top of page

Privacy Policy

Last updated: 01/02/2026

​

This Privacy Policy explains how SGP Locums (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website www.sgplocums.co.uk (the “Website”) or engage with our locum GP recruitment services.

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

​

1. Who We Are (Data Controller)

Trading name: SGP Locums
Legal status: Sole trader
Business address: Potters Bar EN6, United Kingdom
Email: sav@sgplocums.co.uk
Telephone: 07869 266671

For data protection purposes, SGP Locums is the data controller.

ICO Registration Number: ZC087462

​

2. Personal Data We Collect

a) Information You Provide Directly

We may collect:

  • Full name

  • Email address

  • Telephone number

  • CV, employment history, qualifications, and professional registrations (e.g. GMC number)

  • Availability, preferences, and work location

  • Right to work documentation

  • References

  • Compliance and credentialing information

  • Any other information you choose to provide when contacting or registering with us

​

b) Information Collected Automatically

When you use our Website, we may collect:

  • IP address

  • Browser type and version

  • Device and operating system information

  • Pages visited and interactions with the Website

  • Cookies and similar technologies

 
3. How We Use Your Personal Data

We use personal data to:

  • Provide locum GP recruitment and placement services

  • Match candidates with suitable locum opportunities

  • Communicate regarding vacancies, availability, and enquiries

  • Verify identity, qualifications, professional registration, and right to work

  • Meet legal, regulatory, and NHS compliance obligations

  • Improve our Website and services

  • Manage relationships with candidates and client organisations

 
4. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

  • Contract – where processing is necessary to provide recruitment and placement services

  • Legitimate interests – to operate, manage, and grow our recruitment business

  • Legal obligation – to comply with healthcare, employment, and regulatory requirements

  • Consent – for marketing communications

You may withdraw your consent to marketing at any time by contacting us by email at sav@sgplocums.co.uk, or by telephone, SMS, or WhatsApp using the contact details provided above.

 
5. Special Category Data

We may process special category personal data, including health information, DBS checks, or occupational requirements, where necessary for healthcare recruitment and compliance purposes.

This data is processed under Article 9(2)(b) and/or Article 9(2)(h) UK GDPR, where processing is necessary for employment, occupational health, and healthcare recruitment, and subject to appropriate safeguards.

 
6. Sharing Your Personal Data

We may share personal data with:

  • GP practices, NHS bodies, and healthcare organisations seeking locum cover

  • Compliance, credentialing, and verification providers

  • Website hosting, IT, and communications service providers

  • Professional advisers (legal, accounting, regulatory)

  • Regulatory or law enforcement bodies where required by law

 
Data Processors

Our data processors may include:

  • Wix (website hosting and analytics)

  • Google Workspace (email and document storage)

  • WhatsApp (communications)

  • Cloud-based storage providers (such as document and file storage services)

All processors act under contractual obligations to protect personal data.

We do not sell personal data.

 
7. International Transfers

Some of our service providers may process personal data outside the United Kingdom. Where this happens, we ensure that appropriate legal protections are in place to keep personal data secure and protected in line with UK data protection law.

 
8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

 
9. Data Retention

We retain personal data only for as long as necessary for recruitment, compliance, and legitimate business purposes.

Recruitment records are typically retained for up to 6 years from the last meaningful contact. Data may be retained longer where required to meet legal, regulatory, or professional obligations.

Personal data will be securely deleted or anonymised when no longer required, unless we are legally required to retain it.

 
10. Your Data Protection Rights

You have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of personal data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, please contact us using the details above.

 
11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

 
12. Cookies

We use cookies to improve Website functionality and analyse usage. Further details are provided in our Cookie Policy.

Where required, we use a cookie consent banner allowing users to accept or reject non-essential cookies in accordance with UK GDPR and PECR.

 
13. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices or content.

 
14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

 
15. Complaints

If you have concerns about how we handle personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website: https://ico.org.uk

bottom of page