
Client information is treated as confidential business information.
11.1 Information We Collect
Examples include:
Company name
Business address
Hiring manager information
Human Resources contacts
Executive contacts
Finance contacts
Accounts payable contacts
Job descriptions
Organizational structures
Hiring plans
Staffing forecasts
Purchase orders
Contracts
Billing information
Payment history
Communications
11.2 Business Purposes
Client information may be processed to:
identify staffing requirements;
prepare recruitment strategies;
negotiate service agreements;
present candidates;
administer contractor engagements;
coordinate onboarding;
issue invoices;
collect payments;
administer contracts;
improve service quality;
maintain ongoing business relationships.
11.3 Confidentiality
Client hiring requirements frequently include confidential commercial information.
Examples include:
expansion plans;
executive hiring;
acquisitions;
confidential replacement searches;
compensation structures;
organizational changes.
AlstraMed maintains reasonable safeguards designed to protect confidential client information from unauthorized disclosure.
Employees are granted access only where necessary to perform their responsibilities.
11.4 Business Communications
Business communications between AlstraMed and clients may be retained for purposes including:
quality assurance;
contractual administration;
dispute resolution;
legal compliance;
operational continuity;
client service.
12. CONTRACTOR INFORMATION
Where AlstraMed administers contractor engagements or payroll services, additional categories of information may be required.
12.1 Contractor Information
Examples include:
Contractor agreements
Government-issued tax documentation
Banking instructions
Payment preferences
Work authorization documentation
Insurance certificates
Timesheets
Invoices
Project assignments
Performance records
Compliance documentation
12.2 Payroll Administration
Where AlstraMed administers payroll or contractor payments, personal information may be processed to:
calculate compensation;
process payments;
comply with tax laws;
issue required tax documentation;
maintain accounting records;
comply with audit requirements.
Payroll information is processed only by authorized personnel and approved service providers.
12.3 Compliance
Contractor information may also be processed to comply with:
employment legislation;
tax regulations;
anti-money laundering requirements;
sanctions regulations;
export controls;
immigration requirements;
contractual obligations.
12.4 Payment Providers
Where payments are administered through third-party financial institutions or payroll providers, only the information reasonably necessary to process payments is shared.
Such providers are expected to maintain appropriate security and confidentiality measures consistent with applicable legal and contractual requirements.
13. WEBSITE VISITORS
AlstraMed collects limited information from website visitors to operate, secure, maintain, and improve its website.
13.1 Information Collected Automatically
When visiting our website, information may be collected automatically including:
IP address;
browser type;
browser version;
operating system;
referring website;
device identifiers;
language preferences;
pages viewed;
time spent on pages;
navigation patterns;
approximate geographic region;
website performance data.
This information is generally collected through server logs, cookies, analytics technologies, and similar tools.
13.2 Website Analytics
AlstraMed may use analytics services to understand how visitors interact with the website.
Analytics information may be used to:
improve navigation;
evaluate website performance;
identify technical issues;
improve content;
understand visitor interests;
enhance accessibility;
measure marketing effectiveness.
Whenever possible, analytics information is aggregated or de-identified before being used for reporting and business intelligence purposes.
13.3 Website Security
To protect our website and visitors, AlstraMed may monitor website activity for purposes including:
detecting malicious activity;
preventing unauthorized access;
identifying denial-of-service attacks;
detecting fraudulent behavior;
investigating cybersecurity incidents;
protecting confidential information.
Information collected for security purposes may be retained as necessary to investigate incidents, satisfy legal obligations, or protect the rights and interests of AlstraMed and its users.
14. COOKIES AND SIMILAR TECHNOLOGIES
AlstraMed uses cookies and similar technologies to operate, secure, improve, and analyze the performance of its website.
This section provides a general overview of our use of cookies. Additional information regarding specific cookies, retention periods, and consent mechanisms is available in our separate Cookie Policy, which should be read together with this Privacy Policy.
14.1 What Are Cookies?
Cookies are small text files placed on a user's computer, mobile device, or browser when visiting a website.
Cookies enable websites to:
recognize returning visitors;
remember user preferences;
maintain secure sessions;
improve website functionality;
measure website performance;
analyze visitor behavior;
support website security.
Cookies generally cannot execute software or access other information stored on a user's device.
14.2 Categories of Cookies We Use
Depending upon applicable law and the features enabled on our website, AlstraMed may use the following categories of cookies.
Essential Cookies
Essential cookies are necessary for the operation of the website.
These cookies support functions such as:
page navigation;
secure login;
load balancing;
fraud prevention;
session management;
form submission;
security monitoring.
Because these cookies are necessary for website functionality, they generally cannot be disabled through our website.
Functional Cookies
Functional cookies help improve user experience by remembering preferences such as:
preferred language;
region;
accessibility settings;
previously entered information;
user preferences.
Analytics Cookies
Analytics cookies help us understand how visitors interact with our website.
Information may include:
pages visited;
navigation paths;
session duration;
bounce rate;
referral source;
device type;
browser type;
approximate geographic region.
Analytics information is generally aggregated and used to improve website usability and performance.
Performance Cookies
Performance cookies assist in measuring:
page load speed;
server performance;
website responsiveness;
error rates;
technical issues.
These cookies help improve the reliability and efficiency of our website.
Marketing Cookies
If enabled, marketing cookies may help measure the effectiveness of marketing campaigns and understand visitor engagement with our content.
Depending on applicable law, these cookies may only be activated after obtaining the user's consent.
14.3 Cookie Consent
Where required by applicable law, visitors will be presented with a cookie consent mechanism before non-essential cookies are activated.
Visitors may:
accept all cookies;
reject non-essential cookies;
customize cookie preferences.
Consent preferences may generally be modified at any time through the website's cookie settings.
14.4 Browser Controls
Most web browsers permit users to:
delete cookies;
block cookies;
receive notifications before cookies are stored;
restrict third-party cookies.
Disabling certain cookies may affect website functionality.
15. ARTIFICIAL INTELLIGENCE AND RECRUITMENT TECHNOLOGIES
AlstraMed continually evaluates technologies that improve recruitment quality, operational efficiency, and candidate experience.
These technologies may include artificial intelligence ("AI"), machine learning, workflow automation, natural language processing, and data analytics.
We recognize that the use of AI in recruitment requires careful governance and human oversight.
15.1 Human-Centered Recruitment
AlstraMed believes recruitment is fundamentally a human process.
Technology supports our recruiters—it does not replace professional judgment.
Accordingly:
final hiring recommendations are reviewed by qualified recruiters;
AI does not independently determine hiring decisions;
clients remain responsible for their own employment decisions;
recruiters consider factors beyond automated scoring.
15.2 Potential AI Applications
Depending upon the technologies used, AI-assisted tools may support:
resume parsing;
skills extraction;
keyword matching;
job description analysis;
candidate sourcing;
duplicate detection;
workflow automation;
communication assistance;
interview scheduling;
document classification.
These tools are intended to improve efficiency rather than replace human decision-making.
15.3 Responsible AI Principles
Where AI-assisted technologies are used, AlstraMed seeks to ensure they are implemented responsibly.
Our principles include:
meaningful human oversight;
fairness;
transparency where appropriate;
security;
accountability;
continuous evaluation;
compliance with applicable law.
15.4 Automated Decision-Making
AlstraMed does not make employment decisions solely through automated processing.
Human recruiters review candidate qualifications before presenting candidates to clients.
Clients remain responsible for their own hiring decisions.
15.5 Continuous Evaluation
AI technologies evolve rapidly.
Accordingly, AlstraMed periodically evaluates:
accuracy;
effectiveness;
fairness;
security;
compliance;
operational impact.
Where appropriate, technologies may be modified or discontinued.
16. MARKETING COMMUNICATIONS
AlstraMed may communicate with individuals regarding its services, industry developments, employment opportunities, educational resources, and business updates.
We strive to ensure that marketing communications are relevant, respectful, and compliant with applicable law.
16.1 Types of Communications
Communications may include:
newsletters;
recruitment updates;
employment opportunities;
staffing insights;
industry reports;
webinars;
event invitations;
company announcements;
thought leadership content.
16.2 Legal Basis
Marketing communications may be sent based upon:
consent;
an existing business relationship;
legitimate interests where permitted by applicable law;
other lawful grounds recognized by applicable legislation.
16.3 Opt-Out Rights
Recipients may opt out of marketing communications at any time by:
clicking the unsubscribe link contained within email communications;
updating communication preferences;
contacting AlstraMed directly.
Opting out of marketing communications does not affect communications necessary to administer:
recruitment processes;
contractor engagements;
payroll;
contracts;
legal obligations;
customer support.
16.4 Communication Preferences
Individuals may request changes to communication preferences regarding:
email frequency;
content categories;
employment alerts;
newsletters;
event notifications.
Reasonable efforts will be made to process such requests promptly.
17. DISCLOSURE OF PERSONAL INFORMATION
AlstraMed does not sell personal information.
Personal information is disclosed only where reasonably necessary to conduct business, deliver services, comply with legal obligations, or protect legitimate interests.
Whenever possible, disclosures are limited to the minimum information reasonably necessary for the applicable purpose.
17.1 Disclosure to Clients
Candidate information may be disclosed to client organizations for legitimate recruitment purposes.
Depending upon the recruitment stage, disclosed information may include:
résumé;
employment history;
education;
certifications;
interview feedback;
recruiter assessments;
availability;
compensation expectations where appropriate;
work authorization status where relevant.
Information is disclosed only to organizations actively evaluating the candidate for employment or contract opportunities.
17.2 Service Providers
AlstraMed may engage trusted third-party service providers to assist in delivering business services.
These providers may include:
cloud hosting providers;
Applicant Tracking System providers;
Customer Relationship Management providers;
payroll processors;
accounting firms;
legal counsel;
background verification providers;
document management providers;
electronic signature providers;
cybersecurity providers;
analytics providers;
IT support providers.
Such providers receive only the information reasonably necessary to perform their services and are expected to protect that information through appropriate contractual, technical, and organizational safeguards.
17.3 Corporate Transactions
If AlstraMed participates in a merger, acquisition, financing transaction, corporate restructuring, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate confidentiality obligations.
Where required by law, affected individuals will be provided with appropriate notice.
17.4 Legal Requirements
AlstraMed may disclose personal information where disclosure is reasonably necessary to:
comply with applicable laws;
respond to lawful governmental requests;
comply with court orders;
cooperate with regulatory authorities;
establish or defend legal claims;
investigate fraud;
investigate cybersecurity incidents;
protect public safety;
enforce contractual rights;
protect the rights, property, or safety of AlstraMed, its clients, candidates, contractors, employees, or others.
17.5 Professional Advisors
Personal information may be shared with professional advisors where reasonably necessary, including:
attorneys;
accountants;
auditors;
insurance providers;
tax advisors;
compliance consultants.
Professional advisors are expected to maintain the confidentiality of information received in connection with their professional responsibilities.
17.6 Business Partners
In limited circumstances, AlstraMed may collaborate with strategic staffing partners, international affiliates, or subcontractors to deliver recruitment or workforce services.
Where such collaboration occurs:
information sharing is limited to the scope necessary for the engagement;
contractual confidentiality obligations apply;
applicable privacy laws are respected;
individuals' rights remain protected under this Privacy Policy.
17.7 No Sale of Personal Information
AlstraMed does not sell personal information to third parties.
We also do not knowingly share personal information for cross-context behavioral advertising in a manner that would constitute a "sale" or "sharing" under applicable privacy legislation.
Should our practices change in the future, this Privacy Policy will be updated accordingly, and any legally required notices or choices will be provided.
23. EUROPEAN PRIVACY RIGHTS (GDPR)
If you are located within the European Economic Area ("EEA"), the United Kingdom, or another jurisdiction with similar privacy legislation, you may have additional rights under applicable data protection laws, including the General Data Protection Regulation ("GDPR") and the UK GDPR.
AlstraMed respects these rights and is committed to facilitating their exercise in accordance with applicable law.
23.1 Right to Be Informed
Individuals have the right to receive clear and transparent information regarding:
what personal information is collected;
why it is collected;
how it is used;
who receives it;
how long it is retained;
the legal basis for processing;
available privacy rights.
This Privacy Policy is intended to satisfy that obligation.
23.2 Right of Access
You may request confirmation that AlstraMed processes your personal data and obtain a copy of that information together with supplementary information regarding the processing.
23.3 Right to Rectification
You may request that inaccurate or incomplete personal data be corrected without undue delay.
Because recruitment decisions often rely upon accurate professional information, we encourage candidates to notify us promptly of any changes to employment history, certifications, licenses, contact details, or work authorization.
23.4 Right to Erasure ("Right to be Forgotten")
Subject to applicable legal limitations, you may request deletion of your personal data where:
the information is no longer necessary for the purposes for which it was collected;
consent has been withdrawn and no other lawful basis exists;
processing is unlawful;
applicable law requires deletion.
This right is not absolute.
AlstraMed may retain certain information where necessary to:
comply with legal obligations;
establish, exercise, or defend legal claims;
satisfy tax or accounting requirements;
protect legitimate business interests;
maintain records required by employment or commercial laws.
23.5 Right to Restrict Processing
You may request that processing be temporarily restricted under circumstances permitted by applicable law, including while the accuracy of information or the legitimacy of processing is being evaluated.
23.6 Right to Data Portability
Where legally applicable, you may request certain personal data in a structured, commonly used, and machine-readable format and request that such information be transmitted to another controller where technically feasible.
23.7 Right to Object
You may object to certain categories of processing, including processing based upon legitimate interests.
Where an objection is received, AlstraMed will evaluate whether compelling legitimate grounds exist to continue the processing in accordance with applicable law.
23.8 Rights Relating to Automated Decision-Making
Individuals have rights regarding decisions based solely on automated processing where such decisions produce legal or similarly significant effects.
AlstraMed does not make recruitment or employment decisions solely through automated decision-making.
Technology may assist recruiters by organizing or analyzing information, but qualified recruitment professionals remain responsible for evaluating candidates before recommendations are made to clients.
23.9 Complaints
If you believe your personal data has been processed in violation of applicable privacy laws, you may lodge a complaint with the competent supervisory authority in your country of residence, place of work, or place of the alleged infringement.
We encourage individuals to contact AlstraMed first so that we may attempt to resolve concerns promptly and efficiently.
24. EXERCISING YOUR PRIVACY RIGHTS
AlstraMed is committed to responding to privacy requests in a fair, timely, and transparent manner.
24.1 How to Submit a Request
Privacy requests may be submitted using the contact information provided at the end of this Privacy Policy.
Requests may relate to:
access;
correction;
deletion;
restriction;
objection;
portability;
withdrawal of consent;
marketing preferences;
other rights provided by applicable law.
To protect the privacy and security of individuals, AlstraMed may request additional information to verify the identity of the requester before processing a request.
24.2 Verification
To prevent unauthorized disclosure of personal information, AlstraMed may verify:
identity;
authority to act on behalf of another person;
ownership of an email address;
relationship with AlstraMed.
Verification procedures are designed to be reasonable, proportionate, and consistent with applicable privacy legislation.
24.3 Authorized Representatives
Where permitted by law, individuals may authorize another person to submit privacy requests on their behalf.
Additional verification may be required before responding to such requests.
24.4 Response Time
AlstraMed aims to respond to verified privacy requests as promptly as reasonably practicable.
Where specific legal response periods apply, we will endeavor to respond within those statutory deadlines or notify the requester if an extension is permitted and necessary due to the complexity or volume of the request.
24.5 No Discrimination
AlstraMed will not discriminate against individuals for exercising rights provided under applicable privacy legislation.
However, certain services may necessarily depend upon the processing of personal information. If requested information is essential to provide a recruitment or staffing service, our ability to provide that service may be affected.
25. CHILDREN'S PRIVACY
AlstraMed's services are designed exclusively for businesses, professionals, job seekers, independent contractors, and organizations operating in the workforce and recruitment sector.
Our website and services are not directed toward children under the age of 16, and we do not knowingly collect personal information from children under that age.
If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information without undue delay.
Parents or legal guardians who believe that a child has provided personal information to AlstraMed are encouraged to contact us using the information provided below.
26. THIRD-PARTY WEBSITES
Our website may contain links to websites, applications, services, or resources operated by third parties.
These links are provided solely for the convenience of our users.
AlstraMed does not control the privacy practices, security measures, or content of third-party websites and is not responsible for their privacy policies or business practices.
Users are encouraged to review the privacy policies of any third-party websites they visit before providing personal information.
The inclusion of a third-party link does not constitute an endorsement, recommendation, or representation by AlstraMed regarding the third party or its products or services.
27. CHANGES TO THIS PRIVACY POLICY
AlstraMed may update this Privacy Policy from time to time to reflect:
changes in applicable laws or regulations;
changes to our business operations;
new services;
technological developments;
security improvements;
changes to our recruitment practices;
feedback from users;
regulatory guidance.
When material changes are made, we will update the "Last Updated" date appearing at the beginning of this Privacy Policy.
Where required by applicable law, we will provide additional notice or obtain consent before material changes become effective.
Continued use of our website or services following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.
28. CONTACT INFORMATION
Questions, requests, or concerns regarding this Privacy Policy or AlstraMed's privacy practices may be directed to:
AlstraMed
Privacy Office
Email: privacy@alstramed.com
Website: https://www.alstramed.com
Individuals wishing to exercise their privacy rights should clearly identify the nature of their request and provide sufficient information to allow AlstraMed to verify identity and respond appropriately.
ACKNOWLEDGEMENT
By accessing or using the AlstraMed website or engaging with our recruitment, staffing, contractor administration, or workforce management services, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy is intended to provide transparency regarding our information handling practices and does not create contractual rights or obligations beyond those required by applicable law.
Privacy Policy
Version 1.1
Effective Date: July 24, 2025