Privacy policy
How Cando Personnel collects, uses and protects personal data, under the UK GDPR and the Data Protection Act 2018.
Last updated: 1 Jan 2026
Who we are
Cando Personnel Ltd, 26 Harmer Street, Gravesend, Kent DA12 2AX, is the data controller for the personal data described here. You can contact us at office@candopersonnel.co.uk or on 01474 491709.
What we collect
- Work seekers: name, contact details, postcode, work history, CV, right to work and identity documents, National Insurance number, bank details for payroll, references, health declarations, training records, and attendance and location data recorded when you clock in and out of a shift.
- Client contacts: name, job title, business contact details and the details of your requirements.
- Website visitors: the information you type into our forms, plus basic technical data such as your IP address held in server logs.
Why we use it, and our lawful basis
- To find you work and place you — performance of a contract, and our legitimate interest in operating an employment business.
- To verify your right to work and identity — legal obligation under the Immigration, Asylum and Nationality Act 2006.
- To record attendance, including location at clock-in and clock-out — legitimate interest in verifying hours worked at a booked site, and performance of a contract for payment. Location is captured only at the moment you clock in or out, never between shifts.
- To pay you and to account for tax — legal obligation.
- To keep people safe on site — legal obligation under health and safety law, and vital interests where an incident occurs.
- To send you shift offers by SMS or WhatsApp — legitimate interest, and you can opt out at any time by telling your consultant.
Special category data
Health information given in a fitness declaration or after an incident is processed for the purposes of employment law obligations and occupational health, under Article 9(2)(b) and (h) of the UK GDPR.
Who we share it with
Client businesses you are placed with, HMRC, our payroll and accounting providers, the Gangmasters and Labour Abuse Authority where required by our licence, and our IT hosting provider. We do not sell personal data to anyone.
How long we keep it
- Unsuccessful applications: 12 months from your last contact with us.
- Right to work records: duration of engagement plus 2 years.
- Payroll and tax records: 6 years after the end of the tax year they relate to.
- Attendance and timesheet records: 6 years.
- Accident and incident records: 3 years, or until a young person reaches 21.
Your rights
You have the right to access your data, to have inaccurate data corrected, to erasure where we no longer need it, to restrict or object to processing, and to data portability. Write to us at the address above and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This site sets a single session cookie when you sign in to the staff or worker portal, so that the portal knows who you are. We do not use advertising or third-party tracking cookies.