Privacy Policy
How Starff Ltd collects, uses and protects your personal data.
1. Who we are
Starff Ltd (“Starff”, “we”, “us”) is a temporary recruitment agency registered in England and Wales, operating across Greater London. We are the data controller for the personal data described in this policy. Contact: hello@starff.co.uk.
2. What we collect
Depending on how you use Starff, we may collect:
- Candidates: name, contact details, right-to-work documents, photo ID, a selfie (a photo of your face that we check against your ID), certifications and licences, work history, bank details for payroll, timesheet and shift records.
- Employers: company and contact details, site addresses, booking and invoicing records.
- Website visitors: enquiry form submissions and, if you accept analytics cookies, information about how you use our website, collected through Google Analytics. See our Cookie Policy.
3. Why we use it
We process personal data to register and vet candidates, match workers to shifts, run payroll and invoicing, meet legal obligations (including right-to-work checks under UK immigration law), and respond to enquiries. Our lawful bases are contract, legal obligation and legitimate interest, and consent for analytics cookies.
4. Who we share it with
Candidate profiles are shared with employers only to the extent needed to confirm a placement. We use vetted processors for payroll, document verification, secure storage, and AI tools that help our team summarise and organise information within the platform. If you accept analytics cookies, we also use Google Analytics to understand how our website is used. We only ever share the minimum personal data needed for each purpose, and we never sell personal data.
5. How long we keep it
Candidate records are kept for the duration of registration and for the statutory retention periods that apply to recruitment, payroll and right-to-work records. Enquiry data is kept no longer than 12 months unless it becomes a client or candidate relationship. Google Analytics data is kept for up to 14 months.
6. International transfers
Most of your data is stored on servers within the European Union. In limited cases — for example the AI features that help our team summarise and organise information, or Google Analytics if you accept analytics cookies — some data may be processed by trusted providers located outside the UK and EU, including in the United States. Where this happens we rely on appropriate safeguards, such as the provider’s data-processing terms and standard contractual clauses, and we share only the minimum data needed. Our AI providers do not use your data to train their models.
7. Your rights
You can request access to, correction of, or deletion of your data, object to processing, and lodge a complaint with the ICO. Email us and we will respond within one month.
8. Security
Documents are stored encrypted, access is role-restricted, and portal access is protected by authentication. We review our security measures regularly.
9. Changes
We may update this policy from time to time. Material changes will be flagged on this page with a new “last updated” date.
10. Our mobile app
Starff is also available as a mobile app for iPhone and Android. The app collects and uses the same information described above. With your permission it uses your device’s camera and photo library so you can photograph and upload your documents and a selfie. If you choose to enable it, Face ID or fingerprint sign-in is handled entirely on your device — your biometric data never leaves your phone and is never sent to or stored by Starff. The app may send push notifications about your registration, shifts and messages; you can turn these off at any time in your device settings.