You may provide your personal information directly to us, for example, through an application or registration form or via our website. Alternatively, we may collect your information from other sources, such as job boards. We are required to have a lawful basis to process your personal data. This privacy notice explains how we process your data to provide work-finding services and information about relevant opportunities.

1. Collection and Use of Personal Data

a. Purpose and Legal Basis for Processing

Blueprint Recruit Ltd collects and processes your personal data (including sensitive data) to provide work-finding services. This includes:

• Contacting you about job opportunities.
• Assessing your suitability for roles.
• Updating our databases.
• Putting you forward for job opportunities.
• Processing payments to you.
• Managing and improving our services and relationships with you and our clients.

We may also process your data to comply with legal obligations, detect and report crime, and conduct internal audits to ensure compliance with industry standards.

The legal bases for processing your personal data include:

• Your consent
• Legitimate interests
• Compliance with a legal obligation
• Fulfilment of contractual obligations

b. Legitimate Interests

We process your personal data based on legitimate interests where it is reasonable, and where it aligns with your expectations. These interests include:

• Maintaining accurate records of work-seekers.
• Contacting you to obtain necessary consent.
• Providing work-finding services, including sharing your details with clients interested in your profile.
• Sharing information about similar services or roles you have previously used.
• Referring your information to debt collection agencies, if necessary.

c. Data Recipients

Your personal data may be shared with the following:

• Clients seeking candidates.
• Current or prospective employers for reference purposes.
• Umbrella companies.
• Insurers and legal advisers.
• Public information sources and third-party organizations for suitability checks, such as DBS, Companies House, DVLA, and professional bodies.
• Government or law enforcement agencies (e.g., Police, HMRC, Home Office).
• Other parties, as requested by you.

d. Statutory/Contractual Requirement

Providing your personal data may be required by law, contractual obligations, or necessary to enter into a contract. Failure to provide the required data may result in:

• Delays in payment.
• Inability to introduce or supply you to clients.

2. Data Retention

We will retain your personal data only for as long as necessary to provide our services and comply with legal obligations. For example:

• Work-seeker records must be retained for at least one year from the date they are created or last used.
• Payroll and tax-related records must be retained for the periods specified by HMRC and other relevant legislation.

Where we process your data based on consent, we will seek renewal of that consent upon expiry. If consent is not granted, we will cease processing your data.

3. Your Rights

You have the following rights regarding your personal data:

• Right to be informed about how your data is processed.
• Right of access to your data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure of your data, under certain circumstances.
• Right to restrict processing of your data.
• Right to data portability, under specific conditions.
• Right to object to processing based on legitimate interests.
• Right not to be subjected to automated decision-making or profiling.
• Right to withdraw consent at any time.

To exercise these rights or for concerns about data accuracy, please contact our Data Protection Officer at [email protected]

In cases where legal or official reasons require further processing, we will limit data use to what is strictly necessary.

4. Complaints or Queries

If you have questions or concerns about this privacy notice or our data practices, please contact our Data Protection Officer at [email protected]

You also have the right to report concerns to the Information Commissioner’s Office (ICO) at 0303 123 1113 or https://ico.org.uk/concerns/. If your data is processed outside the UK, you may contact the relevant supervisory authority.