SCRUNCH MARKETING – GDPR PRIVACY NOTICE
Employee Right-to-Work Documentation
1. Introduction
Scrunch Marketing (“we”, “us”, “our”) is committed to protecting and respecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This notice explains how we collect, use, store, and delete personal data submitted as part of right-to-work verification.
2. Purpose of Data Collection
We collect and process personal data solely for the purpose of verifying an individual’s legal right to work in the United Kingdom, in compliance with applicable employment and immigration laws.
3. Types of Data We Collect
We may collect and process the following personal data:
Identification documents (e.g., passport, national ID card, biometric residence permit)
Supporting documents confirming right to work
Personal details contained within those documents (such as full name, date of birth, nationality, document numbers, and images)
4. Lawful Basis for Processing
We process this data under the following lawful basis:
Legal obligation: to comply with UK immigration and employment laws requiring right-to-work checks
5. How We Use Your Data
Your data is used exclusively to:
Verify your eligibility to work in the UK
Maintain a record of compliance with legal obligations
We do not use this data for marketing or any unrelated purposes.
6. Data Storage and Security
All documents are uploaded securely via our website and stored using appropriate technical and organisational measures to protect against:
Unauthorised access
Loss or destruction
Misuse or disclosure
Access to this data is restricted to authorised personnel only.
7. Data Retention
We retain your documents only for as long as necessary to complete the verification process.
Typically, documents are stored for up to 7 days
After this period, all files are securely deleted from our systems
8. Data Sharing
We do not share your personal data with third parties except where required by law or regulatory authorities.
9. Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data (where applicable)
Restrict or object to processing in certain circumstances
Lodge a complaint with the Information Commissioner’s Office (ICO)
11. Updates to This Notice
We may update this privacy notice from time to time. Any changes will be communicated via our website.