Privacy Notice (Staff and Applicants)

1. Introduction

Willowbank Surgery is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This privacy notice explains how we collect, use, store, and protect personal data of job applicants (including those applying via NHS Jobs), and current and former employees, workers, and contractors within our GP practice and Primary Care Network (PCN).

2. Data Controller

Willowbank Surgery is the data controller for the personal information you provide.

Address: Willowbank surgery, 1Willowbank, Manchester, M9 4WH
Email: [email protected]
Telephone: 01612059240
Data Protection Officer Janet Frost: 01612059240

3. Information We Collect

Applicants: personal details, CV, employment history, references, right to work, DBS checks (where applicable), and equal opportunities monitoring data.

Staff: personal details, payroll and bank information, employment records, health information for occupational purposes, absence records, pension and benefits data.

4. How We Use Your Information

We use your data to process recruitment via NHS Jobs, assess suitability for roles, administer employment, manage payroll and pensions, ensure compliance with NHS and primary care regulations, and support equality and diversity monitoring.

5. Legal Basis for Processing

We process data under contract, legal obligation, legitimate interests, and public task. Special category data is processed under employment law obligations and public interest for health and equality monitoring.

6. Sharing Your Information

We may share your data with NHS Jobs, NHS England, Greater Manchester Integrated Care Board (ICB), PCN member practices, payroll providers, occupational health services, DBS services, and regulators such as the Care Quality Commission (CQC).

7. Data Retention

Applicants: retained for up to 12 months after recruitment.

Employees: retained in line with the NHS Records Management Code of Practice.

8. Data Security

We use secure IT systems, restricted access controls, and staff confidentiality agreements to protect your data.

9. Your Rights

You have the right to access, correct, erase, restrict, or object to processing of your personal data, and to data portability where applicable.

10. Complaints

You can contact the Information Commissioner’s Office (ICO): www.ico.org.uk or 0303 123 1113.

11. NHS Jobs and PCN Recruitment

Applications via NHS Jobs are processed securely and shared only with authorised staff within Willowbank Surgery and associated PCN practices where relevant to recruitment.

Download the Privacy Notice (Staff and Applicants)

Date published: 24th June, 2026
Date last updated: 24th June, 2026