Information Security Statement

Our Commitment

Surgery Premises Group Ltd recognises the importance of protecting the confidentiality, integrity and availability of information entrusted to us by our clients, suppliers and business partners.

As a specialist provider of healthcare premises management services, we are committed to maintaining high standards of information security across all areas of our business.

Our Approach

We are committed to:

• Protecting confidential information from unauthorised access.
• Maintaining appropriate technical and organisational security measures.
• Ensuring information is accurate, secure and available when required.
• Complying with UK GDPR, the Data Protection Act 2018 and other applicable legislation.
• Managing information security risks through appropriate policies and procedures.
• Providing appropriate staff awareness and training.
• Working only with trusted suppliers who meet appropriate security standards.
• Monitoring and reviewing our security arrangements to ensure continual improvement.

Access Control

Access to company information is restricted to authorised personnel who require access to perform their duties.

Cyber Security

We use appropriate security controls to reduce cyber security risks, including secure systems, password protection, software updates, malware protection and secure backup procedures.

Incident Management

Any suspected information security incident is investigated promptly and managed in accordance with our internal procedures. Where required, reportable incidents are notified to the Information Commissioner's Office and affected individuals.

Continuous Improvement

Information security is regularly reviewed to ensure our controls remain effective and proportionate to the services we provide.

Contact

For further information regarding our information security practices, please contact:

See also our Privacy & Data Protection Policy.