How We Handle
Your Information

Emerald Interserv Limited (Company No. 16630723) is a CQC-registered provider of insourced clinical services to NHS Trusts across England. Our registered office is Suite 2, Marstons Mill, Portcullis Lane, Ludlow, Shropshire, SY8 1PZ.

We act as a data controller for the personal information we process in the course of delivering and governing our services. For any data protection queries, please contact us at queries@emeraldinterserv.co.uk.

We collect and process personal information only for legitimate, clearly defined purposes. The categories of information we may handle include:

• Patient data provided by host NHS organisations to deliver clinical care, including names, contact details, and clinical records relevant to the regulated activity.
• Enquiry and contact details submitted via this website or by email, such as name, organisation, role, email address, and telephone number.
• Staff and clinician records necessary for recruitment, vetting, and compliance, including identity, professional registration, and occupational health information.
• Technical data collected automatically when you visit this website, such as IP address and browser type, used solely to maintain security and site functionality.

We process personal data only where we have a lawful basis to do so, including where it is necessary to deliver healthcare, to meet legal and regulatory obligations, to respond to your enquiries, or to operate and improve our services. We never sell personal data to third parties.

Personal information is shared only where necessary and on a need-to-know basis. We may share data with host NHS organisations involved in your care, with regulators such as the Care Quality Commission, and with professional advisers bound by confidentiality. All sharing is carried out under appropriate data-sharing or contractual safeguards.

We retain personal information only for as long as is necessary for the purpose for which it was collected, or as required by law and clinical record-keeping obligations. Once data is no longer required, it is securely destroyed or anonymised.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to authorised personnel and clinicians who require it to perform their duties.

Under UK GDPR you have rights including access to your personal data, correction of inaccurate information, erasure in certain circumstances, restriction of processing, data portability, and the right to object to or withdraw consent for processing. To exercise any of these rights, contact us at queries@emeraldinterserv.co.uk.

If you have any concern about how we handle your personal information, please contact us in the first instance. You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.