1. Lawful bases
We process personal data under contract, legitimate interests, legal obligation, and consent where appropriate.
2. Special category data
Compliance documents may include special category data, processed under Article 9 conditions relevant to health-sector occupational requirements.
3. International transfers
Where data is transferred outside the UK, we rely on adequacy decisions or appropriate safeguards.
4. Your rights
- Access, rectification, erasure.
- Restriction, portability, objection.
- Right to complain to the ICO.