Privacy Policy

Privacy Policy (UK GDPR Compliant)

GLBRIGHTSPARK Recruitment Construction Agency

Last updated: 6 May 2026


  1. GDPR COMPLIANCE STATEMENT (IMPORTANT)

GLBRIGHTSPARK Recruitment Construction Agency fully complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to protecting your personal data, ensuring transparency in how it is used, and respecting your rights as a data subject.

This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our recruitment services or website.


  1. WHO WE ARE

GLBRIGHTSPARK Recruitment Construction Agency (“we”, “us”, “our”) is a UK-based recruitment business specialising in construction and skilled labour placement.

We act as a data controller for the personal data we collect from candidates, clients, and website users.


  1. INFORMATION WE COLLECT

We collect only data necessary to provide recruitment and workforce services.

Candidates / Workers:

Full name

Contact details (phone, email, address)

CVs and employment history

Qualifications and certifications (e.g. CSCS, trade cards)

Right to work documentation (passport, visa, share code)

National Insurance number

Bank details and payroll information (if applicable)

DBS checks or health/safety information (where required)

References and employment feedback

Clients / Employers:

Company name

Contact details

Job requirements and site information

Hiring preferences

Website Users:

IP address

Device and browser information

Cookies and usage data


  1. HOW WE USE YOUR DATA (GDPR PURPOSE LIMITATION)

We only use your data for legitimate recruitment and business purposes, including:

Matching candidates with job opportunities

Providing recruitment and workforce services

Verifying identity, qualifications, and right to work

Processing payroll and payments

Communicating with candidates and clients

Legal and compliance obligations (HMRC, Home Office)

Improving our services and website performance


  1. LAWFUL BASIS FOR PROCESSING (GDPR ARTICLE 6)

We process personal data under the following lawful bases:

Contract – to provide recruitment services

Legal obligation – employment, tax, and immigration law compliance

Legitimate interests – running and improving our recruitment business

Consent – where required (e.g. marketing communications)


  1. HOW WE SHARE YOUR DATA

We may share your data with:

Employers and hiring clients

Payroll providers and umbrella companies

Compliance and verification services

Government authorities (HMRC, Home Office) where legally required

IT and service providers supporting our systems

All third parties are required to handle your data securely and in compliance with UK GDPR.


  1. DATA RETENTION

We only keep personal data for as long as necessary:

Candidate data: up to 24 months of inactivity

Payroll records: up to 6 years (legal requirement)

Client records: up to 6 years after last engagement

You may request deletion of your data, subject to legal obligations.


  1. YOUR GDPR RIGHTS

Under UK GDPR, you have the right to:

Access your personal data

Correct inaccurate data

Request deletion of your data

Restrict or object to processing

Data portability

Withdraw consent at any time

To exercise these rights, contact us using the details below.


  1. DATA SECURITY (GDPR ARTICLE 32)

We take appropriate security measures to protect your data, including:

Restricted access to personal data

Secure systems and password protection

Staff training on data protection

Regular review of security practices

However, no online system is 100% secure.


  1. COOKIES

We use cookies to:

Improve website performance

Analyse traffic and user behaviour

Enhance user experience

You can disable cookies through your browser settings.


  1. INTERNATIONAL DATA TRANSFERS

We generally store data within the UK or EEA. If data is transferred outside these areas, appropriate safeguards are applied.


  1. CHILDREN’S DATA

We do not knowingly collect data from individuals under 16 years of age.


  1. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.


  1. CONTACT US

GLBRIGHTSPARK Recruitment Construction Agency

Email: info@glbrightspark.com Phone: +447950243536 Website: [Insert Website URL]