Privacy Policy

1
Who We Are & Identity of the Data Controller

This Privacy Policy explains how Global Hire Solutions Ltd (“we”, “us”, “our”, or the “Company”) collects, uses, stores, transfers, and safeguards your personal data when you visit our website, apply for open vacancies, register in our specialist talent pools, or engage our international workforce solutions.

For the purposes of applicable data protection legislation (including the UK GDPR and the Data Protection Act 2018), Global Hire Solutions Ltd is the Data Controller of personal data collected through this website and through our recruitment workflows.

• Registered Office: 100 Bishopsgate, London, EC2N 4AG, United Kingdom
• Company Status: Registered in England and Wales
• Supervisory Authority Registration: Registered with the Information Commissioner’s Office (ICO)
• Data Protection Officer (DPO): info@globalhiresolutions.co.uk

2
Personal Data We Collect

We process personal data provided directly by you, generated automatically through your website interactions, or gathered from accredited verification bodies in connection with recruitment assignments.

A. Candidate & Work-Seeker Data

• Identity Information: Full legal name, title, date of birth, nationality, proof of identity (passport, national identity card, driving licence), and photographic identification.
• Contact Information: Residential address, telephone numbers, personal email address, and emergency contact details.
• Professional Career Profile: Curriculum vitae (CV / Resume), employment history, job titles, salary expectations, notice periods, references, educational records, diplomas, and academic transcripts.
• Right to Work & Immigration: Proof of entitlement to work in the UK, EU, GCC, or overseas destination jurisdictions (e.g., British / Irish citizenship, EU Settled Status, Biometric Residence Permits, active visas, or international sponsorship eligibility).
• Communication Records: Interview notes, assessment test results, video interview recordings (where explicit consent is given), and correspondence exchanged with our talent acquisition team.

B. Corporate Client & Employer Data

• Key Contact Information: Name, business email address, corporate telephone number, job title, and department of client representatives.
• Commercial & Billing Data: Company name, registered address, VAT / registration numbers, procurement contracts, purchase order numbers, and payment details.
• Vacancy Specifications: Position descriptions, salary brackets, required technical certifications, interview feedback, and hiring decisions.

3
Sector-Specific Credential & Licencing Data

Because Global Hire Solutions specializes in mission-critical industries, we are required by statutory regulations, international bodies, and hiring clients to collect and verify mandatory professional accreditations across our five core sectors:

4
Lawful Bases for Processing (UK GDPR Art. 6)

Under UK data protection law, we must have a valid lawful basis for every processing activity involving personal data. We rely on the following bases:

• Legitimate Interests (Article 6(1)(f)): Processing candidate data to assess qualification suitability for relevant vacancies, match specialists with reputable global employers, maintain talent relationships, and administer our business operations. We carry out Legitimate Interests Assessments (LIAs) to ensure our interests do not override your fundamental rights.
• Contractual Necessity (Article 6(1)(b)): Processing necessary to take preliminary steps at your request prior to entering into an employment contract or contractor engagement with a hiring employer.
• Legal Obligation (Article 6(1)(c)): Verifying statutory right to work under the UK Immigration, Asylum and Nationality Act 2006, complying with the Conduct of Employment Agencies and Employment Businesses Regulations 2003, and meeting tax and accounting requirements.
• Explicit Consent (Article 6(1)(a)): Where you explicitly consent to specific optional activities, such as receiving targeted vacancy alerts or participating in marketing surveys. You may withdraw consent at any time.

5
Special Category & Criminal Record Data

Certain placements (notably in Healthcare, Airlines & Aviation, and Offshore Energy) require processing special category data (such as occupational health assessments, medical fitness to fly or work offshore) or criminal record checks (Enhanced DBS or overseas police clearance certificates).

We process this sensitive data strictly under:

• UK GDPR Article 9(2)(b) & DPA 2018 Schedule 1: Necessary for fulfilling legal obligations and exercising specific rights in the field of employment and social security law.
• UK GDPR Article 9(2)(h): Necessary for occupational health assessments, assessing working capacity, and regulatory medical fitness.
• DPA 2018 Schedule 1, Part 1, Paragraph 1: Employment and statutory vetting obligations.

6
How We Share and Disclose Your Information

We maintain strict confidentiality regarding candidate and client records. We share your personal data only in the following controlled circumstances:

• Prospective Hiring Employers: We present candidate profiles, anonymised CVs, and verified credential portfolios to prospective employers only after discussing the specific opportunity with you and receiving your agreement to be submitted.
• Vetted Service Providers: Trusted third-party processors including secure cloud infrastructure providers, applicant tracking system (ATS) hosts, credential validation services, and professional background checking agencies. All processors operate under binding Data Processing Agreements (DPAs).
• Immigration & Relocation Partners: In cases of international relocation, relevant identification and qualifications are shared with accredited immigration attorneys and visa sponsors to facilitate lawful international work permits.
• Regulatory & Law Enforcement Bodies: Where required by English law, court orders, or statutory regulatory directives (such as the UK CAA, GMC, or HMRC).

We never sell, rent, or trade your personal data to marketing third parties or data brokers under any circumstances.

7
International Cross-Border Data Transfers

Because Global Hire Solutions recruits across the United Kingdom, the European Economic Area (EEA), the Middle East (including Saudi Arabia, UAE, Qatar), North America, and the Asia-Pacific region, your personal data may be transferred to and stored in jurisdictions outside the UK.

Whenever personal data is transferred internationally, we ensure adequate safeguards are implemented in accordance with Chapter V of the UK GDPR:

• Adequacy Regulations: Transfers to countries recognized by the UK Secretary of State as offering an adequate level of data protection (e.g. EEA member states).
• UK International Data Transfer Agreement (IDTA) / Addendum to EU SCCs: Enforceable contractual protections containing standard data protection clauses approved by the Information Commissioner’s Office.
• Transfer Risk Assessments (TRAs): Rigorous evaluation of destination country legal protections to ensure data remains protected to UK standards.

8
Data Retention Periods

We do not keep personal data longer than necessary for the purposes for which it was collected. Our retention schedules reflect statutory requirements and operational recruitment cycles:

• Active Candidate Talent Pool: Retained for 36 months from your last active interaction (such as submitting an application, updating your CV, or confirming ongoing availability). We will contact you periodically to confirm your wish to remain in our talent community.
• Right to Work & Statutory Compliance Records: Retained for 2 years following the termination of work-finding services in accordance with the Conduct of Employment Agencies Regulations 2003.
• Placed Candidates & Financial Records: Contractual documents, invoicing, and tax audit trails are retained for 6 years following the end of the financial year in which the placement occurred, pursuant to the UK Taxes Management Act 1970.

9
Your Rights Under UK GDPR

Under UK data protection law, you possess key statutory rights regarding your personal information:

• Right of Access (Subject Access Request): You have the right to obtain confirmation as to whether we process your personal data and to receive a copy of that data free of charge.
• Right to Rectification: You may request prompt correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure (“Right to be Forgotten”): You may request the deletion of your personal data where there is no overriding legal reason for us to continue processing it.
• Right to Restrict Processing: You may request that we temporarily suspend processing while verifying accuracy or resolving an objection.
• Right to Data Portability: You may request the transmission of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is grounded in consent, you may withdraw your consent at any time without affecting prior lawful processing.

To exercise any of these rights, please email our Data Protection Officer at info@globalhiresolutions.co.uk. We will respond within one calendar month in accordance with statutory requirements.

10
Information Security Controls

We maintain comprehensive technical, organizational, and physical security measures to protect your data against unauthorized access, accidental loss, destruction, alteration, or disclosure:

• Encryption: High-grade 256-bit TLS/SSL encryption for all data in transit across our websites and portals, coupled with AES-256 encryption for data at rest.
• Access Controls: Role-Based Access Control (RBAC), multi-factor authentication (MFA), and least-privilege principles governing all internal systems.
• Vulnerability Management: Regular security audits, penetration testing, malware prevention, and continuous system telemetry.
• Staff Training: Mandatory data protection and cyber security training for all recruiters, consultants, and administrative staff.

11
Cookies & Web Telemetry

Our website utilizes standard HTTP cookies and similar technologies to ensure seamless navigation, preserve session security, and analyze anonymous usage patterns:

• Strictly Necessary Cookies: Essential for core website functionality, security tokens, and responsive layout management. These cannot be switched off.
• Performance & Analytics Cookies: Measure aggregated traffic volume, visitor flow, and popular sector pathways to help us optimize user experience.
• Preference Cookies: Remember your choices (such as preferred location or sector filters) across visits.

You can configure your browser to block or alert you about these cookies, though some portions of our job search functionality may be impaired as a result.

12
Supervisory Authority & Contacting Our DPO

If you have any questions, concerns, or complaints regarding this Privacy Policy or how your personal data is handled, please contact our team directly in the first instance:

You also retain the statutory right to lodge a formal complaint with the UK supervisory authority: The Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Website: ico.org.uk | Tel: +44 (0) 303 123 1113.