Last updated: 2 July 2026
Staffwell is committed to protecting the personal data of our candidates, clients, website users and business contacts. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all applicable data protection legislation.
This policy explains how Staffwell manages personal data and our commitment to handling information fairly, securely and transparently.
Staffwell will ensure that all personal data is:
Processed lawfully, fairly and transparently.
Collected for specified, legitimate purposes.
Limited to the information necessary for recruitment and staffing activities.
Accurate and kept up to date where reasonably possible.
Retained only for as long as necessary.
Stored securely and protected against unauthorised access, loss or misuse.
Depending on the services provided, we may collect and process:
Name and contact details
Address
Date of birth
Employment history
Qualifications and experience
CVs
Right to work documentation
National Insurance number
Driving licence details (where relevant)
Availability and work preferences
Client contact information
Assignment and placement history
Website usage information
We process personal data in order to:
Register candidates
Match candidates with suitable job opportunities
Provide recruitment and temporary staffing services
Introduce candidates to prospective employers
Verify identity and right to work
Meet legal and regulatory obligations
Communicate with candidates and clients
Manage business relationships
Improve our services
Staffwell processes personal data under one or more of the following lawful bases:
Consent
Performance of a contract
Compliance with a legal obligation
Legitimate interests
Where consent is required, it may be withdrawn at any time.
We may share personal information with:
Prospective employers
Payroll and employment providers
Compliance and right to work verification providers
Professional advisers
Government bodies or regulators where required by law
We will never sell personal data to third parties.
Staffwell takes appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure. Access to personal information is limited to those who require it to perform their role.
Personal data will only be retained for as long as necessary for recruitment, staffing, legal or regulatory purposes. Once no longer required, information will be securely deleted or anonymised.
Individuals have the right to:
Request access to their personal data.
Request correction of inaccurate or incomplete data.
Request erasure where appropriate.
Request restriction of processing.
Object to certain processing activities.
Request a copy of their data in a portable format where applicable.
Withdraw consent where processing relies on consent.
Lodge a complaint with the Information Commissioner’s Office (ICO).
Any suspected personal data breach will be investigated promptly. Where required by law, Staffwell will notify the Information Commissioner’s Office and affected individuals within the required timescales.
This policy may be updated from time to time to reflect changes in legislation or our business operations. The latest version will always be available on our website.
If you have any questions regarding this policy or how Staffwell processes personal data, please contact us at:
Email: hello@staffwell.co.uk