Privacy Notice
Leggwork Construction Services Ltd
Last updated: 01/09/2026
1. About this notice
This notice explains how Leggwork Construction Services Ltd collects, uses, shares and
protects personal information. It applies to candidates and workers we place, to people who visit
our website, and to contacts at our clients and suppliers.
We are the data controller for the information described here.
Leggwork Construction Services Ltd of 24 Stokes Croft, Bristol, BS1 3PR Company number:
12377412 Data protection contact: Ben Abraham, Operations & Compliance Manager
Telephone: 0117 298 0950
2. The information we collect
Depending on your relationship with us, we may hold:
- Identity and contact details. Name, date of birth, National Insurance number, home address,
email address, telephone numbers, next of kin and emergency contact details.
Right to work information. Passport, visa, biometric residence permit or share code, and
copies of the documents we are required by law to check and retain. - Work history and suitability information. CV, employment history, references, qualifications,
CSCS or other cards, tickets and competency certificates, training records, interview and
screening notes, and our consultants’ notes about your availability, skills and preferences. - Placement and payroll information. Timesheets, hours worked, rates, bank details, tax and
CIS status, UTR number, pension information, umbrella or limited company details, holiday and
absence records. - Health information. Anything you tell us about a health condition, disability, injury or
reasonable adjustment where it is relevant to your safety on site or to our duties as an employer
or agency. - Criminal record information. Only where a client or a role requires a check, and only to the extent the law allows.
- Records of our communications with you. Emails, text messages, WhatsApp and other
messaging, notes of conversations, and recordings and transcripts of telephone calls. Section 4
explains this in detail.
3. Where we get it from
Most of the information we hold comes directly from you. We also receive information from:
● Job boards and CV databases where you have made your details available
● Professional networking sites such as LinkedIn
● Your referees and previous employers
● Our clients, where they give us feedback about a placement
● Background screening, right to work and DBS providers
● HMRC, pension providers and payroll or umbrella companies
4. Call and communications recording
We use a system called SourceWhale to record and log the calls and messages our consultants
have with candidates, workers and clients.
What gets recorded.
Telephone calls to and from our consultants, and the content of emails
and messages sent through our recruitment systems. Recordings may be transcribed
automatically and a written summary of the call may be produced and stored on our system
alongside your record.
How we tell you.
You will hear an announcement at the start of a recorded call, or the
consultant will tell you at the beginning of the call that it is being recorded. If you would prefer
not to be recorded, tell the consultant and they will either stop the recording or arrange to
continue the conversation another way. Choosing not to be recorded will not affect your
application or your placement.
Why we do it.
To keep an accurate record of what was agreed about roles, rates, start dates
and site requirements, to resolve disputes and complaints, to meet our obligations under
agency, employment and health and safety law, to train and support our consultants, and to
check the quality of our service.
Our lawful basis.
We rely on our legitimate interests in running our business accurately and
safely, and on our need to comply with legal obligations that apply to employment businesses.
We have assessed the impact of recording on your privacy and concluded that it is
proportionate. You can ask us for a summary of that assessment.
How long we keep recordings.
RETENTION PERIOD, for example 12 months from the date of
the call, unless the recording relates to an incident, dispute, claim or investigation, in which case
we keep it until the matter is resolved and any relevant limitation period has expired.
Who can access them. Access is restricted to the consultant involved, their manager, and staff
dealing with compliance, payroll or a complaint. Recordings are stored by our supplier on our
behalf under a written contract.
5. Why we use your information and our lawful basis
- Finding you work and putting you forward to clients. Legitimate interests, and performance of a contract where we have one with you.
- Assessing your skills, qualifications and suitability. Legitimate interests.
- Checking your right to work in the UK. Legal obligation
- Paying you, operating PAYE or CIS, and managing pensions. Legal obligation, and performance of a contract
- Meeting our duties under the Conduct Regulations, agency worker legislation and health and safety law. Legal obligation.
- Recording and reviewing calls and messages. Legitimate interests, and legal obligation
- Managing incidents, accidents, disputes, claims and insurance. Legitimate interests, and legal obligation
- Sending you details of roles that may suit you. Legitimate interests, or your consent where required
- Improving our service and analysing how our business performs. Legitimate interests.
- Running our website and keeping it secure. Legitimate interests.
Where we rely on legitimate interests, we have considered whether our interests are
outweighed by your rights, and we have concluded they are not. You can ask us to explain that
assessment.
Health and other special category information.
Where we process information about your
health, we do so because it is necessary for our obligations in employment law and health and
safety law, under Article 9(2)(b) of the UK GDPR and Schedule 1 of the Data Protection Act
2018. We may also rely on Article 9(2)(f) where information is needed for a legal claim, or on
your explicit consent.
Criminal record information.
Where a role requires it, we process this because it is necessary
for our employment law obligations or for the prevention or detection of unlawful acts, under
Schedule 1 of the Data Protection Act 2018.
6. Who we share it with
● Clients. We share your CV and relevant details with clients considering you for a role.
Once you are placed, we share the information the client needs to manage you safely on
site.
● Payroll, umbrella and accountancy providers who pay you or process your invoices.
● HMRC, for PAYE, CIS and other tax reporting.
● Pension providers, for auto-enrolment.
● Software and IT suppliers who host our systems, including our CRM, our call recording
provider and our email and file storage providers. They act on our instructions under a
written contract.
● Screening providers, for right to work, reference and DBS checks.
● Insurers, brokers and legal advisers, where there has been an accident, incident or
claim.
● Regulators, HSE, the police and other authorities where we are required or permitted
to share information.
● A buyer or successor if the business is sold or reorganised.
We do not sell your personal information.
7. Sending information outside the UK
Some of our suppliers store or access information outside the UK. Where that happens, we
make sure the transfer is covered by UK adequacy regulations, or by the UK International Data
Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together
with any additional safeguards needed. You can ask us for details of the safeguards in place.
8. How long we keep your information
We keep information only as long as we need it.
Candidate records where you are not placed
[2 years] from last contact
Records of workers we have placed
[6 years] after the end of the last assignment
Right to work documents
2 years after employment or engagement ends
Payroll, tax and CIS records
6 years after the end of the tax year they relate to
Accident and incident records
[3 years] from the date of the incident, or longer for young people or serious injury
Call recordings and transcripts
[12 months], or longer where there is a dispute or claim
Where a longer period is needed to defend a legal claim, we will keep the relevant records until
that risk has passed.
9. Keeping your information secure
We use access controls, encryption in transit and at rest, secure cloud hosting, staff training and
written contracts with our suppliers to protect your information. We restrict access to those who
need it to do their job. We have a procedure for dealing with any suspected data breach and will
notify the ICO and affected individuals where the law requires it.
10. Automated decision making
We do not make decisions about you that produce legal or similarly significant effects using
automated processing alone. Our systems may sort or rank candidate records to help our
consultants search, and calls may be transcribed and summarised automatically, but a
consultant always makes the decision about whether to put you forward for a role.
11. Your rights
You have the right to:
● ask for a copy of the information we hold about you
● ask us to correct information that is wrong or incomplete
● ask us to delete information where we no longer have a good reason to keep it
● ask us to restrict how we use your information
● object to our use of your information where we rely on legitimate interests
● ask us to transfer your information to you or another organisation in a portable format
● withdraw your consent at any time where we rely on consent
● opt out of marketing at any time
To exercise any of these rights, contact us using the details in section 1. We will respond within
one month. There is normally no charge.
12. Complaints
If you are unhappy with how we have handled your personal information, please tell us first. You
can make a data protection complaint directly to us by emailing [email protected], by writing
to us at the address in section 1, or by telephone on 0117 298 0950.
We will acknowledge your complaint within 30 days of receiving it, investigate it, keep you
updated and tell you the outcome.
You also have the right to complain to the Information Commissioner’s Office at any time. You
do not have to complain to us first, although it usually helps to resolve things more quickly.
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113 www.ico.org.uk