Arnos Grove Medical Centre – Privacy Notice for Job Applicants
This privacy notice explains how Arnos Grove Medical Centre collects, uses, and protects your personal data during the recruitment process. It is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details
Data Controller: Arnos Grove Medical Centre
Address: 269 Bowes Road, London, N11 1BD
Telephone: 0208 368 4455
Email: nclicb.arnosgrove-reception@nhs.net
What Information We Collect and Why
We collect and process the following types of personal information for recruitment purposes:
-
Full name and contact details (e.g. address, telephone number, personal email)
-
Date of birth
-
National Insurance number
-
Identification documents (e.g. passport, driving licence)
-
Employment and education history (e.g. CV, application form, references, qualifications)
-
Right to work documentation
-
Criminal conviction information (e.g. DBS checks)
-
Security clearance information (where applicable)
We may also collect special category data, including:
-
Racial or ethnic origin
-
Religious or philosophical beliefs
-
Sexual orientation
This information is collected to comply with equal opportunity monitoring and employment law obligations.
Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases to process your personal data for recruitment:
-
Consent – where you have given clear permission for us to process your data (e.g. equal opportunity monitoring)
-
Contract – to take steps at your request before entering into a contract
-
Legal obligation – to comply with employment, immigration, and safeguarding laws
-
Legitimate interests – to assess your suitability for the role and manage the recruitment process
When processing special category data, we rely on Article 9(2)(b) (employment obligations) or your explicit consent.
Your Data Protection Rights
You have the following rights under data protection law:
-
Right of access – to request copies of your personal information
-
Right to rectification – to correct inaccurate or incomplete data
-
Right to erasure – to request deletion of your data in certain circumstances
-
Right to restrict processing – to limit how we use your data
-
Right to object – to object to processing based on legitimate interests
-
Right to data portability – to request transfer of your data to another organisation
-
Right to withdraw consent – if we are relying on your consent, you may withdraw it at any time
To exercise your rights, contact us using the details provided above. We will respond within one month.
Where We Get Your Information
We collect your data:
-
Directly from you (e.g. through job applications or interviews)
-
From third parties (e.g. referees, recruitment agencies, DBS or other background checks)
How Long We Keep Your Information
We will retain your personal data only for as long as necessary for recruitment and legal purposes. If you are unsuccessful, we normally retain your data for 6 months after the recruitment process ends. If employed, your data becomes part of your employee record and is retained in line with our staff records retention policy.
Who We Share Your Information With
We may share your data with:
-
Referees (for reference checks)
-
Disclosure and Barring Service (DBS)
-
Occupational health providers
-
Regulatory authorities (e.g. GMC, ICO)
-
NHS or partner organisations if required for employment checks
We ensure that appropriate safeguards are in place when sharing your data.
How to Complain
If you have concerns about how we handle your data, please contact us using the contact details above.
You also have the right to complain to the Information Commissioner’s Office (ICO):
Address: Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint