1. Introduction

Akhirah Ltd (“we,” “our,” or “us”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

This policy applies to all employees, job applicants, clients, suppliers, and any individuals whose personal data we process.

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Personal Information
•Full name
•Date of birth
•Contact details (address, phone number, email)
•National Insurance number
•Passport or other identification details
•Work permit or visa status

2.2 Employment and Recruitment Information
•CVs, employment history, and qualifications
•References and background checks
•Payroll and banking details
•Right to work documentation
•Training records and certifications

2.3 Website and Communication Data
•IP address and device information
•Browsing behavior on our website
•Cookies and tracking technologies
•Email correspondence and communication logs

2.4 Special Category Data (if applicable)
•Health information (for workplace safety and compliance)
•Criminal background checks (if required by law or contract)

3. How We Collect Data

We collect personal data through various means, including:
•Directly from individuals when they apply for jobs, use our services, or communicate with us.
•From third-party references, background checks, or publicly available sources.
•Through our website, job portals, and recruitment platforms.

4. Purpose of Processing Personal Data

Akhirah Ltd processes personal data for the following purposes:
•Recruitment and Employment: To assess job applications, verify qualifications, and manage employment contracts.
•Business Operations: To provide recruitment and staffing services to clients.
•Legal and Compliance: To comply with immigration, employment, and tax laws.
•Security and Fraud Prevention: To prevent unauthorized access, fraud, and other security threats.
•Marketing (if applicable): To send promotional materials or updates (with consent).

5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:
•Contractual Obligation: When processing is necessary for employment, recruitment, or service agreements.
•Legal Compliance: To meet legal and regulatory requirements.
•Legitimate Interests: To manage our business operations and improve our services.
•Consent: When explicit consent is required (e.g., for marketing communications).

6. Data Sharing and Disclosure

We may share personal data with:
•Clients and Employers: For job placements and employment contracts.
•Service Providers: Such as payroll processors, IT support, and background check agencies.
•Regulatory Authorities: Including HMRC, Home Office, and law enforcement if required by law.
•Business Partners: Where necessary for the provision of services.

We do not sell or rent personal data to third parties.

7. Data Storage and Retention
•Personal data is securely stored on encrypted systems and protected against unauthorized access.
•We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy.
•When data is no longer required, it is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:
•Encryption and secure data storage.
•Access controls and authentication measures.
•Regular audits and security assessments.

9. Your Rights

Individuals have the following rights under the UK GDPR:
•Right to Access: Request a copy of your personal data.
•Right to Rectification: Request corrections to inaccurate or incomplete data.
•Right to Erasure: Request deletion of your personal data in certain circumstances.
•Right to Restriction: Request a limitation on how we process your data.
•Right to Data Portability: Request transfer of your data to another service provider.
•Right to Object: Object to processing based on legitimate interests or direct marketing.
•Right to Withdraw Consent: Withdraw consent for processing at any time (where applicable).

10. Cookies and Website Tracking

Our website uses cookies and tracking technologies to enhance user experience. Users can manage cookie preferences through browser settings. For more details, see our Cookie Policy [if applicable].

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy policies or practices.

12. Updates to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated date.