Legal & governance
Privacy notice
How OFFSHOREPERSONNEL LTD uses and safeguards recruitment, client and workforce information under UK GDPR and the Data Protection Act 2018.
Who is responsible for your information
OFFSHOREPERSONNEL LTD, company number 17360723, is the data controller for information collected through this service. Our registered address is Level One, Basecamp Liverpool, 49 Jamaica Street, Liverpool, L1 0AH. Data protection registration reference: ZC042305. Privacy enquiries and rights requests can be submitted through our contact page or, after registration, secure portal messaging.
Information we collect
We collect account and contact details, professional history, skills, availability, applications, right-to-work evidence and role-specific certificates. For clients we collect company, worksite, staffing, billing and authorised-user information. After engagement or placement, records may also include encrypted payment details, emergency contacts, assignments, approved timesheets and relevant work-related incident records.
Why we use it
We use information to take steps requested before a contract, provide recruitment and workforce services, perform contracts, meet legal and regulatory duties, protect workers and worksites, prevent fraud and maintain secure business records. Where we rely on legitimate interests, we balance those interests against individual rights. We do not use solely automated decisions to determine whether a person is offered work.
Special-category information
We limit health information to necessary offshore medical-fitness evidence, status and authorised work restrictions rather than full medical histories. We process it only where an appropriate UK GDPR and Data Protection Act 2018 condition has been documented, including employment and social-protection obligations or explicit consent where suitable. Access is restricted to authorised personnel with a recorded need.
Who receives information
A verified client receives only a candidate pack deliberately shared for its staffing requirement. We may also use contracted providers for secure hosting, document scanning, email, accounting and independent payroll processing, and disclose information where required to regulators, law enforcement, professional advisers or insurers. Bank details, internal notes and unrelated medical or incident information are not included in client candidate packs.
Retention and international transfers
Retention is based on whether an account remains active, whether a placement or contract was made, statutory record-keeping periods, limitation periods and documented safety or dispute requirements. When there is no continuing purpose or legal reason to retain a record, it is securely deleted or anonymised. If a supplier processes information outside the UK, we require a lawful transfer mechanism and proportionate contractual and security safeguards.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on it. Account closure does not remove records that must be retained by law or for legal claims. We will verify requests before acting. You may also complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with our response.