Highfields & Belgrave Medical Centres
Effective Date: .01.07.2025
Highfields & Belgrave Medical Centres are committed to protecting the privacy and security of your personal information. This Privacy Notice describes how we collect and use personal data about you during the recruitment process, in accordance with data protection laws including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data Controller: Highfields Medical Centre
Address: (Section B) The Merlyn Vaz Health & Social Care Centre, 1 Spinney Hill Road, Leicester LE5 3GH
Contact: highfieldsmc.noreply@nhs.net
Data Protection Officer (if applicable): Information Governance Manager, Highfields Medical Centre mlcsu.dpo@nhs.net
2. What Information We Collect
We may collect and process the following categories of personal data:
- Name, address, and contact details
- CV, cover letter, employment history, qualifications
- References and background check information
- Interview notes and assessment results
- Right to work documentation (e.g. passport, visa)
- Equal opportunities monitoring data (optional)
3. How We Collect Your Data
We collect your data:
- Directly from you (e.g. application forms, CVs, interviews)
- From recruitment agencies or job boards
- From referees or background check providers
- From publicly accessible sources (e.g. LinkedIn, GMC)
4. Legal Basis for Processing
We process your data on the following legal bases:
- UK GDPR Article 6(1)(b): Necessary for entering into or taking steps towards an employment contract
- UK GDPR Article 6(1)(f): Legitimate interests (e.g. assessing candidates and managing recruitment process)
- UK GDPR Article 9(2)(b): Employment obligations when processing special category data (e.g. health or diversity data)
5. How We Use Your Information
Your data is used to:
- Manage the recruitment process
- Assess qualifications, skills, and suitability
- Carry out background and reference checks
- Comply with legal or regulatory requirements
- Communicate with you about your application
6. Who We Share Your Data With
We may share your data with:
- Recruitment agencies
- Background check and referencing providers
- IT or website providers supporting our recruitment platform
- Regulatory bodies (e.g. NHS England, GMC) if required
We do not transfer your data outside the UK without adequate safeguards.
7. Data Retention
If your application is unsuccessful, we will retain your data for up to 12 months from the closure of the recruitment campaign. If successful, your data will become part of your employee record and be subject to our staff privacy policy.
8. Your Data Protection Rights
You have rights under data protection law, including:
- Access to your personal data
- Correction of inaccurate data
- Erasure of data (in certain cases)
- Objection to processing or request restriction
- Portability (in limited circumstances)
To exercise your rights, please contact: [Insert contact details]
9. Complaints
If you have any concerns, please contact us first. You can also lodge a complaint with the Information Commissioner’s Office (ICO):
www.ico.org.uk
Tel: 0303 123 1113
10. Changes to This Notice
We may update this notice periodically. The latest version will always be available on our website.