Privacy Policy

occupaid Ltd (“we”, “us”, or “our”) is a company registered in England and Wales. We are the data controller for the personal information we collect and process. Our registered office is:

65 London Wall, London, EC2M 5TU.

For the purposes of data protection law, our contact details are:

Email: admin@occupaid.co.uk
Website: https://www.occupaid.co.uk

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

We may collect and process the following types of personal information:

• Identity and contact data: Name, email address, phone number, job title, company name.
• Professional data: CVs, work history, qualifications, references (if you apply for roles through us or we recruit for you).
• Account and usage data: Information about how you use our website, services, or platform.
• Technical data: IP address, browser type, device information, operating system, and cookies/analytics data.
• Marketing and communications data: Your preferences for receiving marketing from us and your communication history.
• Any other information you voluntarily provide to us (e.g. through contact forms, surveys, or when using our services).

We do not knowingly collect special category data (e.g. health, racial or ethnic origin, religious beliefs) unless you explicitly provide it in the context of our services and we have a lawful basis to process it.

We collect personal information in the following ways:

• Directly from you (e.g. when you register, apply for a job, contact us, or use our services).
• Automatically through our website (via cookies and similar technologies — see section 10).
• From third parties (e.g. recruitment platforms, references, publicly available sources, or when you interact with our partners).

We only process your personal data where we have a valid lawful basis under UK GDPR / GDPR. The main bases we rely on are:

We will only use your personal data for the purposes we collected it for, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

We may share your personal data with:

• Service providers and processors who help us run our business (e.g. hosting providers, email services, analytics tools, payment processors).
• Recruitment clients or employers (when matching candidates).
• Professional advisers (e.g. lawyers, accountants, insurers).
• Regulators or authorities when legally required.
• Any third party if we sell or transfer part or all of our business.

We only share data with third parties who have appropriate safeguards in place.

Some of our service providers or partners may be based outside the UK or EEA. When we transfer personal data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• UK Addendum to the EU Standard Contractual Clauses
• Adequacy decisions
• Other approved transfer mechanisms

You can contact us for more details about specific transfers.

We keep personal data only for as long as necessary for the purposes set out in this policy, or to comply with legal, accounting, or reporting requirements.

Typical retention periods:

• Job application data: 12–24 months after last activity, or longer if required for legal claims.
• Marketing data: Until you withdraw consent or object.
• Website analytics: 26 months.

After the retention period, we will securely delete or anonymise your data.

Under UK GDPR and GDPR, you have the following rights (subject to certain conditions and exceptions):

• Right to be informed — This Privacy Policy explains how we use your data.
• Right of access — Request a copy of the personal data we hold about you.
• Right to rectification — Ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — Ask us to delete your data in certain circumstances.
• Right to restrict processing — Ask us to limit how we use your data.
• Right to data portability — Receive your data in a portable format or have it transferred to another organisation.
• Right to object — Object to processing based on legitimate interests or direct marketing.
• Rights related to automated decision-making and profiling — We do not currently make solely automated decisions that have legal or significant effects on you.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month (or longer in complex cases). We may need to verify your identity. You also have the right to withdraw consent at any time where we rely on consent.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no system is completely secure.

Our website uses cookies and similar technologies to improve functionality, analyse usage, and (where you consent) for marketing purposes. For more details, please see our Cookie Policy. You can manage or disable cookies through your browser settings.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Please read their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the “Last Updated” date. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy or our data processing, please contact us first using the details above. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113

If you are in the EU, you may also contact your local supervisory authority.