Legal
Privacy Policy
1. Introduction
Actionus (“we”, “us”, “our”) provides workforce support and service-delivery resourcing. We act as a data controller for the purposes of UK GDPR and the Data Protection Act 2018.
This Privacy Notice explains how we collect, use, store, and protect personal data relating to clients, workers, contractors, and enquiries.
2. The data we collect
- Identity and contact details
- CV and career history
- Work eligibility documents
- Assignment and compliance information
- Client contact information
- Communications with Actionus
- Payment details (contractors only)
3. How we collect data
- Direct contact (email, phone, website forms)
- CV submissions
- Client enquiries
- Onboarding and compliance processes
- Third-party providers (e.g., payroll, background screening)
4. Lawful basis for processing
- Legitimate interests (resourcing and operational delivery)
- Contract (to perform obligations with clients or workers)
- Legal obligation (right-to-work checks, tax compliance)
- Consent (where explicitly required)
5. How we use personal data
- Provide workforce support and resourcing services
- Assess suitability for assignments
- Communicate with clients and workers
- Manage onboarding and compliance
- Issue contracts and documentation
- Process payments (contractors)
- Maintain business records
- Meet legal and regulatory obligations
6. Sharing your data
- Clients
- Payroll/umbrella companies
- Background screening providers
- Professional advisers
- IT and cloud service providers
- Regulatory bodies where required
We do not sell personal data.
7. International transfers
Where data is stored or processed outside the UK, appropriate safeguards (e.g., SCCs) are used.
8. Data retention
- Candidate/contractor data: up to 6 years
- Client data: up to 6 years
- Financial records: 6 years
- Enquiries: 12 months
9. Your rights
- Access
- Correction
- Deletion
- Restriction
- Portability
- Objection
- Withdrawal of consent (where applicable)
Requests can be made by email.
10. Security
We use secure systems, encryption, access controls, and multi-factor authentication.
11. Complaints
Complaints may be made to Actionus or the ICO.
12. Contact details
Email: dpo@actionus.com

