LocumKing Find cover

Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how LocumKing collects, uses, shares and protects personal information when people visit locumking.com, apply as an optical professional or practice representative, use an approved account, test marketplace features or contact us.

Who we are

LocumKing is the controller of the personal information described in this policy for UK data-protection purposes. The website address is https://locumking.com.

LocumKing is currently completing its Companies House registration. The legal operator and registered-address details will be added when that process is complete. Until then, privacy questions and rights requests can be sent to james@greenfieldeyecare.co.uk.

Who this policy covers

This policy covers visitors, applicants, approved professionals, practice representatives and other people who communicate with LocumKing. The service is intended for adult professionals and business representatives, not children.

LocumKing is not a patient-record system. Do not submit patient names, clinical records or other patient-identifiable information through applications, profiles, listings, messages, reviews, issue reports or support channels.

Information we collect

Applications and contact details

We may collect your name, email address, telephone number, town or city, postcode, account type and communications with us.

Professional information

We may collect profession, GOC number, application and verification status, self-declared services and capabilities, professional summary, years of experience, practice settings, equipment or systems familiarity, languages, professional-indemnity provider and renewal or expiry date.

We do not currently require professional profile uploads containing passports, right-to-work documents, qualification certificates or insurance documents.

Practice information

We may collect practice name, legal structure, Companies House number, GOC body corporate number, website, representative’s job title and records of company and authority checks. An administrator may retrieve public Companies House information for manual comparison. A public company record does not itself prove the applicant’s identity or authority.

Account, verification and security information

We may collect email-verification status, public-register check results, application decisions, relevant dates, administrator notes, the WordPress account linked to an application, password in protected hashed form, login and session information, security events, a salted submission fingerprint and audit records.

Profile, availability and marketplace information

Professionals may provide availability dates, working hours, town, postcode, travel radius, preferred rate and notes. Practices may provide shift title, profession, date, hours, location, rate and description.

The marketplace may record searches, applications, withdrawals, invitations, responses, booking participants, agreed rates, service-fee calculations, confirmation dates, calendar actions, completion status and related audit events.

Before a booking, approved practices see a professional’s display name, profession, town, outward postcode, availability, preferred rate, Premium label, self-declared services and profile information. Private email addresses, telephone numbers and full postcodes are not displayed in the availability marketplace. When a booking is confirmed, the two booking participants can see each other’s account email address and any telephone number supplied for the account.

Reviews, cancellations and problem reports

After a completed booking, participants may provide a one-to-five-star rating and optional factual feedback. Reviews are held privately until both sides submit or 14 days pass.

A booking participant may submit a private cancellation request or problem report. This can include the booking, reporter, other participant, issue category, factual details, status and administrator review notes. Members must not include patient-identifiable information. A report does not automatically change a booking or rating.

Membership, ranking and preferences

We may record Standard or Premium membership status, start and expiry dates, source and administrator change audit. Premium is currently an unpaid preview.

Members may choose whether to receive opportunity alerts and may supply a town or outward-postcode keyword and, for practices, a profession preference. We record opt-in or opt-out choices separately from essential service communications.

Test payment information

Stripe functions are currently restricted to test mode. If a professional opens Stripe-hosted test onboarding, Stripe collects the test identity and bank-account information entered there. LocumKing may receive a Stripe test account identifier and readiness flags.

Test booking records may contain Checkout, PaymentIntent, charge, transfer, reversal or refund identifiers and statuses. LocumKing does not store full card details or raw Stripe webhook bodies. Test transactions have no cash value and no real payment or payout can occur.

Website, cookie and communications data

We may collect pages used, form submissions, cookie or similar-technology choices, device or browser information, approximate network information, support requests, email-delivery events and optional marketing preferences. Our Cookie Policy provides more detail.

Member referral information

Approved members receive a non-sequential link for the professional application route and another for the practice route. LocumKing does not ask the member to provide the proposed recipient’s name, email address or telephone number and does not send the invitation on the member’s behalf.

If someone voluntarily submits an application using a valid link, we record the referring member’s user ID with that application. We use this limited attribution to show the member and administrator how many applications and approvals resulted from the links, prevent or investigate abuse and measure the founding-member programme. Referral attribution never changes verification, approval, Premium status or ranking.

Where information comes from

Information comes directly from you, an authorised practice representative, your use of the service, other participants in a marketplace interaction, and communications with us. If you choose to apply using a member referral link, the link supplies that member’s user ID but no contact details about you. We may compare application details with public sources such as the GOC register and Companies House.

How and why we use information

We use personal information to:

  • receive and assess applications, confirm email ownership and conduct human verification reviews;
  • create, secure and administer member accounts;
  • display approved-member marketplace information with appropriate privacy controls;
  • publish and match shifts and availability;
  • process test applications, invitations, bookings, calendars, completion confirmations and reviews;
  • send essential application, security, invitation, booking, reminder and support messages;
  • send optional opportunity or marketing messages only where the relevant choice or legal basis permits;
  • attribute voluntarily submitted applications to member referral links, prevent referral misuse and measure the founding-member programme;
  • administer the Premium preview and explain its effect on ranking;
  • prevent double-booking, duplication, fraud, abuse and unauthorised access;
  • investigate cancellation requests, complaints, conduct or patient-safety concerns through human review;
  • maintain audit, test-payment and operational records;
  • troubleshoot, measure, secure and improve the service;
  • comply with law and valid regulatory, tax, court or law-enforcement requirements; and
  • establish, exercise or defend legal claims.

Lawful bases

Depending on the activity, we rely on one or more of:

  • steps at your request and performance of a contract, for applications, accounts and marketplace services you ask us to provide;
  • legitimate interests, to build and operate a safe, useful and commercially sustainable professional marketplace, verify information, prevent misuse, support members, improve the service and protect legal rights, after considering the impact on individuals;
  • legal obligation, where processing is needed to meet legal, regulatory, accounting, employment-intermediary, tax-reporting or law-enforcement duties; and
  • consent, for optional marketing and non-essential cookies where consent is required. You can withdraw consent without affecting earlier lawful processing.

We do not currently make decisions with legal or similarly significant effects solely by automated means. Application approval, issue review and account restrictions involve human decision-making.

Matching and Premium ranking

Practices choose filters such as profession, date, location and capability. LocumKing then applies those filters to available listings. Matching active Premium professionals are shown before matching Standard professionals and are clearly labelled. Premium does not change verification, self-declared capability information, reviews or the practice’s decision.

Optional alerts and service messages

Opportunity alerts are optional. Members can change their alert choice and location or profession preferences from their account. Essential account, verification, security, invitation, booking, reminder and support messages are sent separately because they are needed to administer the requested service. We do not add promotional content to a message merely described as essential.

Who we share information with

We share information only where reasonably necessary. Recipients may include:

  • approved practices and professionals, to the limited extent described above for marketplace discovery and a confirmed booking;
  • WordPress.com and suppliers providing hosting, security, anti-spam, email, analytics, backups and technical support;
  • the GOC, Companies House and verification providers where needed to check professional or business information;
  • Stripe in its test environment when an administrator or member deliberately uses a test payment feature;
  • professional advisers, insurers, auditors, regulators, tax authorities, courts, law-enforcement bodies or other authorities where required or appropriate; and
  • a buyer, investor or successor if the service or business is reorganised, financed or transferred, subject to suitable confidentiality and data-protection safeguards.

We do not sell personal information.

Digital-platform reporting

UK digital-platform rules can require certain platform operators to collect, verify and report information about active sellers and payments. LocumKing is obtaining professional advice on whether and when those rules apply to its final operating model. We will not collect National Insurance numbers, dates of birth or tax identifiers merely for possible future use. If such collection becomes legally necessary, we will update this policy and explain the required information, purpose, lawful basis, recipients and retention before collecting it.

International transfers

Some technology suppliers may process information outside the UK. Where UK law requires safeguards, we use an approved mechanism such as UK adequacy regulations or approved contractual safeguards and take reasonable steps to protect the information. You can contact us for information about relevant safeguards.

How long we keep information

We keep personal information only as long as reasonably necessary for the purposes above, including legal, accounting, security and complaint requirements. Our current approach is:

  • unapproved, withdrawn or rejected applications: normally up to 24 months after the decision or last meaningful contact;
  • approved accounts, verification, bookings, reviews, issue reports and related financial audit records: while the account is active and normally up to six years after closure or the relevant transaction, subject to professional review of the final schedule;
  • withdrawn or unbooked availability and invitations: retained only for the operational and security period reasonably required, with eligible records erasable through WordPress privacy tools;
  • optional marketing and alert preferences: while relevant, plus a minimal suppression record where needed to respect an opt-out;
  • routine security and technical logs: normally no more than 12 months unless needed to investigate an incident or claim; and
  • backups: until replaced under the provider’s normal secure backup cycle.

We may anonymise information so it can no longer identify anyone and use that anonymous information for statistics or improvement.

Security

We use proportionate measures designed to protect information, including restricted administrator access, low-privilege member roles, hashed passwords and verification tokens, encrypted storage for supported administrator credentials, secure connections, request validation, rate limits, audit records, software updates, anti-spam, backups and security monitoring.

No internet service can guarantee absolute security. Use a strong, unique password and tell us promptly if you suspect unauthorised access.

Your rights

Depending on the circumstances, you may have rights to be informed; request access; correct inaccurate or incomplete information; request erasure; restrict processing; receive certain information in a portable format; object to processing based on legitimate interests; and withdraw consent.

These rights are not absolute and exemptions may apply, especially where records are needed for another person’s rights, safety, a complaint, fraud prevention or legal claims. We may need to verify identity before responding. WordPress privacy tools support export and conservative erasure of relevant LocumKing data, with protected records flagged for administrator review.

You have an absolute right to object to direct marketing. Use the unsubscribe method provided or contact us. Opportunity alerts can also be switched off in your account.

Complaints

Please contact james@greenfieldeyecare.co.uk first so we can investigate. You also have the right to complain to the Information Commissioner’s Office. Information is available at https://ico.org.uk/make-a-complaint/.

Changes to this policy

We will update this policy when LocumKing’s legal operator, processing, suppliers or obligations change. The date above shows the latest version. If a change materially affects existing information, we will take reasonable steps to bring it to affected people before the new use begins.

This beta privacy wording should be reviewed with a UK data-protection adviser before LocumKing authorises live work, enables live payments or begins any new tax-identifier collection.