Vester Group

NU-STAFF LIMITED - Privacy Policy

Effective date: 21/04/2026
Company number: 02784808

1. Who We Are

Nu-Staff Limited ("we", "us", "our") is an established temporary and contract recruitment partner with over 30 years of experience connecting people and businesses across a wide range of sectors. We are committed to personal service, integrity, and transparency. Our registered office is Pembroke House, Llantarnam Park Way, Cwmbran, Wales, NP44 3AU.
Nu-Staff Limited is part of the Vester Group. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit www.nustaff.com (the "Site"), use our services, or interact with us in any way.
By using the Site or sharing your personal data with us, you agree to the practices described in this policy.

2. Data We Collect

Because of the nature of temporary and contract recruitment, we may collect and process a wider range of personal data than a typical business, including:

• Identity data: name, title, date of birth
• Contact data: email address, telephone number, postal address
• Employment and professional data: CV, work history, qualifications, skills, references
• Right to work documentation: passport, visa, or other eligibility documents as required by law
• Financial data: bank account details and National Insurance number (for payroll purposes where applicable)
• Timesheet and attendance data: hours worked, shift records, attendance information
• Health and safety data: where relevant to your role or workplace requirements
• Usage data: pages visited, time on site, IP address, device and browser information
• Marketing and communications data: your preferences for receiving communications from us
• Technical data: IP address, device identifiers, browser type, operating system, cookies and similar technologies

We may also work with aggregated or anonymised data that cannot identify you individually.
Some of the data we collect, such as right to work documents and financial data, is sensitive. We handle this data with additional care and only use it for the specific purposes described below.

3. How We Use Your Data

We use personal data for purposes including:

• Placing candidates in temporary, contract, or permanent roles
• Verifying your right to work in the UK, as required by law
• Processing payroll and making payments where applicable
• Managing timesheets, shift records, and attendance
• Presenting candidate profiles to client organisations (with your knowledge and consent)
• Communicating with you about available roles, shifts, or updates
• Maintaining a candidate pool for ongoing and future placements
• Sending marketing communications where you have consented or where a lawful exemption applies
• Operating, analysing, and improving the Site
• Meeting our legal and regulatory obligations, including employment law and tax requirements
• Preventing fraud and maintaining security

4. Legal Basis for Processing

Under the UK GDPR and the Data Protection Act 2018, we rely on one or more of the following legal bases:

• Consent (where you have given it)
• Contract performance (or to take steps before entering into a contract, such as processing your application)
• Legal obligation (for example, right to work checks and payroll compliance)
• Legitimate interests (for example, retaining candidate data to support ongoing or future placements)

For sensitive categories of data such as health information, we rely on explicit consent or the performance of employment-related legal obligations, as applicable. Where we rely on legitimate interests, you may object to that processing at any time.

5. Who We Share Your Data With

We may share your personal data with:

• Client organisations with temporary or contract vacancies (only with your awareness)
• Other companies within the Vester Group
• Payroll providers or umbrella companies where relevant to your engagement
• Trusted third-party service providers (IT, cloud hosting, CRM, email platforms)
• HMRC and other regulatory or public authorities when required by law
• Professional advisors such as lawyers and auditors
• Parties involved in any corporate transaction such as a merger, acquisition, or restructuring

All third parties are required to protect your data and use it only for the purposes we specify.

6. International Transfers

Some of our service providers may operate outside the UK or the European Economic Area. Where we transfer data internationally, we put appropriate safeguards in place, such as standard contractual clauses or other protections recognised under UK law.

7. How Long We Keep Your Data

We retain personal data for as long as necessary for the purpose it was collected, or as required by law. Payroll and financial records are typically retained for six years to meet HMRC requirements. Candidate records are generally retained for up to three years from your last interaction with us. Right to work documentation is retained in accordance with the Immigration, Asylum and Nationality Act 2006.
After applicable retention periods, we securely delete or anonymise your data. You can ask us to review what we hold at any time (see Section 8).

8. Your Rights

Under data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data in certain circumstances
• Request restriction of processing
• Object to processing, including for direct marketing or where we rely on legitimate interests
• Request portability of your data
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on a request.

9. Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, misuse, or alteration. Given the sensitive nature of some of the data we hold, including right to work documents and financial information, we apply additional controls in these areas and review our security practices regularly.

10. Third-Party Links

Our Site may contain links to third-party websites. This policy does not apply to those sites, and we are not responsible for their content or privacy practices. We recommend checking the privacy policy of any site you visit.

11. Cookies

We use cookies and similar technologies to improve your experience, understand how the Site is used, and support our marketing. For full details, please see our Cookie Policy. By using the Site, you agree to cookies as described there.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, requests, or complaints about how we handle your data, please get in touch:
Nu-Staff Limited
Pembroke House, Llantarnam Park Way
Cwmbran, Wales, NP44 3AU
Email: cwmbran@nustaff.com
Phone: 01633 849320