Privacy Policy

OVERVIEW

This privacy policy outlines how Workforce Solutions Heathrow Limited (company number: 13157202) of 450 Bath Road, Longford, Heathrow UB7 0EB (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website.

We are committed to safeguarding your privacy in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Any personal information you provide while using this website will be handled in accordance with this privacy statement.

We may update this policy periodically, so please review this page from time to time to ensure you are satisfied with any changes. This policy is effective from [Effective Date].

PERSONAL DATA AND SENSITIVE PERSONAL DATA

Under GDPR, we handle two types of personal data:

Personal Data
This refers to any information related to an identifiable individual. This includes identification numbers, IP addresses, and cookie data.

Sensitive Personal Data
Sensitive personal data includes information on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health data, sexual orientation, and criminal offences.

DATA PROTECTION PRINCIPLES

We adhere to the following Data Protection Principles:

1. Lawfulness, Fairness, and Transparency: Data must be processed lawfully, fairly, and in a transparent manner.
2. Purpose Limitation: Data must be collected for specified, explicit, and legitimate purposes and not further processed in a way that is incompatible with those purposes.
3. Data Minimisation: Data must be adequate, relevant, and limited to what is necessary.
4. Accuracy: Data must be accurate and kept up to date. Inaccurate data should be corrected or erased promptly.
5. Storage Limitation: Data must not be kept longer than necessary for the purposes for which it is processed.
6. Integrity and Confidentiality: Data must be processed securely to prevent unauthorized access, accidental loss, or damage.

LAWFUL BASIS FOR PROCESSING DATA

We process personal and sensitive data based on the following lawful bases:

• Contractual Necessity: When processing is necessary for the performance of a contract.
• Legal Obligation: When processing is required to comply with the law.
• Legitimate Interests: When processing is necessary for our legitimate business interests.
• Consent: When you have provided explicit consent for processing your data.

DATA WE COLLECT

We may collect the following information:

• Name
• Contact information, including email address

USE OF THE INFORMATION

We require this information to understand your needs and provide you with a better service, including:

• Internal record keeping
• Improving our products and services
• Sending promotional emails about new products, special offers, or other information that may interest you
• Contacting you for market research purposes
• Customizing the website according to your interests

We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.

COOKIES

A cookie is a small file placed on your computer’s hard drive. It helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used, which helps us improve our website by tailoring it to customer needs. Cookies do not give us access to your computer or any information other than what you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website.

To find out more about cookies, including how to manage and delete them, visit www.allaboutcookies.org.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites. Once you leave our site, we do not have control over the other websites and cannot be responsible for the protection and privacy of any information you provide there. Please review the privacy policy applicable to those websites.

RIGHTS OF DATA SUBJECTS

You have the following rights under data protection legislation:

• Right to be Informed: Transparency about how personal data is used.
• Right of Access: Access to your personal data.
• Right to Rectification: Correction of inaccurate or incomplete data.
• Right to Erasure: The right to be forgotten under certain circumstances.
• Right to Restrict Processing: Blocking or suppression of your data processing.
• Right to Data Portability: The right to transfer your data to another service provider.

SECURITY OF DATA

We are committed to ensuring that your data is secure. To prevent unauthorized access or disclosure, we have implemented suitable physical, electronic, and managerial procedures to safeguard the information we collect online.

In case of a data breach, we will follow our Data Protection Breach Reporting Policy and Procedure.

DATA RETENTION

We will only retain your data for as long as necessary for the purposes for which it was collected. Once it is no longer needed, we will securely delete or anonymize it.

TRANSFERRING PERSONAL DATA OUTSIDE THE EEA

If you are based within the European Economic Area (EEA), your data will not be transferred outside the EEA. If you are based outside the EEA, we may need to transfer your data to provide services to you.

RIGHT OF ACCESS

You may request access to the information we hold about you by writing to us at [email protected]. We will respond within one month, usually providing the information electronically.

DATA PROTECTION OFFICER

We have appointed a Data Protection Officer to manage our data protection practices. For any queries or concerns, please contact our Data Protection Officer at [email protected].