1. Collection and Use of Personal Data
Purpose and Legal Basis

We collect and process personal data to provide work-finding services and related recruitment activities. This includes:

• Contacting you about suitable job opportunities
• Assessing your skills and experience for potential roles
• Submitting your details to clients with your consent
• Managing timesheets, payments, and contracts
• Maintaining up-to-date candidate and client records
• Complying with legal and regulatory requirements

We may also process your data to investigate or prevent fraud, maintain security, or comply with audit or compliance obligations. We rely on the following lawful bases for processing:

  

• Your consent
• Our legitimate business interests (in operating as a recruitment business)
• Compliance with legal obligations
• Performance of a contract or steps taken prior to entering a contract

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided this does not override your rights or freedoms. These interests include:

• Managing our database and maintaining accurate records
• Contacting you about suitable opportunities
• Providing work-finding services and submitting CVs to clients
• Communicating with clients, suppliers, and regulatory bodies
• Protecting our business and ensuring compliance with relevant laws

Data Recipients

We may share your personal data with trusted third parties, including:

• Clients seeking candidates for employment or contract opportunities
• Former or prospective employers for reference purposes
• Payroll, umbrella, or accountancy providers (for payment processing)
• Background check or verification services (e.g. DBS, Companies House)
• Professional advisers, auditors, insurers, and IT service providers
• Government agencies and regulators (e.g. HMRC, Home Office, ICO, Police)
• Any other organisation where you have explicitly requested data sharing

We do not transfer personal data outside the UK or the European Economic Area (EEA).

Statutory/Contractual Requirements

In some cases, providing your data is a legal or contractual requirement. Failure to do so may mean we are unable to introduce you to clients, find suitable employment, or retain your details on our systems.

2. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

• Candidate records are generally kept for a minimum of one year from the date of creation or the last provision of work-finding services, in accordance with The Conduct of Employment Agencies and Employment Businesses Regulations 2003.
• Payroll, tax, and pension records are retained in line with HMRC requirements.
• Where consent is the lawful basis for processing, we will cease processing your data if you withdraw consent.

Details of specific retention periods can be provided on request.

3. Your Rights

Under data protection law, you have the following rights:

• To be informed about how we process your data
• To request access to the personal data we hold about you
• To request correction of inaccurate or incomplete data
• To request erasure of your personal data (“right to be forgotten”)
• To restrict or object to certain types of processing
• To request data portability in certain circumstances
• To withdraw your consent at any time

If you wish to exercise any of these rights, please contact us using the details below. 

Data Protection Contact: Marijana Lawton – Director & Data Protection Officer [email protected]

4. Complaints

If you have a concern or complaint about how we process your personal data, please contact us directly so we can address it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk/concerns/
• Telephone: 0303 123 1113

5. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legislation or our data practices. Any updates will be published on our website and will take effect immediately upon posting.