This notice explains how St. Katharine Docks Practice collects, uses, and protects personal data of employees in compliance with UK GDPR and the Data Protection Act 2018.

What Data We Collect

• Contact details (name, address, phone, email)
• Date of birth and gender
• National Insurance number
• Bank details
• Emergency contacts
• Employment details (role, salary, contract)
• Health information for legal obligations
• Identification documents (passport, driving licence)

Why We Use Your Data

• Pay your salary and manage benefits
• Contact you and your emergency contacts
• Comply with legal and regulatory obligations
• Provide reasonable adjustments
• Maintain employment records

Legal Basis

Processing is based on Article 6(b) UK GDPR (necessary for contract) and Article 9(2)(b) (employment obligations).

Data Sharing

We only share data with authorised parties such as payroll providers or regulatory bodies when required by law. We do not share your data without a lawful basis.

Data Retention

Your data is retained in line with NHS Records Management Code of Practice and legal requirements.

Your Rights

You have rights to access, correct, erase, and restrict processing of your data. Contact the Practice Manager for requests.

Contact Details

Practice Manager: Fayzur Baksh
Email: fayzur.baksh@nhs.net
Address: 12/15 Nightingale House, 50 Thomas More Street, London E1W 1UA
DPO: Sohifa Kadir

Complaints

If you are unhappy with how your data is handled, contact the Practice Manager. You can also complain to the ICO at ico.org.uk or call 0303 123 1113.