Privacy Policy for Bardwood Support Services Ltd

Effective Date: 30 September 2026

At BardWood Support Services Ltd ("BardWood", "we", "our", "us"), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable data protection laws.

1. Who We Are

BardWood Support Services Ltd is a recruitment, facilities management and security services provider operating within the United Kingdom and other jurisdictions where applicable.

Data Protection Contact
For all privacy-related matters, please contact:

Nilesh Rajgor – Data Protection Lead
Email: nilesh.rajgor@bardwood.co.uk
Postal Address: Woodland Place, Hurricane Way, Wickford, Essex, SS11 8YB

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Contact Information

  • Name
  • Email address
  • Postal address
  • Telephone number

Employment Information

  • CVs
  • Employment history
  • References
  • Qualifications
  • Training records

Identification Information

  • Passport details
  • Driving licence information
  • Right-to-work documentation
  • SIA licence information

Financial Information

  • Payroll information
  • Bank account details
  • Invoicing information

Website Usage Information

  • IP address
  • Browser type
  • Device information
  • Cookies and website analytics

Compliance Information

  • Screening and vetting records
  • Identity verification information
  • Fraud prevention information
3. How We Collect Personal Data

We collect personal data through:

Direct Interactions

Information you provide to us via:

  • Website forms
  • Employment applications
  • Email
  • Telephone
  • Meetings
  • Service agreements

Automated Technologies

As you interact with our website we may automatically collect technical information through:

  • Cookies
  • Analytics software
  • Website tracking technologies

Third Parties

Information may be obtained from:

  • Recruitment agencies
  • Referees
  • Clients
  • Background screening providers
  • Identity verification providers
  • Credit reference agencies
  • Regulatory authorities
4. Legal Basis for Processing

We only process personal data where we have a lawful basis to do so.

Consent

Where you have provided clear consent for the processing of your personal data.

Contractual Necessity

Where processing is necessary to enter into or perform a contract.

Legal Obligation

Where processing is required by law or regulatory obligations.

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests include:

  • Operating and managing our business.
  • Delivering recruitment, facilities management and security services.
  • Managing customer, supplier and employee relationships.
  • Ensuring system, network and information security.
  • Preventing fraud and financial crime.
  • Supporting audits, governance and compliance activities.
  • Protecting company assets and confidential information.
  • Verifying identity and assessing creditworthiness where appropriate.
  • Protecting information supplied by third-party providers, including Creditsafe and TransUnion.

These interests are balanced against the rights and freedoms of individuals and are supported by appropriate safeguards.

5. How We Use Personal Data

We may use personal data to:

  • Deliver recruitment services.
  • Deliver facilities management services.
  • Deliver security services.
  • Administer employment and payroll processes.
  • Manage customer and supplier relationships.
  • Verify identity and undertake compliance checks.
  • Prevent fraud and misconduct.
  • Meet legal and regulatory obligations.
  • Improve services and website functionality.
  • Communicate with applicants, workers, suppliers and customers.
6. Credit Reference and Affordability Checks

To help us assess applications, prevent fraud and meet our legal and regulatory obligations, we may obtain information about you from Credit Reference Agencies (CRAs).

We obtain this information through Creditsafe, which uses its data partner TransUnion to provide consumer credit and identity information.

  • Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 742313).
  • TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number: 737740).

The information obtained may include:

  • Identity verification information.
  • Credit commitments.
  • Payment history.
  • Public record information.
  • Fraud prevention indicators.

This information is processed solely for legitimate business purposes including:

  • Identity verification.
  • Fraud prevention.
  • Compliance activities.
  • Creditworthiness assessments.

Further information is available through the privacy notices of Creditsafe and TransUnion.

7. Provision of Personal Data

The provision of certain personal data is primarily contractual and, in some circumstances, necessary to comply with legal and regulatory obligations.

Personal data may be required to:

  • Enter into and perform contracts with customers, workers, suppliers and business partners.
  • Process employment and recruitment applications.
  • Deliver services and manage accounts.
  • Verify identity and prevent fraud.
  • Comply with legal, accounting, taxation and regulatory obligations.

Consequences of Not Providing Personal Data

If you choose not to provide personal data that is required:

  • We may be unable to enter into a contract with you.
  • We may be unable to provide services.
  • We may be unable to progress an employment application.
  • We may be unable to complete compliance or fraud prevention checks.
  • Applications or services may be delayed, restricted or declined.

Where personal data is requested solely for optional purposes, such as marketing communications, providing such information is voluntary and consent may be withdrawn at any time.

8. Sharing Your Personal Data

We do not sell personal data.

We may share personal data with:

  • Payroll providers.
  • IT service providers.
  • Professional advisers.
  • Clients and business partners.
  • Recruitment partners.
  • Credit reference agencies.
  • Identity verification providers.
  • Regulatory authorities.
  • Law enforcement agencies where legally required.
9. International Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area, we ensure that appropriate safeguards are implemented.

These safeguards may include:

  • UK International Data Transfer Agreements (IDTAs).
  • International Data Transfer Addendums.
  • Standard Contractual Clauses.
  • Transfers to countries recognised as providing adequate protection.

We assess international transfers to ensure personal data remains appropriately protected in accordance with applicable data protection legislation.

10. Cookies and Website Tracking

Our website uses cookies and similar technologies to improve functionality and user experience.

These may include:

  • Essential cookies.
  • Performance cookies.
  • Functionality cookies.
  • Analytics cookies.
  • Marketing cookies.

You may control cookie settings through your browser preferences.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy legal, regulatory, contractual and business requirements.

When no longer required, personal data will be securely deleted, anonymised or destroyed.

12. Your Rights

Under UK GDPR, individuals may have the right to:

  • Access personal data.
  • Correct inaccurate information.
  • Request deletion of personal data.
  • Restrict processing.
  • Object to processing.
  • Request data portability.
  • Withdraw consent.

To exercise any of these rights, contact nilesh.rajgor@bardwood.co.uk.

13. Data Security

We maintain appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access.
  • Loss.
  • Misuse.
  • Alteration.
  • Disclosure.
  • Destruction.

These measures include access controls, encryption, monitoring and security awareness training.

14. Automated Decision Making and Profiling

We may use automated systems to support:

  • Recruitment screening.
  • Identity verification.
  • Fraud prevention.
  • Risk assessment.
  • Compliance monitoring.
  • Records management.

These systems may generate recommendations, alerts or risk scores based on predefined criteria.

However, BardWood does not make decisions that have legal or similarly significant effects on individuals solely through automated processing.

Any significant decision affecting an individual will be subject to meaningful human review.

Individuals will not be automatically rejected, denied services or otherwise adversely affected solely because of automated processing.

15. Complaints

If you have concerns regarding our processing of personal data, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Website: Information Commissioner's Office
Telephone: 0303 123 1113

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Legislation.
  • Regulatory requirements.
  • Business operations.
  • Technology.
  • Industry best practice.

The latest version will always be published on our website.

Contact Us

BardWood Support Services Ltd
Woodland Place, Hurricane Way, Wickford, Essex, SS11 8YB
Email: nilesh.rajgor@bardwood.co.uk

This Privacy Policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable data protection legislation in jurisdictions where BardWood operates.

Top