Staff and applicant privacy
Barlow Medical Centre is the data controller for personal data about the people who work for us and the people who apply to work for us. Our ICO registration number is Z581693.
This page does not cover patient information. How we use patient data is explained in our patient privacy notice.
Staff privacy
Barlow Medical Centre holds an Employee Privacy Notice explaining how we use personal data about the people who work for us. It is provided directly to each member of staff when they join and is available to all staff internally at any time. It is not published on this website. If you work for the practice and would like a copy, or if you are a former member of staff and would like to know how we handle your information, please contact our Data Protection Officer using the details at the end of this page.
If you are applying for a job with us
This notice explains how we use your personal data when you apply for a role at the practice.
What we use your information for
Assessing your application. We use your name and contact details, your application form or CV, your employment history, qualifications and professional registration, and the notes made at shortlisting and interview. Our lawful bases are Article 6(1)(b), taking steps at your request before entering a contract, and Article 6(1)(f), our legitimate interest in assessing who is suitable for the role.
Adjustments for interview. If you tell us about an adjustment you need in order to take part in the recruitment process, we use that information to make the adjustment. Our lawful bases are Article 6(1)(c), legal obligation, and where the information concerns your health, Article 9(2)(b), employment law.
Equality monitoring. Where we ask for monitoring information, providing it is optional. It is separated from your application and is not seen by the interview panel. Our lawful bases are Article 6(1)(f), legitimate interests, and Article 9(2)(b) together with Schedule 1 Part 2 paragraph 8 of the Data Protection Act 2018, equality of opportunity or treatment.
Pre-employment checks, if we offer you the role. We use your right to work documents, references, the outcome of a Disclosure and Barring Service check and occupational health clearance. Our lawful bases are Article 6(1)(c), legal obligation, Article 9(2)(b) and Article 9(2)(h) for health information, and Article 10 with Schedule 1 Part 1 paragraph 1 for the DBS check.
Where we process information about your health, or the outcome of a criminal records check, we maintain an Appropriate Policy Document as Schedule 1 to the Data Protection Act 2018 requires.
Where your information comes from
Most of it comes from you. We also receive information from the referees you nominate, from the Disclosure and Barring Service if we offer you a role, and from our occupational health provider where pre-employment clearance is needed.
Who sees it
Your application is seen by the shortlisting and interview panel and the Practice Manager. If we offer you a role, we contact the referees you have nominated, the Disclosure and Barring Service, and OPAS G2 (Civica), our occupational health provider.
We do not share your application with anyone else, we do not sell your data, and we do not transfer it outside the United Kingdom.
Automated decision-making
No decision about your application is made solely by automated means. Every application is considered by a person.
How long we keep it
If your application is unsuccessful, we keep it for six months from the date we tell you our decision and then securely destroy it. We keep it for this period so that we can respond to any question or complaint about the recruitment process.
If your application is successful, your recruitment records become part of your personnel file. Our Employee Privacy Notice will then apply, and we will give you a copy when you join.
Equality monitoring information is used only in anonymous or aggregated form and is not kept in a way that identifies you beyond the recruitment exercise.
Your rights
You have the right to be told how your data is used, to ask for a copy of it, to have inaccurate data corrected, to ask for it to be erased, to ask us to restrict how we use it, and to object where we rely on our legitimate interests. Some of these rights are limited where we are required by law to keep the information.
To exercise any of them, contact our Data Protection Officer. We will respond within one month and there is no charge.
Contact and complaints
Data Protection Officer
Email: gmicb-mh.bmcinfo@nhs.net, marked for the attention of the Data Protection Officer
Post: Data Protection Officer, Barlow Medical Centre, 828 Wilmslow Road, Didsbury, Manchester M20 2RN
If you are unhappy with how we have handled your data, please tell our Data Protection Officer first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Last reviewed: Sept 2026