Target Healthcare Group Privacy Notice – Employees and Consultants

Last updated: 29 September 2025 (v3.2)

This notice explains what personal information we collect, when we collect it and how we use this. During the course of our activities, we will process personal data (which may be held on paper, electronically, or otherwise) about you and we recognise the need to treat it in an appropriate and lawful manner. The purpose of this notice is to make you aware of how we will process your information.

1. Who are we?

Target Healthcare Group (“we”, “us” or the “Group”) is committed to a policy of protecting the rights of individuals with respect to the processing of their personal data and takes the issue of security and data protection very seriously. We comply with all relevant data protection laws, including the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025 and the Privacy and Electronic Communications Regulations 2003.

This notice applies to staff and consultants of the Group, which includes:

We are notified as a Data Controller with the Information Commissioner’s Office (ICO) under registration numbers above and we are the data controller of any personal data that you provide to us.

Our Data Protection Officer (DPO) is RGDP LLP, who can be contacted by email at info@rgdp.co.uk. Any questions relating to this notice and our privacy practices should be sent to our DPO.

2. How we collect information from you and what information we collect

We may collect the following information from you through a variety of resources (i) directly from you; or (ii) third parties (including employment agencies, Government agencies and previous employers):

• Name
• Date of birth
• Address
• Telephone number
• E-mail address
• NI number
• Personal characteristics such as gender and ethnic group
• Qualifications
• References
• Medical information
• Absence information
• Next of kin
• Emergency contact information
• Pension information
• Personal tax information
• Bank account information

We collect and use the above information and personal data for:

• Recruitment and selection
• Administration of contracts of employment and other contracts
• Payment of salaries and invoices
• Pensions and associated benefits, appraisal, training and development
• Membership of professional bodies

3. What are the lawful bases for us processing your personal data?

Under the UK General Data Protection Regulation, the lawful bases which we rely on for processing this information are:

• We have your consent.
• We have a contractual obligation, including pre-contractual negotiations.
• We have a legal obligation.
• We have a vital interest.
• We have a legitimate interest (including the usage of CCTV imagery).
• Where we are undertaking a public task.
• Where there is a redefined legitimate interest, as defined under the Data (Use and Access) Act 2025 and by the relevant Secretary of State.

4. Sharing of your information

We may disclose to and share information about you with third parties for the purposes set out in this notice, or for purposes approved by you, including the following:

• To manage your employment or potential employment with us.
• To manage your contract or potential contract with us.
• To process your monthly salary payments.
• To pay invoices issued by you.
• To allow your pension provider to process pensions information and handle your pension.
• If we enter into a joint venture with or merged with another business entity, your information may be disclosed to our new business partners or owners.

5. Transfers outside the UK

Your information will only be stored within the UK, other than where international transfers of personal data may legally take place, in accordance with Chapter V of the UK General Data Protection Regulation.

6. Security

When we process your personal data, we take steps to make sure that your personal information is kept secure and safe. This includes ensuring there is adequate IT and physical security for all locations that data is stored, and we ensure that these measures are tested on a regular basis to ensure compliance.

7. How long we will keep your information

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law (we may be legally required to hold some types of information), or as set out in any relevant contract we have with you.

8. Your rights

Under data protection law, you have certain data subject rights, including:

• Your right of access – You have the right to ask us for copies of your personal information.
• Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

If you would like to exercise any of your rights above please contact our DPO at info@rgdp.co.uk in the first instance. You should note that your rights under the UK GDPR and 2018 Act are not absolute and are subject to qualification.

9. Queries and concerns

If you would like to find out more about how we use your personal data or want to see a copy of information about you that we hold or wish to exercise any of your above rights, please contact our DPO at info@rgdp.co.uk.

You have the right to complain to the Information Commissioner’s Office (ICO) in relation to our use of your information.

• Information Commissioner’s Office
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Telephone: 0303 123 1113
• Website: ico.org.uk

10. Updating your information

The accuracy of your information is important to us. Please help us keep our records updated by informing us of any changes to your personal and contact details.

v3.2 (September 2025)