1. PURPOSE OF THIS NOTICE:

This privacy notice explains how Midcore Security and Facility Management (“Midcore”, “we”, “us”) collects, uses, stores, and protects personal data relating to employees, officers, agency workers, and contractors.

We are committed to handling personal data lawfully, fairly, and transparently in line with UK GDPR and the Data Protection Act 2018.

2. WHAT PERSONAL DATA WE COLLECT:

We may collect and process the following types of personal data where necessary:

1. Name, address, contact details
2. Date of birth and identification documents
3. Right to Work information
4. SIA licence and DBS details
5. Employment history and references
6. Training and competency records
7. Bank account and payroll details
8. Emergency contact details
9. Health information where required (special category data)
10. WHY WE PROCESS YOUR DATA:

We process personal data for the purposes of:

1. Recruitment, vetting, and screening (including BS7858 compliance)
2. Managing employment or contractual relationships
3. Payroll, pensions, and statutory reporting
4. Training, licensing, and competency management
5. Health, safety, and welfare obligations
6. Legal and regulatory compliance
7. Operational service delivery
8. LAWFUL BASIS FOR PROCESSING:

We process your personal data under the following lawful bases:

Contract – to manage your employment or engagement                            

Legal obligation – to meet requirements such as Right to Work, HMRC, SIA, and health and safety law

Legitimate interests – to manage our operations effectively and safely

Special category data (such as health information) is processed only where legally permitted and with appropriate safeguards in place.

5. WHO HAS ACCESS TO YOUR DATA:

Access to personal data is restricted to authorised staff only, including:

1. HR and management staff
2. Operations and compliance personnel (where required)

We may share data with third parties where necessary, such as:

1. Payroll providers
2. Vetting and screening bodies
3. Regulators and authorities
4. Emergency services where required

All third parties are required to handle data securely and lawfully.

6. HOW WE PROTECT YOUR DATA:

We use appropriate security measures, including:

1. Role-based access controls
2. Secure IT systems and password protection
3. Locked storage for paper records
4. Secure disposal of confidential data
5. HOW LONG WE KEEP YOUR DATA:

Personal data is retained only for as long as necessary and in line with our retention schedule.

Employment records are generally retained for up to six years after employment ends, unless a longer period is required by law.

8. YOUR RIGHTS:

You have the right to:

1. Access your personal data
2. Request correction of inaccurate data
3. Request deletion or restriction where applicable
4. Object to certain types of processing
5. Requests should be directed to the Data Protection Lead. We will respond within one month.
6. CONTACT DETAILS:

Data Protection Lead Midcore Security and Facility Management

Haider Hashmi HR Officer

Email: info@midcore.co.uk

Telephone: 0333 366 0355