Data Protection & Governance

Privacy Notice

This Privacy Notice outlines how Emerald247 collects, processes, and safeguards personal data in accordance with the UK GDPR and the Data Protection Act 2018.

Download Official PDF Policy
Last Updated: January 2026 UK GDPR & DPA 2018 Compliant Data Controller: Emerald247

1. Introduction & Scope

Emerald247 ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect and use personal information about you during and after your relationship with us as a job applicant, registered candidate, or website visitor.

Emerald247 acts as a Data Controller in respect of the personal data provided to us for work-finding and staffing services.

2. Information We Collect

To deliver professional recruitment services across our key sectors (Education, Healthcare, Construction, Hospitality, Industrial, Cleaning), we collect and process:

  • Contact Information: Full name, residential address, telephone numbers, and email address.
  • Employment & Career History: Curriculum Vitae (CV), employment history, qualifications, professional memberships (e.g. TRA, NMC, GMC, SIA, CSCS), and references.
  • Identification & Right to Work: Passport, birth certificate, biometric residence permit, share codes, and national insurance number.
  • Vetting Data: Enhanced DBS certificates, criminal conviction declarations, and safeguarding checks where legally required for regulated activity.
  • Payroll Details: Bank account details, tax code, P45/P60, and UTR numbers for CIS registered operatives.

3. Lawful Basis for Processing

We process your personal information under the following lawful bases defined by Article 6 of the UK GDPR:

  • Contractual Necessity: To take steps at your request to find you suitable work assignments and to administer candidate contracts.
  • Legal Obligation: To comply with UK employment laws, Right to Work legislation, Conduct of Employment Agencies Regulations, tax laws (HMRC), and safeguarding regulations.
  • Legitimate Interests: To manage our recruitment operations, enhance service delivery, and maintain business relationships.
  • Explicit Consent: For marketing communications and optional candidate services where consent is explicitly provided.

4. Data Sharing & Third Parties

Your data may be shared with trusted third parties strictly for recruitment fulfillment:

  • Prospective hiring employers and client organisations who have vacancies matching your profile.
  • Government bodies and vetting agencies including the Disclosure and Barring Service (DBS), HMRC, and TRA.
  • Approved payroll and IT software suppliers who adhere to strict data security standards.

5. Data Retention & Security

We maintain appropriate physical, electronic, and procedural safeguards to prevent unauthorized access or loss of personal data. Candidate files are retained for the duration of your active registration plus statutory retention periods (typically 6 years following the end of work for HMRC tax and compliance audits).

6. Your Individual Rights

Under UK data protection law, you have specific rights:

  • Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure: Request deletion of your data where statutory retention obligations do not apply.
  • Right to Restrict or Object: Restrict processing or object to direct marketing communications.

Data Protection Officer (DPO) Contact

To exercise any of your data rights or make an enquiry, please contact our Data Protection Team at privacy@emerald247.co.uk or write to: Emerald247 Head Office, 41 Tryfan Close, Ilford, United Kingdom, IG4 5JY.