Privacy Notice

Last updated: 25 April 2026 · ICO Registration ZC103351

1. Who we are

ACT Jobs is a PAYE staffing platform operated by Airconsulteam Media Ltd. We connect workers with employers in West London and surrounding areas. We are the data controller for all personal data collected through airconsulteam.com and app.airconsulteam.com.

2. What data we collect

Workers

• Identity: full name, date of birth, National Insurance number
• Contact: email address, phone number, home postcode
• Right to Work documents (passport, visa, share code)
• DBS certificate details
• Bank details (sort code, account number) — stored AES-256-GCM encrypted at rest
• Profile photo
• Shift history, timesheets, and payment records
• Device and location data when using the app (for shift matching only)

Employers

• Business name, registered address, company number
• Contact person name, email, phone
• Shift postings, booking history, invoice records
• Subscription and billing information (processed by Stripe — we do not store card details)

Website visitors

• Session cookies (essential for login functionality)
• Contact form submissions (name, email, message)

3. Why we collect it and our lawful basis

• Contract (Art. 6(1)(b)): To fulfil our obligations as a PAYE employer and staffing platform — verifying identity, processing pay, matching workers to shifts.
• Legal obligation (Art. 6(1)(c)): HMRC PAYE reporting, RTW verification under Immigration, Asylum and Nationality Act 2006.
• Criminal records data (Art. 10 UK GDPR + DPA 2018 Sch. 1 Part 2 Para. 12): DBS certificate details are processed solely to assess suitability for work involving access to vulnerable groups, as permitted under the DPA 2018.
• Legitimate interests (Art. 6(1)(f)): Platform security, fraud prevention, and improving our service. We send service updates and account notifications to registered users; we do not send marketing communications.

4. Who we share data with

• Employers — workers' verified profile (name, photo, verified status, skills) when matched to a shift. Bank details are never shared.
• HMRC — payroll data under PAYE obligations.
• Supabase — secure document storage (RTW, DBS files). Data stored in EU region.
• Stripe — payment processing. Stripe's privacy policy applies to card data.
• Resend — transactional email delivery.

We do not sell personal data. We do not share data with third parties for marketing purposes.

4a. International transfers

Stripe (payment processing) and Resend (email delivery) are US-based processors. Transfers to these providers are made under the UK International Data Transfer Agreement (UK IDTA), ensuring your data receives equivalent protection to that required under UK GDPR. Supabase stores documents in the EU region; no transfer outside the UK/EEA applies to that data.

5. How long we keep your data

• Worker employment and payroll records: 6 years from end of employment (HMRC requirement)
• RTW and DBS documents: 2 years after the end of the worker relationship
• Employer account data: 6 years from end of contract
• Inactive accounts: deleted after 3 years of inactivity (with 30-day notice)
• Website contact enquiries: 12 months

6. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion (subject to legal retention obligations)
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Restrict — request we limit how we use your data

To exercise any right, email hello@airconsulteam.com. We will respond within 30 days.

7. Cookies

We use essential session cookies only. These are required for the platform to function (maintaining your login session). We do not use advertising or analytics cookies.

8. Security

Bank details are encrypted at rest using AES-256-GCM. All data is transmitted over TLS. Access to personal data is restricted to authorised personnel only.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113. Our ICO registration number is ZC103351.

10. Automated decision-making

Our shift-matching algorithm ranks and suggests workers to employers based on verified skills, location, and availability. This is not fully automated decision-making within the meaning of Art. 22 UK GDPR — a human (the employer) makes the final hiring decision. No solely automated decisions producing legal or similarly significant effects are made about you without human review.

11. Children's data

ACT Jobs is an adult platform. You must be aged 18 or over to register. We do not knowingly collect personal data from anyone under 18. If we become aware that a person under 18 has provided data, we will delete it promptly. Contact hello@airconsulteam.com if you have concerns.

12. Changes to this notice

We may update this notice periodically. The date at the top of this page reflects when it was last revised. Significant changes will be communicated to registered users by email.

Questions? Email hello@airconsulteam.com or call 020 3092 8771.