Privacy Policy
Last Updated: 20/10/2025
1. Introduction
Eurocom CI Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, store, and protect personal data when individuals use our employee screening and background verification services (“Services”). It also outlines your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance issued by the Information Commissioner’s Office (ICO).
We encourage you to read this notice carefully to understand how we handle your information.
2. Who We Are
Eurocom CI Ltd is a UK-registered company providing pre-employment and ongoing employee screening services, including DBS and identity verification checks.
Registered Office: Wesley House, Bull Hill, Leatherhead, Surrey, KT22 7AH
Company Number: 02387512
ICO Registration: Z9753599
We act as:
a Data Controller when we determine the purposes and means of processing; and
a Data Processor when processing personal data on behalf of our clients (for example, during background checks).
We comply with UK data protection legislation and ICO guidance at all times.
3. Personal Data We Collect
We may collect and process the following categories of personal data, depending on the nature of our engagement:
a. Identification Information
Name, date of birth, address, contact details (email, phone), gender, national insurance number, and identification documents (passport, driving licence).
b. Employment and Education Information
Employment history, CVs, qualifications, professional references, and education records.
c. Verification and Screening Data
Right to work documents, criminal record information (where lawful), financial probity data, sanctions checks, and other screening data as requested by clients.
d. Technical and Usage Data
IP address, browser type, device information, and user activity on our platform (e.g., log data, session data).
e. Communication Data
Records of communication, enquiries, and support interactions with us.
We do not collect special category data (e.g., health, ethnicity, or biometric data) unless required and lawful for a specific screening purpose, and only with appropriate safeguards.
4. How We Collect Personal Data
We obtain personal data:
Directly from individuals when they use our services or communicate with us.
From clients (e.g., employers or recruitment agencies) providing data for screening.
From third parties such as referees, data providers, or official databases, only where lawful and necessary.
Automatically through cookies and analytics tools on our online platform (see Section 12).
5. How We Use Personal Data
We process personal data to:
Deliver and manage employee screening and verification services.
Validate identity, qualifications, employment, and right to work status.
Fulfil contractual and legal obligations to clients.
Ensure platform functionality, integrity, and security.
Communicate with clients and users about their applications or results.
Improve service performance and user experience.
Where data is used for service improvement or analytics, it is anonymised or aggregated wherever possible.
6. Lawful Bases for Processing
We process personal data based on one or more of the following lawful bases:
Contractual necessity – to perform our contract with you or our clients.
Legal obligation – to comply with legal requirements such as DBS or right-to-work legislation.
Legitimate interests – to ensure service quality, integrity, and security, provided such interests do not override individual rights.
Consent – where required by law (e.g., criminal record checks).
7. Data Sharing and Disclosure
We may share personal data with:
Clients (employers or agencies) who requested the screening.
Accredited third-party providers (e.g., identity verification, DBS, or credit reference agencies).
Regulators, law enforcement, or courts, where legally required.
IT and service providers assisting in hosting, security, and operations under strict confidentiality agreements.
We require all third parties to maintain appropriate safeguards and process personal data in accordance with UK data protection law.
8. International Data Transfers
If personal data is transferred outside the UK, we ensure equivalent protection through:
Adequacy decisions (approved countries by the UK government).
Standard Contractual Clauses (SCCs) approved by the ICO.
Transfer Risk Assessments to ensure appropriate safeguards.
9. Data Retention
We retain personal data only for as long as necessary for:
The purposes described above;
Contractual obligations;
Compliance with legal, accounting, or reporting requirements.
After the retention period, data is securely deleted or anonymised in accordance with our Data Retention Policy.
10. Data Security
We maintain technical and organisational measures to prevent unauthorised access, loss, or misuse of personal data. These include:
Encryption and secure storage protocols;
Role-based access controls;
Regular system audits and security reviews;
Staff training on data protection and confidentiality.
11. Your Data Protection Rights
Under the UK GDPR, individuals have the following rights:
Access – to request a copy of your data.
Rectification – to correct inaccurate or incomplete data.
Erasure – to request deletion of data in certain cases.
Restriction – to limit processing of data.
Objection – to object to processing based on legitimate interests.
Data Portability – to transfer your data to another organisation.
Withdraw consent – where consent was given as the lawful basis.
Requests can be made using the contact details below (Section 13). We respond to valid requests within one month.
12. Cookies and Tracking Technologies
Our platform uses cookies and similar technologies to enhance user experience, measure performance, and improve security. You can manage cookie preferences through your browser or our Cookie Notice.
For full details, please refer to our Cookie Policy available on our website.
13. Contact Us
If you have questions or concerns regarding this Privacy Policy or wish to exercise your rights, please contact:
Data Protection Lead
Eurocom CI Ltd
Wesley House, Bull Hill, Leatherhead, Surrey, KT22 7AH
📧 info@eurocomci.co.uk
📞 01372 886 920
If you remain unsatisfied, you can lodge a complaint with the Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk
📞 +44 (0)303 123 1113
14. Updates to This Privacy Policy
We review and update this Privacy Policy regularly to ensure continued compliance with legal and operational requirements. The most recent version will always be available on our website, with significant changes notified to clients and users directly where appropriate.
