1. Introduction
Actionus (“we”, “us”, “our”) provides workforce support and service‑delivery resourcing. We act as a data controller for the purposes of UK GDPR and the Data Protection Act 2018.
This Privacy Notice explains how we collect, use, store, and protect personal data relating to clients, workers, contractors, and enquiries.
2. The data we collect
We may collect:
- Identity and contact details
- CV and career history
- Work eligibility documents
- Assignment and compliance information
- Client contact information
- Communications with Actionus
- Payment details (contractors only)
3. How we collect data
Data is collected through:
- Direct contact (email, phone, website forms)
- CV submissions
- Client enquiries
- Onboarding and compliance processes
- Third‑party providers (e.g., payroll, background screening)
4. Lawful basis for processing
We process personal data under:
- Legitimate interests (resourcing and operational delivery)
- Contract (to perform obligations with clients or workers)
- Legal obligation (right‑to‑work checks, tax compliance)
- Consent (where explicitly required)
5. How we use personal data
We use data to:
- Provide workforce support and resourcing services
- Assess suitability for assignments
- Communicate with clients and workers
- Manage onboarding and compliance
- Issue contracts and documentation
- Process payments (contractors)
- Maintain business records
- Meet legal and regulatory obligations
6. Sharing your data
Data may be shared with:
- Clients
- Payroll/umbrella companies
- Background screening providers
- Professional advisers
- IT and cloud service providers
- Regulatory bodies where required
We do not sell personal data.
7. International transfers
Where data is stored or processed outside the UK, appropriate safeguards (e.g., SCCs) are used.
8. Data retention
Retention periods:
- Candidate/contractor data: up to 6 years
- Client data: up to 6 years
- Financial records: 6 years
- Enquiries: 12 months
9. Your rights
You may request:
- Access
- Correction
- Deletion
- Restriction
- Portability
- Objection
- Withdrawal of consent (where applicable)
Requests can be made by email.
10. Security
We use secure systems, encryption, access controls, and multi‑factor authentication.
11. Complaints
Complaints may be made to Actionus or the ICO.
12. Contact details
Email: dpo@actionus.com