PRIVACY POLICY

GestioStaff Limited (“GestioStaff”, “we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you interact with our website, apply to work with us, or engage our staffing services.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

GestioStaff Limited
86-90 Paul Street, London, EC2A 4NE
Company No: 16916364
Email: info@gestiostaff.com

We are the data controller responsible for your personal data.

If you have any questions about this policy or your rights, please contact us at info@gestiostaff.com.

You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO).

2. Who This Policy Applies To

This policy applies to:

  • Workers and candidates

  • Client and supplier contacts

  • Website visitors

  • Individuals submitting enquiry forms

3. Personal Data We Collect

We collect personal data that is necessary to operate our staffing business.

a) If You Submit a Website Form

  • Name

  • Email address

  • Phone number

  • Company name (if applicable)

  • CV or work history (for worker enquiries)

  • Any information you provide voluntarily

b) If You Apply or Work With Us

  • Identity and contact details

  • Date of birth (where required)

  • Right to work documentation

  • National Insurance number

  • Bank details

  • Assignment details and timesheets

  • Payroll and pension information

  • Emergency contact details

c) Special Category Data (Where Required)

We may process limited health or criminal record data where required for specific roles and permitted by law.

We only collect what is necessary.

4. How We Use Your Data

We use personal data to:

  • Assess suitability for roles

  • Match workers to assignments

  • Manage bookings and timesheets

  • Process payroll and pension contributions

  • Communicate shift information

  • Respond to enquiries

  • Comply with legal obligations

  • Protect our business and systems

We do not sell personal data.

5. Lawful Bases for Processing

We rely on one or more of the following lawful bases:

  • Contract – to manage assignments and pay workers

  • Legal obligation – for right to work checks and tax reporting

  • Legitimate interests – for business operations and service improvement

  • Consent – where required for marketing communications

  • Employment law obligations – for special category data

Where we rely on legitimate interests, we ensure your rights are not overridden.

6. Who We Share Data With

We may share personal data with:

  • Clients engaging our staff

  • Payroll and pension providers

  • Professional advisers

  • Technology providers, including our workforce platform provider Ubeya

  • Government authorities where required (e.g. HMRC, Home Office)

All service providers are contractually required to protect personal data.

7. International Transfers

If personal data is transferred outside the UK, we use appropriate safeguards such as UK adequacy regulations or approved contractual clauses.

8. Data Retention

We retain personal data only for as long as necessary, including:

  • Payroll and assignment records: typically up to 6 years

  • Right to work documentation: duration of engagement + 2 years

  • Unsuccessful candidate records: typically 6–12 months

  • Website logs: generally 3–12 months

Where required for legal claims or regulatory matters, retention may be extended.

9. Data Security

We implement appropriate technical and organisational measures including:

  • Secure systems and encrypted connections

  • Restricted access controls

  • Confidentiality obligations

  • Security monitoring

10. Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request erasure (in certain circumstances)

  • Restrict or object to processing

  • Request data portability (where applicable)

  • Withdraw consent (where processing is based on consent)

To exercise your rights, email info@gestiostaff.com. We may need to verify your identity.

11. Cookies

Our website uses essential cookies and may use analytics cookies where enabled. You can manage your preferences via our cookie banner.

12. Updates

We may update this Privacy Policy periodically. The latest version will always be available on our website.