Privacy Notice and Cookie Policy

1. Controller

Eleonas Consulting (“Eleonas”) is the controller of personal data submitted through eleonasconsulting.com, its subdomains, and related pages (the “Site”).

Privacy and data-rights email: info@eleonasconsulting.com

2. Scope and processing model

Eleonas does not currently maintain a standalone commercial database of Site users or visitors. When a person completes and submits a form, the information is transmitted to Eleonas and may be held temporarily in the receiving email account, backups, and the technical logs of the providers that host the Site and send the message (currently Vercel for hosting and Resend for form email delivery to info@eleonasconsulting.com).

Receiving, transmitting, reading, using, and deleting that information is personal-data processing even if Eleonas does not keep a separate recruiting database.

This notice applies to candidates, healthcare professionals, hospital representatives, prospective clients, and Site visitors located in the United States or Mexico.

3. Data Eleonas may receive

Depending on the form used, Eleonas may receive:

• name;
• email address and phone number;
• country, state, nationality, or place of residence;
• profession, title, specialty, education, and experience;
• English level;
• U.S. work authorization or need for sponsorship;
• hospital name, role, hiring needs, and approximate number of openings;
• message content and any information the person chooses to include; and
• basic technical data generated by visiting the Site, such as IP address, browser, device, date, time, and server requests.

Professional information remains personal data when it identifies or can be linked to a person.

Eleonas does not request Social Security numbers, passports, bank details, medical records, or patient information through the open forms. Do not include that information in free-text fields. If it later becomes necessary, Eleonas will explain the purpose and provide an appropriate channel.

4. Purposes

Eleonas uses the information only to:

• respond to inquiries;
• make a preliminary assessment of whether a candidate may match a professional opportunity;
• contact the candidate, hospital, or representative who started the communication;
• handle hospital and health-system staffing requests;
• present a candidate to a potential employer after the candidate has been informed and there is authorization or another valid legal basis;
• support conversations related to hiring, professional licensure, immigration, or relocation;
• maintain the security, availability, and integrity of the Site; and
• comply with legal obligations or defend legal rights.

Eleonas does not sell personal information and does not use form data to build advertising profiles. The Site does not include Meta, Google Ads, LinkedIn Insight Tag, or other advertising pixels.

5. Legal basis

The person provides the data voluntarily so Eleonas can respond, evaluate a possible professional or commercial relationship, and take steps prior to a possible placement or service.

For Mexico, Eleonas will process data under the data subject’s consent, the requested relationship, and other bases permitted by the Federal Law on Protection of Personal Data Held by Private Parties then in force. If express consent is required for sensitive data, Eleonas will request it separately.

6. Sharing and transfers

Eleonas may share only the information necessary with:

• hospitals, health systems, and potential employers, after informing the candidate and when authorization or another legal basis exists;
• web hosting, form, email, security, and technology-support providers;
• professional, immigration, or legal advisers if the person asks to move forward with a process that requires them; and
• authorities when legally required.

Because Eleonas connects candidates in Mexico with opportunities in the United States, information may be transferred between both countries. Eleonas will apply the notices, authorizations, contracts, and safeguards that apply.

Each hospital or employer that receives information may act as an independent controller and must provide its own privacy notice when required.

7. Retention and deletion

Eleonas will keep messages only for as long as reasonably needed to respond and follow up:

• inquiries that do not continue: up to 12 months from the last communication;
• active candidates or professional relationships: while the conversation or process continues, and up to 24 months from the last activity; and
• information that must be kept for a legal obligation, contract, claim, or investigation: for the applicable legal period.

When the period ends, Eleonas will delete the messages from its active accounts or anonymize them. Backup copies held by providers may drop off according to their ordinary deletion cycles.

8. Security

Eleonas applies reasonable measures to protect the information, including HTTPS transmission, restricted access to receiving accounts, strong passwords, and multi-factor authentication where available. No internet or email transmission can be guaranteed absolutely secure.

9. Individual rights

10. Minors

The Site is intended for adult professionals and organization representatives. It is not directed to children under 13 in the United States and is not intended to collect their information knowingly. If Eleonas discovers it received such data without valid authorization, it will delete the data.

11. Recruiting and medical data

The Site facilitates recruiting contacts; it does not provide medical services. Do not send patient data or clinical information through its forms. Information received is not automatically protected by HIPAA: that law applies only when the parties and the activity meet its specific requirements.

Eleonas does not make decisions with legal effects based solely on automated systems. Submitted forms are emailed to Eleonas staff for human review. There is no automated candidate-ranking engine on the Site.

12. Communications

Eleonas may reply by email or phone to the request received. It will not automatically add the person to a marketing list. If it later sends promotional communications, it will obtain the corresponding consent and offer a simple way to unsubscribe.

13. Changes

Eleonas may update this notice when the Site, forms, providers, or the law change. The current version will show the update date. When a change requires new consent, Eleonas will request it before applying the new purpose.