Privacy Policy

Last updated: 18 December 2025

This Privacy Policy explains how CENTRC Ltd, trading as JustRelocation ("we", "us", "our"), collects, uses, and protects personal data when you use justrelocation.com (the "Platform"). It applies to NHS healthcare workers who use the Platform to find services, and to service providers ("vendors") who register to be listed.

We are committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data we collect

Information you provide

When you create an account or use the Platform, we may collect:

  • Your name, email address, and phone number
  • Your NHS trust, hospital, role, and employment start date (for healthcare worker accounts)
  • Your relocation details — current location, destination area, and timeline
  • Professional registration numbers (GMC, NMC, HCPC) where you choose to provide them for verification
  • Messages you send through the Platform's contact form
  • Reviews and feedback you submit about vendors

Information collected automatically

  • IP address and device information
  • Browser type and version
  • Pages visited, time on page, and navigation paths
  • Search queries and filters used within the Platform
  • Referral sources

Information from third parties

  • Vendors may share outcome data with us (for example, whether a quote was provided or a service completed) so we can measure service quality
  • If you log in via a third-party authentication provider, we receive the basic profile information that provider shares

2. How we use your data

To provide the service

  • Create and manage your account
  • Match you with relevant vendors near your hospital
  • Facilitate enquiries and communications between you and vendors
  • Verify NHS employment status to maintain platform integrity
  • Provide customer support

To operate our business

When you express interest in a vendor, we share your contact details and relevant preferences with that vendor so they can respond to your enquiry. This is how the Platform generates revenue while remaining free for NHS workers. We share:

  • Your name and contact details
  • Your relocation timeline and destination
  • Relevant service preferences (for example, budget or property type)
  • Your NHS employment verification status

We do not share your password, full registration numbers, or your communications with other vendors.

To improve the Platform

  • Analyse usage patterns and identify friction points in the relocation journey
  • Develop new features and service categories
  • Conduct anonymised research on NHS worker relocation challenges

For legal and security purposes

  • Comply with legal obligations
  • Detect and prevent fraud and misuse
  • Respond to lawful requests from authorities

3. Third-party service providers

We work with trusted third-party providers who process data on our behalf under contractual data protection obligations:

  • Stripe — payment processing for vendor subscriptions
  • Google — Google Analytics for platform analytics; Google Maps for location features
  • DigitalOcean — cloud hosting and infrastructure
  • Email delivery services for transactional and notification emails
  • Customer support tooling

These providers are contractually required to protect your data and to use it only for the purposes we specify. They may not use it for their own marketing or sell it to other parties.

4. Cookies

We use the following types of cookies:

  • Essential cookies — required for the Platform to function, including authentication sessions and security tokens. These cannot be disabled.
  • Analytics cookies — used to understand how visitors use the Platform (via Google Analytics). These are set only with your consent.
  • Preference cookies — used to remember your search preferences and settings.

You can manage cookie preferences through your browser settings or via our cookie consent banner. Disabling non-essential cookies will not affect your ability to use the Platform.

5. Data retention

  • Active accounts — personal data is retained for as long as your account is active
  • Closed accounts — personal data is deleted within 30 days of account closure; anonymised usage data may be retained for analytics purposes
  • Financial records — retained for 7 years in accordance with UK tax law
  • Platform messages — retained for 2 years for dispute resolution purposes, then anonymised

6. Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Right to be informed — this policy fulfils that right
  • Right of access — you can request a copy of your personal data
  • Right to rectification — you can correct inaccurate or incomplete data
  • Right to erasure — you can request deletion of your data ("right to be forgotten")
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to data portability — you can receive your data in a portable format
  • Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, contact us at info@justrelocation.com. We will respond within 30 days. You can also update account information directly through your account settings.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data security

We apply industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest for sensitive data, access controls, and regular security reviews. No online system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. International transfers

Your data is primarily stored within the UK and the European Economic Area. Where data is transferred outside these regions, we use European Commission-approved transfer mechanisms and ensure adequate protections are in place.

9. Children's privacy

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have done so, we will delete that data promptly.

10. Changes to this policy

We may update this policy to reflect changes in our data practices or in applicable law. When we make material changes, we will notify registered users by email at least 30 days before the changes take effect and display a notice on the Platform. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, data requests, or to report a concern:

This Privacy Policy is effective as of 18 December 2025.