Legal
Privacy Policy
How Staff Assured collects, uses and protects your personal data
Last updated: 19 October 2026
If you work through us or apply to, our privacy notice for workers and applicants explains in full how we use your information.
1. Who we are
Staff Assured Limited (company number 13279017) is the data controller for the personal data described in this policy.
- Address: Thakrar House, 113 Woolwich High Street, London SE18 6DN
- Phone: 020 8054 1028
- Email: HR@StaffAssured.co.uk
- ICO registration number: ZB480666
2. The personal data we collect
Depending on your relationship with us, we may collect:
Candidates / workers
- Identity and contact details (name, address, email, phone).
- Right-to-work information and documents (passport, visa, share code).
- CV, employment history, qualifications, references.
- Details needed to place and pay you (National Insurance number, bank details, payroll and timesheet data, availability, location, pay rates).
- Where relevant to a role, additional checks (e.g. SIA licence details).
Our privacy notice for workers and applicants gives the full detail.
Clients and prospective clients
- Business contact details and information about your staffing requirements.
Website visitors and enquirers
- Information you submit through our enquiry and application forms.
- Messages you send via our website chat assistant or WhatsApp.
- Technical data such as IP address and cookie data (see Cookies below).
3. How we collect it
Directly from you (forms, phone, email, WhatsApp, our website chat assistant), from job boards and recruitment partners, and from referees you nominate.
4. Why we use it and our lawful bases
| Purpose | Lawful basis |
|---|---|
| To provide recruitment and workforce services and to place and pay workers | Performance of a contract and legitimate interests in running our business |
| To carry out right-to-work and compliance checks | Legal obligation |
| To respond to enquiries and provide client services | Legitimate interests / contract |
| To send you relevant updates where you have asked us to | Consent |
| To meet tax, employment and other legal duties | Legal obligation |
5. Who we share it with
We only share personal data with HMRC, where the law requires it. We do not sell your personal data.
Others see or hold personal data only as part of our service, and only what they need:
- Clients see the names, shifts and timesheets of the workers at their sites.
- Our bank, to pay workers, and NEST, our workplace pension provider, for employed workers.
- Service providers who store or process data for us under contract and only on our instructions: Microsoft 365 / OneDrive (document storage), Make.com (workflow automation behind our website), Tripetto (form handling), Meta/WhatsApp (messaging), and our payroll and workforce management software.
6. International transfers
Where any provider processes data outside the UK, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses).
7. How long we keep it
We keep personal data only for as long as we need it. Where the law sets a minimum period, we keep records for at least that long:
- Records we must keep as an employment agency and employment business under the Conduct of Employment Agencies and Employment Businesses Regulations 2003 — at least one year.
- Right to work check evidence — two years after your employment or assignment with us ends.
- Payroll, tax and National Insurance records — at least three years after the end of the tax year they relate to. We generally keep six.
- Pension auto-enrolment records — six years.
- Working time and shift records, including attendance location data — two years.
- Applications that don’t lead to work — see our privacy notice for workers and applicants.
You can ask us to delete your details at any time and we will do so unless we are legally required to keep them. We are formalising a written retention schedule. If you want to know how long we will hold a specific record, please contact us using the details in section 1.
8. Your rights
Under UK data protection law you have the right to access, correct, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any right, email HR@StaffAssured.co.uk. We’ll reply within one month.
9. Cookies
Our website uses cookies that are essential for it to work. With your agreement, it may also use preferences, statistics and marketing cookies. When you first visit, our cookie banner lets you accept or deny these, or choose by category, and you can change your choice at any time with Manage consent at the bottom of the page.
Our Cookie Policy lists every cookie this site uses, what it does and how long it lasts.
10. Complaints
If you’re unhappy with how we’ve handled your personal data, please tell us first so we can put it right: email HR@StaffAssured.co.uk. We’ll acknowledge your complaint within 30 days and let you know the outcome without undue delay.
If you’re still not satisfied, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.