Data Processing & Sub-processors
Last Updated: September 2026
How Evergreen uses service providers to operate its website, platform and staffing services.
1. Processing Categories
- Hosting and database services used to store and operate account, booking, compliance and assignment information, including relevant practice-provided documents.
- Authentication services used where required to create and secure user accounts.
- Email and communications services used to deliver operational messages and relevant assignment information to the intended recipients.
- Analytics services may be used to understand website performance and usage.
- Payments and accounting services may be used where required to process payments or maintain financial records.
2. Sub-processor Register
- Evergreen maintains an internal register identifying relevant processors and sub-processors, the service provided, categories of data involved, processing location and applicable contractual safeguards.
- Public supplier details will be updated as each service is technically verified. Controller and processor responsibilities depend on the particular activity and contractual arrangements; practice-uploaded information is not automatically processed solely on the practice’s behalf.
3. International Processing
Where personal data is transferred outside the UK, Evergreen will use an appropriate lawful transfer mechanism and relevant safeguards required by UK data-protection law. Practices should provide only information necessary for the assignment, with appropriate lawful grounds and confidentiality safeguards, and avoid unnecessary patient-identifiable information.