Privacy Policy

LocumHire operates www.locumhire.co.uk, a UK marketplace connecting pharmacies with verified locum pharmacists and pharmacy technicians. For the personal data described in this policy, LocumHire is the data controller. For any privacy question or request, contact compliance@locumhire.co.uk.

Account details — name, email address, phone number, and a password (stored only as a secure hash). If you sign in with Google, we receive your name and email address from Google.

Locum professional details — your address, GPhC registration number, preferred roles, working preferences (for example EPOS systems and availability), and — if you choose to add them so pharmacies can pay you directly — your bank details.

Verification documents — to verify locums we collect documents such as a GPhC registration certificate, photo ID, right-to-work evidence, and a CV. These can include special category or sensitive data, and we treat them with additional protection (see section 7).

Pharmacy details — pharmacy name and trading name, registration and GPhC premises numbers, business addresses, and the contact person's details.

Activity on the platform — shifts posted, applications, bookings, clock-in and clock-out times, disputes, invoices, notifications, and an audit trail of significant actions.

Messages — anything you send us via the contact form or by email.

Technical data — we use privacy-friendly, cookieless analytics that give us aggregate page-view statistics. We do not build advertising profiles and we do not track you across other websites.

• Running the marketplace — creating your account, showing shifts, handling applications, bookings, and invoices (performance of a contract).
• Verifying locums — reviewing GPhC registration, identity, and right-to-work evidence before a locum can apply to shifts (legitimate interests in running a safe marketplace, and compliance with legal obligations).
• Transactional messages — emails such as verification updates, application and booking confirmations, and invoice notices (performance of a contract). We do not send marketing emails without your consent.
• Safety, security, and records — audit logs, fraud prevention, and dispute handling (legitimate interests and legal obligations).
• Responding to you — handling support and compliance enquiries (legitimate interests).

Between the two sides of a shift. When a locum applies to a shift, the pharmacy sees the locum's relevant profile details and verification status. When a booking is made, each side sees the contact details needed for the shift, and the pharmacy sees the details the locum has chosen to share for direct payment.

Service providers who process data on our behalf under contract: our hosting provider (Vercel), our database provider (Neon), our email delivery provider (Resend), and Google where you choose Google sign-in.

Professional advisers and authorities where we are legally required to, or to protect our rights or the safety of users.

We never sell personal data.

Some of our service providers process data outside the UK, including in the United States. Where that happens, transfers are protected by UK-approved safeguards such as adequacy regulations, the UK International Data Transfer Agreement, or standard contractual clauses with the UK addendum.

We keep account and profile data while your account is active. Verification, invoicing, and audit records are kept for as long as we are legally required to hold them (for example for tax and compliance purposes) and then deleted or anonymised. If you close your account or ask us to delete your data, we will do so except where the law requires us to retain specific records.

Data is encrypted in transit and at rest. Uploaded verification documents are stored encrypted, access to them is restricted to compliance reviewers, and every verification decision is recorded in an audit log. Passwords are stored only as secure hashes.

Under UK GDPR you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased (subject to legal retention requirements);
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent.

To exercise any of these rights, email compliance@locumhire.co.uk. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

The platform is for professionals and businesses and is not intended for anyone under 18.

We will post any changes to this policy on this page and update the date at the top. If a change materially affects how we use your data, we will tell you by email or when you next sign in. See also our Cookie Policy and Terms of Use.