The Surgical Care Practitioner Curriculum and The Managed Voluntary Register for Surgical Care Practitioners (“MVR”) are jointly owned by the Royal College of Surgeons of Edinburgh (“RCSEd”), Nicolson Street, Edinburgh, EH8 9DW and the Royal College of Surgeons of England (“RCSEng”) 38-43 Lincoln's Inn Fields, London WC2A 3PE.
This website is owned and hosted by RCSEd. For the purposes of data protection legislation, RCSEd is the ‘Data Controller’ for the MVR.
RCSEd is a registered charity with charity number SC005317 and a Royal Charter company with company number RC000466.
RCSEng is a is a registered charity with charity number 212808 and a Royal Charter company with company number RC000465.
RCSEd is committed to protecting your privacy and maintaining the security of any personal information you provide to us. All personal information held by RCSEd will be held in accordance with the UK General Data Protection Regulation and all other relevant privacy legislation. RCSEd is registered on the Data Protection Register of the Information Commissioner’s Office (ICO) with registration number Z5731683. Our entry may be viewed at https://ico.org.uk/ESDWebPages/Entry/Z5731683
If you have any enquiries, please contact dataprotection@rcsed.ac.uk
Use of your information
This Privacy Notice relates to our website (www.scpregister.org) (the “Website”). Please note that this Privacy Notice covers this Website only.
RCSEd may collect personal information about users of the Website (“you”). When we mention “personal information” in this Notice, we mean any information that relates to an identifiable natural person (also known as “personal data”).
Your name, address, date of birth and contact details are all examples of your personal information, if they identify you. Where we talk about where we “process” your personal information (and “processing” and “processed”) we mean any activity relating to personal information, including, by way of example, collection, storage, use, consultation and transmission.
Why we need to collect and use your personal information
RCSEd collects data directly from you. When entering your data into the online registration form, we collect this data from you for the purpose of registering you for the MVR. Failure to provide this information may result in us being unable to register you.
RCSEd uses this data to uniquely identify you as an individual to carry out its activities relating to the administration of the MVR. RCSEd also collects data to allow analysis and evaluation regarding the equality and fairness of its service provision and offerings.
RCSEd will only use this data in ways that you would reasonably expect and will not use this data in an intrusive manner.
The data collected falls within the following categories:
- Personal & contact information: Name, title, email address, telephone number, date of birth, regulatory body identifier i.e., Nursing and Midwifery Council PIN, and Health & Care Professionals Council (HCPC) Registration Number
- Membership & employment information: RCSEd/RCSeng Reference Number, work address, specialty and job title. Supporting evidence, such as information pertaining to your education and professional skills: details of your qualification from a higher education institution, curriculum vitae, employment history, professional development records, copies of certificates, information relating to any training post, and current appointment information.
- Equal opportunities information: RCSEd does not collect sensitive/special category information about you except when you specifically and knowingly provide it. Where we collect information that you voluntarily provide when you complete Equality, Diversity, and Inclusion (EDI) surveys, the personal information you provide is anonymised, unless you choose to provide your contact information.
- Financial information: Payment receipts. Please note RCSEd does not retain any payment information including payment card details on our systems.
- Account/Preference/ Communication information: Your account settings and communication preferences. Communications between you and us. Information held in relation to your account on the Website, including log in details.
RCSEd has legitimate business interests to collect and process the categories of data mentioned above. RCSEd’s legitimate interests allow RCSEd to provide registration services, as well as using anonymised data to monitor trends and to improve its services.
RCSEd may sometimes rely on your consent to process your data. Where your express consent has been obtained, RCSEd will only use your data for the purposes for which your consent was given.
You can withdraw your consent at any time by contacting dataprotection@rcsed.ac.uk
Who we share your data with
RCSEd make some information publicly available on the register. The categories of information displayed found using the register search are as follows:
Name
Regulatory Body
Location
MVR Status
RCSEd will share a reasonable amount of personal data with RCSEng for the purposes of managing your MVR application and use your data to contact you regarding your application.
RCSEd does on occasions and when relevant share limited information with constituents of its Group (e.g., subsidiary companies or Faculties). RCSEd will only do so in accordance with UK data protection legislation.
RCSEd may also disclose your personal information to prevent an emergency, to prevent harm to others, to respond to legal requirements (for instance requests from regulatory bodies), to protect or enforce its rights, to protect or enforce the rights of a third party, or as required or permitted by law (including, without limitation, to comply with a subpoena or court order).
RCSEd may use your information for market research and statistical analysis, and may use reputable partners, suppliers or agencies to process limited personal information on our behalf to help us provide our services to you. When doing do so, strict instructions will be given on the processing of data and the security of it, and they will not use your data for their own business purposes.
Subject to the other clauses in this Privacy Statement, RCSEd does not share personal data with third parties without your permission. RCSEd does not permit third parties to use the personal data for their own purposes and only permits them to process personal data for specified purposes and in accordance with the RCSEd’s instructions.
Marketing
From time-to-time RCSEd and RCSEng may wish to contact you with relevant marketing information and updates about our products and services by email. If you consent to us contacting you in this way, please tick the relevant opt-in box when you create your MVR application. You can also withdraw your consent at any time by contacting scpmvr@rcsed.ac.uk and updating your preferences.
Your rights
If you consent to RCSEd contacting you with marketing information about other RCSEd events and services, please tick the relevant opt-in box when you create your MVR application. You can also withdraw your consent at any time by contacting scpmvr@rcsed.ac.uk and updating your preferences.
You are entitled to access any personal data about you held by RCSEd by sending a written request to the RCSEd Data Protection Officer (dataprotection@rcsed.ac.uk). You may be required to supply a valid means of identification as a security precaution to assist us in preventing the unauthorised disclosure of your personal information. We will process your request in line with the requirements of the UK GDPR.
You are also entitled to ask that the RCSEd modify or delete any information it holds that you believe is incorrect or out of date.
Information Security
RCSEd’s hosting site is in the United Kingdom. All systems are firewall-protected. RCSEd also uses encryption techniques and authentication procedures to maintain the security of your personal data and prevent unauthorised access to your account and to RCSEd systems. You are responsible for keeping your account login details confidential. Unfortunately, the transmission of information via the internet is not completely secure. Although RCSEd will do its best to protect your personal data, it cannot guarantee the security of your data transmitted to or from RCSEd Website(s) via the internet. RCSEd follows strict security procedures in the storage and disclosure of information which you have given, to prevent unauthorised access in accordance with UK data protection legislation.
Use of Cookies
Who to contact at the RCSEd
If any of the personal information you have given to us changes, such as your contact details, please inform us without delay by contacting scpmvr@rcsed.ac.uk
If you wish to know more about how we manage privacy at the RCSEd, or you would like to exercise one of your data protection rights please contact: dataprotection@rcsed.ac.uk
The UK regulator for privacy law is the Information Commissioner's Office (ICO). See their website for further information on your rights. You have a right to raise concerns or make a formal complaint by contacting the ICO’s Office at https://ico.org.uk
If the use of your data changes, we will place an updated version on this page. Regularly reviewing this information ensures you are always aware of what data we collect, how we use it and under what circumstances, we will share it with other parties.
The RCSEd Privacy Statement was updated in August 2022. By using this site, you consent to the collection and use by RCSEd of your information, in the manner specified in this Privacy Policy.
RCSEd reserves the right to change or amend this Privacy Policy prospectively at any time by posting the revised Privacy Policy. We encourage you to review periodically this Privacy Policy to be informed of how RCSEd is protecting your information.