Company Name: Autotech Recruit Limited (‘the Company’)
Company Contact Details: Jack Salsbury – Head of IT & Information Security (Data Protection Officer). GDPR@autotechrecruit.co.uk
Documeny DPSA: Privacy Notice
Topic: Data Protection
Date updated: May 2026
Version: 6
The Organisation
Autotech Recruit Limited (07463246) (including Autotech Academy) and Autotech Training Limited (13192579) (including Autotech Connect) are wholly owned subsidiaries of Autotech Group Limited (13193017).
Autotech Recruit Limited
Autotech Recruit Ltd is a recruitment business (trading as both Autotech Recruit and Autotech Academy) which provides work-finding services to its clients and work-seekers. The Company must process personal data (including special category personal data) so that it can provide these services – in doing so, the Company acts as a data controller.
You may give your personal details to the Company directly, such as on an application or registration form or via our website, or through correspondence (email, telephone or video call) or we may collect them from another source such as a jobs board, client referral or publicly available professional profile. The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement.
The sources from which we may collect personal data indirectly include: employment and jobs boards (such as industry-specific job sites), client referrals, and publicly accessible professional profiles such as LinkedIn. Some of this information may therefore originate from publicly accessible sources.
Where personal data is collected indirectly, the categories of data we typically obtain include: name and contact details, employment history and work experience, professional qualifications and certifications, and professional profile information.
We do not require or intentionally process special category personal data as part of our recruitment services. Please do not include information relating to your health, ethnicity, religious beliefs or other special category data in applications or correspondence unless specifically requested.
1. Collection and use of personal data
a. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services.
We rely on the following lawful bases under UK GDPR, depending on the activity:
- Legitimate interests, for matching candidates to suitable roles, managing recruitment relationships, and communicating with work-seekers and clients on behalf of the brands this notice serves.
- Legal obligation, where processing is required to comply with employment law, the Conduct of Employment Agencies and Employment Businesses Regulations 2003, right-to-work verification, tax and payroll obligations, or other applicable regulatory requirements.
- Contract, where processing is necessary to enter into or perform a contract with you, including the terms under which work-finding services are provided.
- Consent, where required (for example, for optional communications, retaining your details beyond the standard period, or where no other lawful basis applies).
b. Legitimate interest
Where the Company has relied on a legitimate interest to process your personal data our legitimate interests is/are as follows:
In order to provide work-finding and recruitment services on a temporary or permanent basis, we need to process your personal data to match you with suitable opportunities and ensure compliance with our terms and conditions and applicable legislation.
c. Recipients of data
The Company will process your personal data and sensitive personal data with the following recipients:
- Your designated umbrella payment company or your own limited company
- Clients of Autotech Recruit Limited
We may also share personal data with professional advisers, auditors and IT service providers where necessary and subject to appropriate contractual safeguards.
Personal data may be shared between companies within the Autotech Group where necessary for legitimate business purposes, such as delivering services, managing contractual relationships, or meeting legal and regulatory obligations. Each group company acts as an independent data controller for the data it receives.
d. Statutory/contractual requirement
Your personal data is a contractual requirement (e.g. our client may require this personal data), and a requirement necessary to enter into a contract. You are obliged to provide the personal data. If you do not, the consequences of failure to provide the data are: We would be unable to offer you work finding services.
e. International data transfers
We do not routinely transfer personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.
f. CCTV and video surveillance
We use CCTV at our premises for the purposes of safety, security, and the prevention and detection of crime. CCTV may capture images of staff, visitors, contractors, and members of the public.
CCTV footage is monitored only by authorised personnel and is retained for a limited period (typically up to 30 days), unless it is required for investigating an incident or for legal or insurance purposes.
Where necessary, footage may be shared with relevant third parties such as the police or insurers.
Individuals have the right to request access to CCTV footage that includes images of them. Requests should be made using the contact details set out in this privacy notice.
2. Data retention
The Company will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from a) the date of their creation or b) after the date on which we last provided you with work-finding services.
We must also keep your payroll records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
Where the Company has obtained your consent to process your personal and sensitive personal data – name, address, email, telephone, passport, driving licence, we will do so in line with our retention policy. Where processing is based on consent, data will be deleted or anonymised when consent expires unless we are required to retain it by law.
3. Your rights
Please be aware that you have the following data protection rights:
- The right to be informed about the personal data the Company processes on you;
- The right of access to the personal data the Company processes on you;
- The right to rectification of your personal data;
- The right to erasure of your personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time.
We do not use automated decision‑making or profiling as defined under Article 22 UK GDPR.
4. Complaints or queries
If you have any questions or concerns about this privacy notice or how your personal data is processed, please contact:
Jack Salsbury (Head of IT & Information Security) on GDPR@autotechrecruit.co.uk
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.