GDPR COMPLIANCE STATEMENT

Jazmins Recruitment Agency Ltd Last updated: 22/06/26

1. Introduction

Jazmins Recruitment Agency Ltd (“we”, “us”, “our”) is fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This GDPR Statement explains:

How we collect and process personal data

Why we process it

Your rights under GDPR

How we protect your information

This applies to candidates, clients, website users, and anyone who interacts with our business.

2. Our Role Under GDPR

We act as:

Data Controller

For all personal data we collect directly from candidates, clients, and website users.

Data Processor

When processing data on behalf of clients (e.g., payroll, compliance checks).

We are registered with the Information Commissioner’s Office (ICO).

3. What Personal Data We Collect

3.1 Candidate Data

Name, address, contact details

Date of birth

Right‑to‑work documents

Driving licences, CPC, tachograph cards

Employment history & references

Criminal record information (where legally required)

National Insurance number

Bank details (for payroll, if applicable)

3.2 Client Data

Contact names and job titles

Company details

Billing information

Vacancy and workforce requirements

3.3 Website Data

IP address

Device and browser information

Cookies and analytics data

3.4 Special Category Data

We only process sensitive data (e.g., health, criminal checks) where legally permitted and strictly necessary.

4. Why We Process Personal Data (Lawful Basis)

We process data under the following lawful bases:

Contractual necessity – to supply recruitment services

Legal obligation – right‑to‑work checks, licence checks, tax compliance

Legitimate interests – business operations, fraud prevention, service improvement

Consent – for specific optional processing activities

We do not sell or trade personal data.

5. How We Use Personal Data

We use data to:

Register and vet candidates

Match candidates to suitable roles

Conduct compliance checks (RTW, DVLA, DBS)

Communicate with candidates and clients

Manage bookings, placements, and payroll

Issue contracts, agreements, and invoices

Improve website performance and user experience

Meet legal and regulatory obligations

6. Sharing Your Data

We may share data with:

Clients seeking workers

Payroll providers

Background check providers (DBS, DVLA, etc.)

Insurance companies

IT and system support partners

Government bodies (HMRC, Home Office, Police) where legally required

All third parties must comply with UK GDPR and maintain strict confidentiality.

We never share data with unauthorised parties.

7. International Data Transfers

We do not routinely transfer personal data outside the UK. If international transfers are required, we will ensure:

Adequacy regulations are in place, or

ICO‑approved safeguards (e.g., Standard Contractual Clauses) are used

8. Data Security

We use strong technical and organisational measures to protect personal data, including:

Encrypted storage

Secure access controls

Multi‑factor authentication

Regular security audits

Staff GDPR training

Although no system is 100% secure, we take every reasonable step to protect your data.

9. Data Retention

We retain data only for as long as necessary:

Candidate records: up to 6 years after last activity

Client records: up to 6 years after contract end

Compliance documents: as required by law

Website analytics: typically 12–24 months

Data is securely deleted or anonymised after retention periods expire.

10. Your GDPR Rights

Under UK GDPR, you have the right to:

Access your personal data

Request correction of inaccurate data

Request deletion (“right to be forgotten”)

Restrict processing

Object to processing

Request data portability

Withdraw consent at any time

To exercise your rights, contact us using the details below.

11. Cookies

Our website uses cookies to:

Improve functionality

Analyse traffic

Enhance user experience

You can manage cookie preferences through your browser settings. A full Cookie Policy is available separately.

12. Automated Decision‑Making

We do not use automated decision‑making or profiling that has legal or significant effects on individuals.

13. Third‑Party Links

Our website may contain links to external sites. We are not responsible for their content, privacy practices, or security.

14. Contact Details

For GDPR queries, data access requests, or complaints:

Data Protection Officer Jazmins Recruitment Agency Ltd 

Address: Peppermint, Goat Road

Email: Nativ7901@gmail.com

You also have the right to contact the Information Commissioner’s Office (ICO).