Privacy notice — Valor Resourcing Group

01Who we are

Valor Resourcing Group Ltd (“VRG”, “we”, “us”, “our”) is a specialist recruitment business placing commissioning and data centre lifecycle professionals with clients in the UK and Europe. We operate as both a recruitment agency and an employment business as those terms are defined in the Conduct of Employment Agencies and Employment Businesses Regulations 2003, meaning we place people into permanent roles and into contract assignments.

We are the controller of the personal data described in this notice.

Company number: 16436511
Registered address: Suite RA01, 195–197 Wood Street, London, E17 3NU
ICO registration number: ZB988638
Contact: info@valorresourcing.com

We are based in the UK. This notice is written to meet the UK General Data Protection Regulation and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. If you are located in the European Economic Area, the EU General Data Protection Regulation may also apply to our handling of your data. We apply the same standards to everyone whose data we hold.

02Who this notice is for

Candidates and prospective candidates; client, prospective client and supplier contacts; referees; and visitors to our website or subscribers to our updates.

If you work for VRG, a separate privacy notice applies to you and will be given to you directly.

03What personal data we collect

3.1 Candidates and prospective candidates

Name, contact details, location, and nationality or right-to-work status.
CV content: employment history, education, professional qualifications, certifications, competencies, site tickets and safety cards, project and commissioning experience.
Current and target remuneration, day rate, notice period and availability.
Willingness to travel, work away, or relocate, and your preferences about the type of work and clients you want to be considered for.
Notes and records of our conversations, calls and meetings with you, and correspondence between us.
Interview arrangements, client feedback, and the outcome of applications.
Marketing preferences.

3.2 Additional data collected only at placement stage

We only collect the following where it is actually needed for the role in question.

Permanent roles. Where you are introduced to a client who will employ you directly, the client handles your employment paperwork and pays you. We do not collect your bank details, National Insurance number or tax information. We may collect:

references from previous employers or clients, where you have asked us to take them up;
confirmation of your right to work, and copies of identity or qualification documents, where the client asks us to verify them before making an offer;
results of background, qualification, certification or security checks where the role or site requires them.

Contract assignments. Where you work on assignment and are paid by us, or through an umbrella company, payroll provider or your own limited company arranged in connection with the assignment, we will also collect:

bank details, National Insurance or equivalent number and tax information;
umbrella company or limited company details;
proof of identity and right to work, which we are required to check;
timesheets and records of hours worked.

Site requirements. Where a client site requires it, we may need to collect medical fitness, occupational health clearance, or a safety-related declaration.

3.3 Special category and criminal offence data

We do not routinely collect data about health, racial or ethnic origin, religion, sexual orientation, trade union membership, or criminal convictions, and you should not send us this information unless we specifically ask for it.

We will only process it where you tell us about a health condition or disability so that we can arrange reasonable adjustments to an interview, where a client site requires medical or occupational health clearance, or where a role legally requires a criminal record check or security clearance.

Where we do, we rely on the conditions in Schedule 1 of the Data Protection Act 2018 relating to employment, social security and social protection, and to substantial public interest where applicable. We hold this data for the shortest period needed and restrict access to it. We never input special category data into AI tools.

3.4 Client, prospective client and supplier contacts

Name, job title, employer, business contact details, records of our meetings and calls, the projects and roles we have discussed, feedback you give us on candidates, and your marketing preferences.

3.5 Website visitors

IP address, device and browser information, pages viewed, and interaction with our emails.

04Where we get your data

Directly from you — when you send us your CV, apply for a role, speak to us, fill in a form on our website, sign up for our updates, or meet us at an event.
From publicly available professional sources — LinkedIn and other professional networks, company websites, job boards and CV libraries, industry publications, and public project or contract award announcements.
From referrals — where another candidate, client or contact recommends you.
From clients — feedback on your application, or information about your work while on assignment.
From third parties acting for us or for a client — referees, background and qualification check providers, umbrella companies and payroll providers.

If you would like to know where we obtained your details, ask us and we will tell you.

05Why we use your data, and our lawful basis

What we use it for Lawful basis

Assessing your experience and suitability for roles we are working on: Legitimate interests; steps taken at your request prior to entering a contract
Contacting you about a role, or about the market: Legitimate interests
Submitting your details to a client for a specific role: Legitimate interests. We ask for your agreement before each submission and will not send your details to a client you have not approved
Arranging interviews, giving and receiving feedback, and managing an offer: Legitimate interests; performance of a contract
Administering a contract assignment, including payroll, timesheets and invoicing: Performance of a contract; legal obligation
Verifying right to work, identity, qualifications and certifications: Legal obligation; legitimate interests
Keeping the records required of a recruitment agency and employment business: Legal obligation (Conduct Regulations 2003)
Meeting tax, accounting and anti-money-laundering obligations: Legal obligation
Maintaining our knowledge of the commissioning market and the organisations active in it: Legitimate interests
Sending market updates, insight and role alerts: Legitimate interests for business contacts; consent where the law requires it
Running and securing our website: Legitimate interests
Establishing, exercising or defending legal claims: Legitimate interests; legal obligation

Where we rely on legitimate interests, our interest is in running a recruitment business: matching people to work, supporting careers over time, and keeping accurate records of the market we operate in. We have considered whether that interest is overridden by your rights and concluded that it is not, taking into account that we work with professionals in a business context, that we tell you when we hold your data, and that you can object at any time. If you want to understand our reasoning in a particular case, ask us and we will explain it.

Where we rely on consent, you can withdraw it at any time without affecting anything we did before you withdrew it.

If you do not give us the data we ask for, we may not be able to represent you or complete a placement.

06How we use artificial intelligence

There are two places AI touches personal data in our business.

In our CRM. Our customer relationship management platform holds our candidate and client records and includes built-in AI features that can draft messages, summarise records, and answer questions about the data held in our system — which includes your contact details, CV content and our notes. The provider processes this as our processor under a data processing agreement. Your data is used to produce results for our account only, and is not used to train AI models for anyone else.

In our own writing and research. We use AI tools to draft and edit written material such as job adverts, outreach messages and market commentary, and to summarise our own notes. Where we produce commentary for publication, identifying details are removed first — names, employer names and identifying project details are stripped out, and only generic role descriptors are used. Nothing we publish is intended to identify you, your employer, or a specific project.

What we do not do. We do not make decisions about you by automated means alone. No decision that produces a legal effect or a similarly significant effect on you — including whether to represent you, whether to shortlist you, and whether to put you forward to a client — is made by an automated system. Every such decision is made by a person who has reviewed the underlying information. We do not put special category data into AI tools, and we do not use AI to infer anything about your health, background or protected characteristics.

Accuracy and your rights. AI output can be wrong or incomplete. We check AI-generated material against the underlying source before we rely on it or send it to a client. You can ask us what AI processing we have applied to your data, ask for a human to review any assessment of your suitability, and object to our use of AI in relation to your data.

07Who we share your data with

Clients, where you are a candidate being considered for a role. We ask for your agreement before each submission.
Referees, where you have named them and asked us to take up a reference.
Background, identity, qualification and certification check providers, where a role or site requires a check.
Umbrella companies, payroll providers and accountants, where you are on a contract assignment paid through us.
Recruitment partners and managed service providers, only where a client engages us through one, or where you have asked us to put your details forward through one.
Our technology providers, who act as our processors — our CRM, our email, calendar and document storage platform, our telephony and messaging providers, and the AI providers described in section 6.
Our professional advisers, where we need legal or accounting advice.
Regulators, HMRC, law enforcement and courts, where we are legally required to disclose, or where we need to establish or defend a legal claim.
A purchaser or prospective purchaser, if we sell all or part of our business.

We do not sell your personal data, and we do not share it with any third party for their own marketing or their own use.

We put a written contract in place with every processor requiring them to keep your data confidential, to process it only on our instructions, and to apply appropriate security. If you want to know which providers we use, ask us and we will tell you.

08Sending data outside the UK

Some of our providers store or process data outside the United Kingdom, and we work with clients and candidates in Europe. Where we transfer personal data outside the UK, we only do so where the destination country is covered by UK adequacy regulations, or where we have put in place the International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, with a transfer risk assessment where one is required, or where another lawful safeguard applies.

You can ask us which mechanism applies to a particular transfer and we will tell you.

09How long we keep your data

We delete or anonymise personal data once we no longer need it.

Data We keep it for

Candidate who is not placed: 2 years from our last contact. If either of us makes contact within that period, the 2 years runs again from that point
Candidate placed in a permanent role: 6 years from the end of the placement or the final related invoice, whichever is later
Contract worker on assignment: 6 years from the end of the assignment, to meet tax, payroll and limitation requirements
Records required of a recruitment agency and employment business: At least 1 year from the last work-finding service, as required by the Conduct Regulations 2003
Right to work and identity documents: 2 years after the engagement ends
Financial and accounting records: 6 years
Client and supplier contact records: For the duration of the relationship and 6 years afterwards
Marketing opt-out records: Indefinitely, so that we can continue to honour your opt-out

Where we no longer need your full record but must keep the fact that you asked not to be contacted, we remove the identifying detail rather than deleting the record entirely, so that we do not re-add your details later.

10How we keep your data secure

Access is limited to those who need it, with multi-factor authentication on our business systems. Our platform providers encrypt data in transit and at rest, and every processor we appoint is under a contractual security obligation. We have a procedure for identifying and responding to personal data breaches, including notifying the Information Commissioner’s Office within 72 hours where the law requires it, and notifying you where a breach is likely to result in a high risk to your rights.

No transmission over the internet is completely secure. If you suspect any misuse of, loss of, or unauthorised access to your data, tell us immediately at info@valorresourcing.com.

11Your rights

You have the right to be informed about how we use your data; to access the data we hold about you; to have inaccurate or incomplete data corrected; to have your data erased, or our processing of it restricted, in certain circumstances; to object to processing based on our legitimate interests, and to object to direct marketing at any time, which we will always act on; to receive data you gave us in a machine-readable format or have it sent to another controller; to withdraw consent where we rely on it; to ask about automated decision-making and profiling and ask for human review; and to complain to a supervisory authority.

To exercise any of these, email info@valorresourcing.com. We may ask you to confirm your identity. We will respond within one month, and will tell you if we need to extend that by up to a further two months because your request is complex. There is no charge unless a request is manifestly unfounded or excessive.

Some of these rights are qualified. If we cannot do what you have asked, we will explain why.

12Marketing and cookies

We send market updates, insight and role alerts to candidates and business contacts. You can opt out at any time using the unsubscribe link in any message, or by emailing info@valorresourcing.com. We will keep a record of your opt-out so that we can honour it.

The candidate registration form uses Google reCAPTCHA, provided through Netlify, to prevent automated submissions. The security check analyses browser interactions and sets the necessary _GRECAPTCHA cookie for risk analysis. We do not use advertising or analytics cookies ourselves. You can block or delete cookies through your browser settings, though the candidate form may then be unavailable. You can also email your details to search@valorresourcing.com.

13Complaints

If you are unhappy with how we have handled your personal data or your request, contact us first at info@valorresourcing.com. We will look into it and respond.

You also have the right to complain to the Information Commissioner’s Office:

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Online: ico.org.uk/make-a-complaint, opens in a new tab

If you are in the European Economic Area, you may instead complain to the supervisory authority in your own country.

14Changes to this notice

We review this notice whenever we change how we use personal data. Each version carries a version number and effective date at the top of this page, and the current version is always the one published here.

Version 2026.4 — effective 14 September 2026. Supersedes the notice dated 11 January 2026.

Your data, and what we do with it.