Privacy & Data Protection Notice
AVENHOLT complies with the UK Data Protection Act 2018 and UK GDPR. Candidate records are maintained securely in isolated encrypted storage.
1. Data Controller Identification
AVENHOLT RECRUITMENT & STAFFING LTD (Company Number 17500448), registered at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, acts as Data Controller under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 for all personal data collected through this platform.
2. Categories of Data Collected
We collect and process personal data strictly required to assess candidate suitability for skilled employment in the United Kingdom:
- Candidate Identity: Full legal name, date of birth, nationality, passport details, contact address, email, and telephone.
- Professional & Academic Credentials: Curricula vitae, employment history, degrees, transcripts, UK ENIC / Ecctis comparability records, and professional registrations (e.g. GMC, NMC).
- Statutory Verification Records: Secure English Language Test (SELT) certificates, criminal record certificates (DBS / overseas police checks), and Right to Work documentation.
3. Lawful Basis for Processing
Data processing is conducted strictly under the following lawful bases:
- Contractual Performance (Article 6(1)(b) UK GDPR): To facilitate candidate representation and vacancy matching requested by you.
- Legal Obligation (Article 6(1)(c) UK GDPR): Maintaining statutory audit records under the Employment Agencies Act 1973 and verifying Right to Work eligibility.
- Legitimate Interests (Article 6(1)(f) UK GDPR): Operating and protecting our platform against fraud and security breaches.
4. Vault Security & Storage Isolation
Candidate verification documents are retained in a dedicated, private encrypted filesystem (storage/app/private/documents). They are never publicly reachable via web browsers and are accessible strictly by authorized case officers and client hiring panels via authenticated binary session gates.
5. Your Data Protection Rights
Under UK GDPR, you retain the right to request access to your personal data, request correction of inaccurate data, request erasure, object to processing, or request data portability. To exercise any right, submit an inquiry to compliance@avenholt.co.uk.
