Privacy Policy

Last updated: 1 May 2026

Innovations and More Ltd, trading as Urgent Locums ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use and protect information about you in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: Innovations and More Ltd (Company No: 11350220), trading as Urgent Locums. Our Data Controller registration is held with the Information Commissioner's Office (ICO). Enquiries regarding this policy should be directed to admin@innovationsandmore.com.

1. Data We Collect

From Clinicians

When you register with us, we may collect: full name, email address, phone number, professional registration number (HCPC/NMC), right-to-work documentation, CV and work history, DBS certificate details, references, occupational health records, and banking details for payment purposes.

From Client Organisations

We collect: organisation name, contact name and role, email address, phone number, and details of staffing requirements.

Website Usage

We may collect basic technical data (browser type, page views) via server logs. We do not use tracking cookies or third-party analytics without your consent.

2. Legal Basis for Processing

• Contract performance: to arrange and manage staffing placements
• Legal obligation: compliance checks required by employment law, DBS regulations and NHS standards
• Legitimate interests: running our business, responding to enquiries, fraud prevention
• Consent: where you have explicitly agreed — you may withdraw at any time

3. How We Use Your Data

• Matching clinicians with suitable placements
• Carrying out compliance and right-to-work checks
• Communicating about placements and your registration
• Processing payments (clinicians)
• Responding to staffing enquiries (clients)
• Meeting our legal and regulatory obligations

4. Data Sharing

We do not sell your data. We may share it only with:

• Client organisations — to facilitate a placement you have agreed to
• DBS processing bodies — for criminal record checks
• Occupational health providers — where required
• HMRC and statutory bodies — where legally required
• IT service providers — who process data on our behalf under strict data processing agreements

All third parties are required to handle your data lawfully and in accordance with UK GDPR.

5. International Transfers

Your data is stored on servers located within the UK or the European Economic Area (EEA). If data is transferred outside these regions, we ensure adequate protections are in place in accordance with UK GDPR.

6. Data Retention

• Clinician records: retained for 6 years after last placement (statutory employment record requirement)
• DBS and compliance records: as required by NHS and regulatory guidance
• Client enquiries: 2 years after last contact
• Unsuccessful applications: deleted after 6 months unless you consent to longer retention

7. Your Rights

Under UK GDPR you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erasure ("right to be forgotten") where applicable
• Restrict processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior processing)

To exercise any right, email admin@innovationsandmore.com. We will respond within one month. You also have the right to complain to the ICO at ico.org.uk.

8. Security

We use industry-standard security measures including encrypted data storage, HTTPS transmission, restricted staff access, and regular security reviews. CV uploads are stored in a non-publicly-accessible directory. Despite these measures, no internet transmission is completely secure; you provide data at your own risk.

9. Cookies

This website uses a session cookie solely to process form submissions securely (CSRF protection). This cookie contains no personal data and is deleted when you close your browser. No third-party tracking or advertising cookies are used.

10. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated date. Continued use of our services constitutes acceptance of the revised policy.

11. Contact

For any data protection queries: admin@innovationsandmore.com
Innovations and More Ltd (trading as Urgent Locums), Company No: 11350220, registered in England and Wales.