Aviserv Privacy Policy

Who this applies to: job candidates, temporary workers, prospective employees, referees, clients and prospects, vendors/suppliers, and visitors to our websites (including any forms we host).

1) Who we are (the “controller”)

Aviserv Ltd.
22 The Winning Box, Station Rd, Hayes, UB3 4DX, United Kingdom
Phone: +44 20 8759 5903
Email: info@aviserv.co.uk

If you have privacy questions, email info@aviserv.co.uk with the subject “Privacy”.
(If you appoint a Data Protection Officer in future, add their contact here.)

If registered with the UK Information Commissioner’s Office (ICO), add your registration number here.

2) What data we collect

A) Identity & contact

• Name, title, date of birth, contact details (email, phone, address).

B) Candidate & work data

• CV, skills, career history, qualifications, right-to-work status, references, interview notes, preferences (roles, locations, pay), performance/assignment feedback.

C) Compliance & airport/security checks (where applicable)

• Documents and results for right-to-work, referencing, GSAT, airside ID, and CAA/CRC/CTC or similar checks required by law or airport authorities.
• Copies of ID documents required to complete those checks.

D) Payroll & finance (for temporary workers/contractors)

• NI number, tax details, bank details, timesheets, rates, expenses.

E) Website & communications

• Forms you submit, emails you send us, call notes.
• Device/usage data (IP address, pages viewed, cookies/analytics—see Cookies section).

F) Special category & criminal data (only when necessary)

• Health/fitness-to-work details you provide for shift safety or adjustments.
• Criminal records information only where required for regulated/airport roles.
  We handle this under UK GDPR and the Data Protection Act 2018 conditions.

3) How we collect it

• Directly from you (site forms, email, phone, in person, at events).
• From third parties you authorise: referees, former employers, background-check providers, training/certification bodies, airport authorities.
• Public sources: professional profiles (e.g., LinkedIn), job boards where you’ve made your CV available.
• Website analytics and cookies (see Cookies).

4) Why we use your data & our lawful bases

PurposeExamplesLawful basisRecruitment servicesSourcing, screening, interviews, shortlists, matching to roles, arranging assignments, onboardingLegitimate interests (to run a recruitment business) and Contract (pre-contract steps/placement)Compliance & securityRight-to-work, GSAT, airside/airport checks, maintaining audit trailsLegal obligation; for special/criminal data: Substantial public interest under DPA 2018 where applicablePayroll & vendor managementPaying workers, invoicing clients, HMRC recordsLegal obligation and ContractCommunicationsService updates, interview logistics, account/adminLegitimate interests or ContractMarketing (B2B)Newsletters, insights, eventsConsent (where required) or Legitimate interests (opt-out anytime)Safety & qualityIncident reporting, safeguarding, training recordsLegal obligation, Legitimate interests, Vital interests (rare)Analytics & site improvementUnderstanding usage, preventing abuseLegitimate interests

Automated decision-making & profiling:
We may use filtering/matching in our ATS to prioritise candidates for roles. Decisions with legal or similarly significant effects are not made solely by automation.

5) Who we share data with

• Clients/hiring companies (to consider you for roles).
• Background-check and compliance providers, airport/aviation bodies and security-vetting authorities (where required by law/contract).
• Service providers (ATS, hosting, email, IT security, payroll/umbrella, analytics) under contract and subject to confidentiality.
• Regulators and authorities (e.g., HMRC, law enforcement) where legally required.
• Professional advisers (legal, accounting, insurance) when necessary.

We do not sell your personal data.

6) International transfers

Some providers may process data outside the UK. When that happens, we use lawful safeguards such as the UK IDTA or UK Addendum to EU Standard Contractual Clauses, plus risk assessments and security measures.

7) How long we keep data (retention)

We keep data only as long as needed for the purposes above or to meet legal/accounting/audit requirements. Typical periods (you can tailor these):

• Candidate profiles/CVs (no recent activity): up to 24 months from last contact, then we refresh or delete.
• Placed workers/assignment records: up to 6 years after the last assignment (limitation and tax rules).
• Right-to-work & airside/security files: as required by law/airport rules and typically up to 6 years after the assignment ends.
• Payroll/invoices/tax: 6 years (HMRC).
• Marketing contacts: until you opt out or we determine the data is out of date.
• Website analytics cookies: per cookie lifetime (see Cookies).

8) Your rights (UK GDPR)

You can:

• Access your data and get a copy
• Correct incomplete or inaccurate data
• Erase data (where we have no overriding lawful reason to keep it)
• Restrict or object to certain processing (including direct marketing)
• Port data you provided to us, where technically feasible
• Withdraw consent at any time, where consent is our basis

To exercise rights, email info@aviserv.co.uk. We’ll respond within one month (extensions possible for complex requests).

You can also complain to the ICO: ico.org.uk or 0303 123 1113.
We’d appreciate the chance to resolve issues first.

9) Cookies & similar technologies

We use cookies to:

• make the site work (strictly necessary),
• remember preferences,
• measure performance/traffic (analytics),
• improve security.

You can manage cookies in your browser. Where required, we’ll ask for consent via a banner. For details (names, lifetimes, providers), see our Cookie Policy (add link).

10) Security

We use appropriate technical and organisational measures, including access controls, encryption in transit, MFA for admin systems, staff training, vendor due-diligence and contracts. No method is 100% secure, but we work to prevent unauthorised access, use, alteration or loss. We follow legal processes for breach notification where applicable.

11) Children

Our services target adults. We don’t knowingly collect data from children. If a role involves under-18s (e.g., apprenticeships), we’ll apply extra safeguards and obtain appropriate consents.

12) Third-party links

Our site may link to third-party websites. Those sites have their own privacy policies—we’re not responsible for them.

13) Changes to this notice

We may update this notice from time to time. We’ll post the latest version here and change the Effective date above. For significant changes, we may email you or show a notice on the site.

14) How to contact us

Questions, requests, or complaints about this notice or your data:

• Email: info@aviserv.co.uk
• Post: Privacy, Aviserv Ltd., 22 The Winning Box, Station Rd, Hayes, UB3 4DX, UK
• Phone: +44 20 8759 5903