Staff & Applicant Privacy Notice

 

< Back to policies & procedures

1. Introduction

Cholmley Gardens Surgery (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This notice explains how we collect, use, share and protect personal information about individuals who apply for jobs, are employed by us, or are otherwise engaged by the practice.

2. Scope

This privacy notice applies to all job applicants, employees, contractors, locum staff, volunteers and temporary workers.

3. Data Controller

Cholmley Gardens Surgery is the Data Controller responsible for your personal data.

4. Personal Data We Collect

We may collect and process personal data including:

  • Name, address and contact details
  • Date of birth and identification details
  • Employment history, qualifications and references
  • National Insurance number and right-to-work information
  • Payroll and bank details (for employees)
  • Occupational health information where required
  • Emergency contact information

5. Purpose and Legal Basis for Processing

We process personal data to:

  • Assess and manage job applications
  • Administer employment contracts and payroll
  • Manage HR processes, training and workforce planning
  • Meet legal and regulatory obligations
  • Ensure safe and effective delivery of NHS services

Legal bases include contractual necessity, legal obligation and legitimate interests.

6. Sharing Your Information

Your information may be shared where necessary with:

  • NHS England and Integrated Care Board workforce teams
  • Payroll, pension and HR service providers
  • Disclosure and Barring Service (DBS) where required
  • Regulatory authorities and professional bodies
  • Recruitment and compliance partners

Information is only shared where lawful and necessary.

7. Data Retention

Personal data is retained in accordance with the NHS Records Management Code of Practice:

  • Recruitment data normally retained up to 6 months after recruitment
  • Staff employment records retained for statutory periods after employment ends

8. Your Data Protection Rights

Under UK GDPR you have the right to:

9. Data Protection Contact

Data Protection Lead
Dr Eric Ansell: GP Partner

Address
Cholmley Gardens Surgery
1 Cholmley Gardens, Mill Lane
London NW6 1AE

10. Updates to this Notice

This privacy notice may be updated periodically to reflect legal, regulatory or organisational changes.