4Leisure Recruitment - Privacy Policy

Privacy Policy

4Leisure Recruitment Ltd

1. Introduction

4Leisure Recruitment Ltd (“we”, “us”, “our”) is committed to protecting the privacy and personal data of all individuals whose information we process. This Privacy Policy explains how we collect, use, store, and share personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to:

  • Candidates (permanent roles)
  • Temporary workers
  • Clients and business contacts
  • Employees

2. Who We Are

Data Controller: 4Leisure Recruitment Ltd
Registered Address: Boundary House, Cricket Field Road, Uxbridge, UB8 1QG
Email (Data Protection / DSAR): DSAR@4leisurerecruitment.co.uk

3. How We Collect Personal Data

We collect personal data through:

  • Direct applications via our website or job boards
  • CVs made publicly available on job boards
  • Temporary worker onboarding processes
  • Client enquiries and business communications
  • Employment administration
  • Website usage (cookies and analytics)

4. Lawful Bases for Processing

We process personal data using one or more of the following lawful bases under UK GDPR:

  • Legitimate interests – to provide recruitment and staffing services
  • Contract – to place candidates and manage assignments or employment
  • Legal obligation – payroll, tax, right to work, employment law
  • Consent – for marketing communications where required
  • Employment law obligations – processing employee and worker data
  • Substantial public interest – safeguarding and DBS checks where applicable

5. Data Security and Processors

We take appropriate technical and organisational measures to protect personal data. Data may be processed by trusted third parties acting as data processors, including:

  • Applicant Tracking and CRM systems
  • Payroll and compliance providers
  • Secure onboarding and document-signing platforms
  • IT and website service providers

All third parties are required to meet UK GDPR standards through contractual agreements.

6. Retention of Personal Data

We retain personal data only for as long as necessary, including:

  • Candidates (not placed): up to 24 months
  • Temporary workers: up to 6 years after last assignment
  • Client contacts: reviewed periodically
  • Employees: typically 6 years after employment ends

Records are reviewed regularly and securely deleted when no longer required.

SECTION A – Candidates (Permanent Recruitment)

A1. Personal Data We Collect

  • Name and contact details
  • CVs, employment history, qualifications, skills
  • Role preferences and salary expectations
  • Right to work information
  • References
  • Limited health data for reasonable adjustments (where applicable)

A2. How We Use Candidate Data

  • Match you to suitable permanent roles
  • Progress applications and contact you about opportunities
  • Share anonymised or agreed details with prospective employers
  • Meet legal or regulatory requirements

Your contact details are not shared without your knowledge.

SECTION B – Temporary Workers

B1. Additional Data We Collect

In addition to candidate data, we may collect:

  • Date of birth and National Insurance number
  • Bank details and payroll information
  • Timesheets and assignment records
  • Right to work documentation
  • DBS information (if legally required)
  • Health information (only where lawful and necessary)

B2. How We Use Temporary Worker Data

  • Manage and administer assignments
  • Process payroll, tax, and HMRC submissions
  • Manage timesheets and client reporting
  • Comply with employment, safeguarding, and legal obligations

Data shared with clients or master vendors is limited to what is necessary.

SECTION C – Clients and Business Contacts

C1. Data We Collect

  • Name
  • Job title
  • Work email address
  • Work telephone number
  • Company details

C2. Purpose and Lawful Basis

We process this data to:

  • Provide recruitment and staffing services
  • Manage contracts and relationships
  • Respond to enquiries
  • Share relevant service updates

Processing is based on legitimate interests and/or contract. You may opt out of non-essential communications at any time.

SECTION D – Employees

D1. Employee Data We Collect

  • Personal and contact details
  • Payroll, tax, pension, and benefits data
  • Right to work documentation
  • Performance, training, and appraisal records
  • Health and absence records

D2. Purpose and Lawful Basis

Employee data is processed to:

  • Administer employment contracts
  • Meet payroll, tax, and pension obligations
  • Comply with employment and health and safety law

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (where applicable)
  • Restrict or object to processing
  • Data portability (where applicable)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made to DSAR@4leisurerecruitment.co.uk. Identity verification will be required.

8. Website, Cookies, and Analytics

Our website uses cookies to improve performance and user experience, including analytics cookies. Cookie preferences are managed via our website and browser settings.

9. Marketing

We may send marketing communications where permitted by law. You can withdraw consent or opt out at any time using unsubscribe links or by contacting us.

10. Complaints

If you have concerns about how your data is handled, please contact us first. You also have the right to complain to the ICO.

11. Changes to This Policy

This policy is reviewed regularly and updated as required to reflect legal or operational changes.

Last Review: April 2026