Who We Are
Crest Workforce Services Ltd is a private limited company registered in England and Wales. Our company number is 17185271 and our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Crest Workforce Services Ltd is the data controller for the personal information we collect and process.
If you have any questions about how we handle your personal data, you can reach us at:
Email: service@crestworkforce.com
Phone: +44 784 852 7521
Post: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
What This Policy Covers
This privacy policy explains what personal information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what your rights are in relation to it.
It applies to:
Businesses and individuals who enquire about or use our staffing and recruitment, commercial cleaning, or road freight transport services.
Job seekers and candidates who register with us through our job seekers portal or apply for roles we are filling.
Visitors to our website.
The Information We Collect
From clients and businesses:
When a business contacts us to enquire about or use our services, we may collect the name of the business, the name and contact details of the individual making the enquiry or managing the relationship, email addresses and telephone numbers, invoicing and payment information, information about your workforce requirements or service needs, and any other information you share with us in the course of our working relationship.
From job seekers and candidates:
When you register with us or apply through our portal, we may collect your full name and contact details including your address, email address, and telephone number, your work history and CV, information about your skills, qualifications, and availability, your right to work documentation, references from previous employers, your National Insurance number where required for payroll purposes, your bank account details where we are arranging payment, and in roles requiring a Disclosure and Barring Service check, the results of that check.
From website visitors:
When you visit our website, we may automatically collect information such as your IP address, the type of browser and device you are using, the pages you visit and the time you spend on them, and how you arrived at our website. This is collected through cookies and similar technologies. Please read our Cookie Policy for more information.
Why We Collect This Information and Our Legal Basis for Doing So
We only collect and use personal information when we have a lawful basis for doing so under UK GDPR. The legal bases we rely on are as follows.
To perform a contract or take steps at your request before entering a contract. When a client engages our services or a candidate registers with us, we need personal information to deliver the service, manage the relationship, process payments, and fulfil our obligations. Without this information, we cannot provide the service.
To comply with a legal obligation. As a UK-registered company, we have legal obligations around payroll, tax, right to work checks, and other regulatory requirements. Some personal information is collected and retained specifically to meet these obligations.
For our legitimate interests. We may use contact information to follow up on an enquiry, manage our client relationships, improve our services, and keep records of communications. We make sure our legitimate interests do not override the interests or rights of the individuals whose information we hold.
With your consent. In certain situations, such as sending you marketing communications about our services, we will ask for your consent before doing so. You can withdraw your consent at any time.
How We Use Your Information
For clients and businesses, we use your information to respond to enquiries and provide our services, manage service agreements and invoices, communicate with you about your requirements, keep records of the services we have delivered, and comply with our legal and regulatory obligations.
For job seekers and candidates, we use your information to assess your suitability for roles we are filling, match you with appropriate employment opportunities, carry out right to work and reference checks, process payments where applicable, and keep your profile active for future opportunities where you have agreed to this.
For website visitors, we use the information collected through cookies and analytics tools to understand how our website is being used and to improve its performance.
Who We Share Your Information With
We do not sell your personal information to third parties.
We may share your information with the following categories of recipients where necessary.
Client businesses, where you are a candidate we are placing and the client needs your details to arrange your placement.
Payroll and accountancy services, to process payments to temporary workers and manage our financial records.
Background check providers, where a role requires a Disclosure and Barring Service check or reference verification.
IT and software providers who help us run our systems and website, who are bound by data processing agreements.
Legal and regulatory authorities, where we are required to disclose information by law, such as to HMRC or in response to a court order.
Where we share your information with third parties who process it on our behalf, we make sure they handle it in line with data protection law and our own standards.
International Transfers
We are a UK-based company and we process your personal information within the United Kingdom. If at any point we need to transfer your data outside of the UK, we will only do so where there are appropriate safeguards in place in line with UK GDPR requirements.
How Long We Keep Your Information
We keep your personal information for as long as is necessary to fulfil the purpose for which it was collected, to meet our legal obligations, and to resolve any disputes or claims.
For clients and business contacts, we typically retain records for six years after the end of the commercial relationship, in line with the Limitation Act 1980 and HMRC requirements.
For job seekers who are successfully placed, we retain relevant records for the duration of the placement and for a period afterwards in line with employment law obligations.
For job seekers who are not placed, we retain your information for up to twelve months after your initial registration, unless you ask us to remove it sooner or you give us consent to keep it longer.
For website visitors, analytics and cookie data is retained in line with the timeframes set out in our Cookie Policy.
When information is no longer needed, we delete or securely destroy it.
Your Rights Under UK GDPR
You have the following rights in relation to your personal information.
The right to be informed about how we use your personal data, which this privacy policy provides.
The right of access. You can request a copy of the personal information we hold about you. This is called a Subject Access Request.
The right to rectification. If the information we hold about you is inaccurate or incomplete, you can ask us to correct it.
The right to erasure. In certain circumstances, you can ask us to delete your personal information. This right is not absolute and applies in specific situations defined under UK GDPR.
The right to restrict processing. You can ask us to limit how we use your information in certain circumstances.
The right to data portability. In certain circumstances, you can ask us to provide your personal information in a structured, commonly used, and machine-readable format.
The right to object. You have the right to object to us processing your information for direct marketing purposes. You also have a right to object to processing based on legitimate interests, though this right is not absolute.
Rights in relation to automated decision-making. We do not make decisions about individuals using solely automated processing. If this changes, we will update this policy and comply with our obligations under UK GDPR.
To exercise any of these rights, contact us using the details at the top of this policy. We will respond to your request within one month. If your request is complex or we receive a high volume of requests, we may extend this period by a further two months, in which case we will let you know.
We will not charge you for exercising your rights unless a request is clearly unfounded or excessive.
How to Make a Complaint
If you are unhappy with how we have handled your personal information, we encourage you to contact us first so we can try to resolve the issue.
If you remain unsatisfied, you have the right to make a complaint to the Information Commissioner’s Office, which is the UK’s data protection supervisory authority.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113
