Privacy Policy

1. Who we are

WorkBase Recruitment Ltd is a permanent recruitment agency registered in England & Wales, specialising in warehouse, logistics and driver recruitment for UK employers. For the purposes of UK data protection law, WorkBase Recruitment Ltd is the data controller for the personal data described in this policy.

Registered office: [address to be confirmed]. Company registration number: [pending incorporation]. We are registered with the Information Commissioner's Office (ICO) as a data controller; our registration reference will be published here once confirmed.

2. Data we collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, telephone number, postal address.
• Enquiry details — information you submit through our contact, vacancy or CV forms, including messages, role details and attachments.
• Employer account details — company name, job title, business contact information.
• Technical data — IP address, browser type, device information, and pages visited, collected automatically via cookies and similar technologies (see our Cookie Policy).

Candidate-specific data (CVs, work history, references, right-to-work documents and similar) is covered in detail in our Candidate Privacy Notice.

3. How we use your data

We use personal data to:

• Respond to enquiries submitted through this website;
• Provide our recruitment services to employers and candidates;
• Maintain records required for our regulatory and contractual obligations;
• Improve this website and understand how it is used;
• Send service-related communications, such as updates on an enquiry or vacancy;
• Comply with our legal obligations, including under employment agency regulation.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Our lawful basis for processing

We rely on the following lawful bases under UK GDPR, depending on the context:

• Consent — for example, when you tick a checkbox agreeing to be contacted, or accept non-essential cookies.
• Contract — where processing is necessary to provide our recruitment services to you as a client or candidate.
• Legitimate interests — for example, responding to general enquiries, maintaining the security of our website, and direct marketing about relevant roles or services, balanced against your rights.
• Legal obligation — where we must retain or disclose data to comply with the law.

5. Who we share data with

We do not sell personal data. We may share data with:

• Employers, where you are a candidate and have agreed to be put forward for a specific role;
• Service providers who support our operations, such as website hosting, email delivery, form processing and IT support, under appropriate data processing agreements;
• Professional advisers, including legal, insurance and accountancy providers, where necessary;
• Regulators or authorities, where required by law.

6. How long we keep data

We retain personal data only for as long as necessary for the purposes it was collected, taking into account legal, accounting and regulatory requirements. General enquiry data is typically retained for up to 24 months from last contact unless a longer period is required. Candidate and placement records are retained in line with the periods set out in our Candidate Privacy Notice.

7. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including access controls, secure storage and staff awareness of data protection obligations. No method of transmission or storage is 100% secure, but we work to industry-appropriate standards.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure of your data in certain circumstances;
• Object to or restrict certain processing;
• Request data portability;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us using the details below. We will respond within one month, as required by law.

9. International transfers

Where any of our service providers store or process data outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, in line with UK GDPR requirements.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page shows when it was last revised. Significant changes will be highlighted on this website.

11. Contact us / complaints

If you have questions about this policy or how we handle your data, contact us at hello@joinworkbase.co.uk.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.