The data shield.
Stated in full.

1. Who we are

RetailChecks Ltd ("we", "us") operates retailchecks.co.uk and provides right to work verification services. We are registered in England and Wales and with the Information Commissioner's Office (registration ZA974310). For data protection matters contact dpo@retailchecks.co.uk.

2. What we collect

• Enquiry data: name, company, email and details you send us by email.
• Verification data: identity documents and share-code results processed on behalf of your business, strictly as your data processor.
• Technical data: standard server logs and, where you consent, analytics cookies.

3. Why we process it

Enquiry data is processed to answer your enquiry (legitimate interest). Verification data is processed solely to perform the right to work check and record it as the law requires, acting on your instructions as data controller. We do not use verification data for marketing, profiling or anything beyond the check itself.

4. Retention

Verification records are retained for the period the Home Office requires employers to keep them, then securely deleted. Enquiry correspondence is retained for 24 months. Documents are never kept longer than the law requires.

5. Sharing

We share verification data only with you (the employer), as your processor, and only as required to complete the check. We do not sell data. We use processors (hosting, email) bound by data processing agreements under Article 28 UK GDPR. Where the Home Office requests records during an inspection of your business, they are provided by you; we assist as your processor.

6. Security

Verification data is encrypted in transit and at rest, access-restricted to named caseworkers, and covered by our documented information security controls, reviewed annually with our external compliance consultant.

7. Your rights

You have the right to access, rectify, erase and port personal data, and to object to or restrict processing, subject to legal retention duties. Submit requests to dpo@retailchecks.co.uk; we respond within one month. You may complain to the ICO at ico.org.uk.

8. Cookies

This site uses only essential cookies. Adverts served via Google AdSense may set third-party cookies; see Google's policies for details. You can control ad personalisation in your Google account settings.

9. Contact

RetailChecks Ltd, 71-75 Shelton Street, London, WC2H 9JQ. Data protection: dpo@retailchecks.co.uk. We will notify you by email of any material change to this policy.

This policy is general information, not legal advice.