Award Employment Ltd is committed to protecting the personal data of all individuals we interact with, including agency workers, candidates, clients, and other business contacts. This Privacy Notice explains how we collect, use, store, share, and dispose of personal data in accordance with the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).
It also explains your rights as a data subject and how you can exercise them. This Notice applies to all personal data processed in connection with our recruitment services, employment services, and business activities.
For further details on our internal practices, including data retention, please contact our team at
businesssupport@awardemployment.com
Award Employment Ltd is the data controller and data processor for the purposes of data protection legislation. Authorised staff members may access information to carry out legitimate business purposes.
We process personal data to provide work-finding and recruitment services, ensure candidates are suitable for vacancies, comply with legal obligations, and maintain high standards of service delivery.
o Client organisations: To consider candidates for roles. We have agreements to ensure
confidentiality.
o Agency workers: To facilitate recruitment services, such as interview arrangements.
o Auditors and inspectors: Including regulatory and client audits.
o Other third parties: Only with your consent or for legitimate business purposes.
Individuals have the following rights regarding their personal data:
periods, and legal basis for processing.
in our recruitment process.
Agency Workers/Candidates:
Name, contact details, right to work documentation, skills, experience, qualifications, next of kin, work seeking preferences, reasonable adjustments, NI number, bank details, proof of address, references, health information (where relevant), criminal convictions (where relevant).
Staff Members:
Name, contact details, right to work documentation, skills, experience, qualifications, reasonable adjustments, bank details, NI number, next of kin, driving licence, passport/birth certificate, training records, performance appraisals, disciplinary/grievance records, personnel file.
External Business Contacts:
Name, job title, contact details, and professional information (publicly available or necessary for legitimate business
purposes).
Your data is used to:
o Administer recruitment, employment, payroll, benefits, and training.
o Conduct disciplinary, grievance, or complaints investigations.
o Comply with employment, health & safety, tax, or other legal obligations.
o Monitor diversity and equal opportunities.
o Protect the Company, employees, clients, and candidates.
o Provide references or respond to verification requests.
o Business communication and marketing.
We may share personal data with:
o Group companies or approved service providers.
o Legal or regulatory authorities as required.
o Others with your consent.
Third parties must process your data securely and only for intended purposes. Data is not transferred outside the European Economic Area without appropriate safeguards.
We retain personal data only for as long as necessary and in line with legal obligations.
Data that is no longer required is securely deleted, anonymised, or destroyed.
In addition to GDPR, Award Employment complies with the Privacy and Electronic Communications Regulations (PECR), particularly regarding:
▪ Electronic marketing (e.g., emails, texts, and phone calls)
▪ Use of cookies and similar technologies
▪ Security and confidentiality of electronic communications
These regulations ensure the privacy of users in electronic interactions and enhance data security.
You have the right to request access to the personal data we hold about you. Please be as specific as possible about the information you require. We will respond within one month, extended by up to a further two months if the request is complex.
To submit a SAR or for any queries about your rights, contact the team:
Email: businesssupport@awardemployment.com
We take the protection of personal data seriously. Any suspected breaches must be reported immediately to us. High-risk breaches will be reported to the ICO within 72 hours, and affected individuals will be informed where legally required.
Individuals should ensure their personal data is accurate, up to date, and used only for authorised purposes. Failure to comply with data protection obligations may result in actions being taken.
We are committed to protecting your personal data and handling it safely, responsibly, and in compliance with GDPR.
For questions, concerns, or guidance about this Privacy Notice or your data rights, please contact: