Privacy Policy

---

Privacy Notice

Introduction
First Staff is committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect, use, and safeguard your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are
First Staff is a private limited company registered in England and Wales under company number 17204252. Our registered office is Office 201, Riverway House, Lancaster, LA1 2RX and we can be contacted at help@firststaff.co.uk

The Data We Collect
We may collect and process the following categories of personal data:

• Candidates and Employees: Name, contact details, CVs, work history, references, right-to-work documents, payroll information, and training records.
• Clients: Contact names, business addresses, phone numbers, and email addresses.
• Website Users: IP addresses, browser details, and cookies (for more details, see our Cookie Policy).

How We Use Your Data
We use your data for the following purposes:

• Recruitment and staffing services.
• Compliance with legal and regulatory obligations.
• Payroll and administrative functions.
• Communication regarding job placements, services, and updates.
• Marketing (with your explicit consent).

Legal Basis for Processing
We process personal data under the following legal bases:

• Contractual necessity: To fulfill contracts with candidates, clients, or employees.
• Legal obligation: To comply with laws, such as right-to-work checks and payroll regulations.
• Legitimate interests: For business administration, quality control, and relationship management.
• Consent: For marketing communications and specific processing activities where required.

Sharing Your Data
We may share your personal data with:

• Prospective employers or clients (with your consent).
• Payroll providers and accountants.
• Legal advisors and regulatory authorities.
• Third-party service providers (e.g., IT support, marketing agencies).
  We ensure that all third parties uphold GDPR standards.

Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal and accounting requirements. Candidate data is typically retained for 12 months after our relationship ends unless otherwise required by law.

Your Rights
Under GDPR, you have the following rights:

• Access your personal data.
• Correct inaccuracies in your personal data.
• Erase your personal data (right to be forgotten).
• Restrict processing of your personal data.
• Data portability.
• Object to the processing of your data.
• Withdraw consent at any time (for consent-based processing).

To exercise your rights, please contact us at help@firststaff.co.uk

Data Security
We implement robust technical and organisational measures to ensure your personal data is secure. This includes encrypted systems, access controls, and regular data audits.

International Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

Updates to This Notice
This Privacy Notice may be updated periodically. The latest version will always be available on our website or upon request.

Contact Us
If you have any questions or concerns regarding this Privacy Notice or how your data is handled, please contact us at:
Email: help@firststaff.co.uk
Address: Office 1, Riverway House, Lancaster, LA1 2RX

If you believe we have not addressed your concerns adequately, you can lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.