privacy notice.

introduction

This data protection notice applies to the processing of personal data we collect when you visit our website, use our mobile app, when we provide you our Services, namely in the field of recruitment and selection, mediation, temporary staffing, secondment, payroll, personal development, career guidance, coaching, planning, and personnel and salary administration as further described in the Terms and Conditions (collectively “Services”) and the processing of personal data of persons who work for companies with which we conduct (or intend to conduct) business.

Your privacy and the security of your personal data are of paramount importance to Randstad UK and the rest of the Randstad Group companies. We are responsible for ensuring that all personal data entrusted to us is processed in accordance with applicable data protection legislation, which includes the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025.

This notice explains who we are, for what purposes we may use your personal data, how we handle it, to whom we may disclose it (such as clients, service providers, and/or other Randstad Group companies), where it may be transferred to or accessed from, and what your data protection rights are.

about Randstad

Randstad UK Holding Limited and in respect of the following subsidiaries (or other group companies where indicated):

  • Randstad Solutions Limited,
  • Randstad Public Services Limited,
  • Randstad HR Solutions Limited,
  • Randstad CPE Limited,
  • Randstad Ireland Operations Ltd (100% subsidiary of Randstad Holding Luxembourg SARL),
  • Pareto Law Limited

In this notice, these entities are collectively referred to as “we”, “us”, or “Randstad UK”. Except as otherwise set out below, the specific contracting Randstad UK entity is the data controller of your personal data under applicable domestic laws.

Joint Controllership

For the efficient operation and management of our business, Randstad Group companies may in certain instances jointly define the purposes and means of processing personal data, thereby acting as joint controllers. A summary of the Joint Controllership Agreement outlining the respective roles and responsibilities of the Randstad Group companies is accessible via the Randstad Global Country Locator Link. You may contact us at any time (see the “Contact Us” section below) to learn more about these jointly-controlled activities or to exercise your rights.

website visitor and app user

When you visit our website or use the Randstad UK mobile application, we collect information related to your device, your browser, and the way you navigate our content. This includes profile information gathered when you use app features such as availability, shift scheduling, calendar integration, timesheets, payslips, contracting, and your communication inbox.

We use cookies to collect this personal data. Cookies are small text files saved on your device that enable our systems to remember your preferences (such as language), recognize you on return visits, analyze browsing trends, and speed up website navigation to make your experience more efficient.

If you interact with our virtual assistants or chatbots on our digital portals, you may engage with systems powered by generative AI. We are committed to transparency and will inform you, at the latest during your first interaction, if you are communicating with an AI system.

Processing Activities: Website & App Usage

Purpose(s) for processing

Categories of personal data

Legal basis for processing

System Administration & Management: To manage the website and app, diagnose technical problems, and analyse web traffic.

Device Usage Data: IP address, Internet Service Provider (ISP), device type and unique identifiers, screen resolution, operating system and browser versions, country-level geographic location, preferred language, date/time of access, referral URLs, pages and content viewed, clicked hyperlinks, and files uploaded/downloaded.

(a) Legitimate Interests: Pursuing our business interest to manage our digital infrastructure, optimize security, and refine our communications strategy.

(b) Consent: Where mandatory local laws require it, processing will be based strictly on your explicit consent.

Web & App Analytics: To optimize user experience, measure visitor engagement, and improve the quality of job postings.

Device Usage Data: IP address, ISP, device type and unique identifiers, screen resolution, operating system, browser version, country-level geographic location, language, referral links, and pages visited.

(a) Legitimate Interests: Pursuing our business interest to continuously improve our website, application layouts, and job matching content.

(b) Consent: Based on your consent via our cookie preferences banner.

Information Delivery & Marketing: To send requested materials (whitepapers, newsletters, event alerts) and improve our marketing communication strategy.

Identification and Contact Data: Name, e-mail address, job title and company name

Consent: Randstad UK will only send direct marketing communications if you have explicitly opted in (e.g., by selecting the relevant tick box on web forms). You may freely withdraw your consent at any time using the opt-out link in any email.

Randstad UK App Portal Management: To manage app use for searching, finding, and applying for jobs, and managing the active employment relationship. (including features for Job Search, Document View, Document Sign, Availability, Scheduling, Timesheets, Time Off, Payslips, Newsfeed, Punch Clock)

Identification and Contact Data: Name, home address, phone numbers, citizenship, country of residence, date of birth, gender (in exceptional cases), digital signature, and languages.

Authentication Data: Passwords.

App Feature Data: Shifts, employment contracts, verified ID (for onboarding), tax forms, timesheet logs, absences, travel expenses, salary slips, and feedback history.

Contractual Necessity: Processing is strictly necessary to perform our contract with you and deliver the app features you request and is therefore based on (pre-) contractual necessity.

Law Enforcement & Claims Management: To cooperate with public authorities and handle legal disputes.

Legal/Dispute Data: Personal data requested by law enforcement in connection with an investigation, or information necessary for Randstad UK to establish, exercise, or defend its legal claims.

Legitimate Interests: Necessary to defend company assets, protect our legal interests, and manage active litigation.


Our cookies

Please find more information on the cookies we use, for what purpose and further settings for configuring or deleting cookies in our cookie notice.

candidates

We use your personal data when providing our HR-services, which include services in the field of recruitment and selection, mediation, temporary staff, secondment, payroll, personal development, career guidance, coaching, planning, and personnel and salary administration as further described in the Terms and Conditions (collectively “Services”). This section also applies to candidates for internal corporate positions at Randstad.

By innovating at scale, Randstad will fulfill our compelling vision: to empower lifelong employability and deliver on our brand promise of proactivity, transparency and guidance to offer a truly enriching talent experience for finding a job around the world.

Purpose(s) for processing

Categories of personal data

Legal basis for processing

To provide our Services to you (including matching and proposing you to clients, interviews, assessments). For example, we may process your personal data to recommend jobs to you based on your profile and enable our consultants to provide you with tailored job opportunities, career advice, reskilling options, inclusiveness, suggest additional training where necessary and introduce you to hiring managers.

Identification and Contact Data: name, contact information (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken.

The processing of your data and the use of automated systems is necessary to provide you with the matching services, and is therefore based on (pre-) contractual necessity

Profile Enrichment: To keep your talent profile updated using professional information you choose to make publicly available.

Public Profile Data: Name, email, location, "open-to-work" status, current organization, job title, work history, skills, and certifications from public professional networking sites. Note: We do not collect connections or platform activity data.

Consent: Based on your explicit consent, which you can manage or withdraw at any time via your account settings.

AI Recruitment Chatbots: To facilitate initial screening, answer applicant questions, and manage automated interview flows.

Screening and Audiovisual Data: Name, contact details, CV details, text responses, and (where voice- or video-based AI tools are used) audio, video recordings, and transcriptions.

Contractual Necessity or Consent: Depending on the specific tool utilized during your application journey.

System Training & Analytics: Some of the systems that we use to provide our Services are based on machine learning technology. In order for that technology to function reliably, it needs to be trained and updated on the basis of existing data. We may also process personal data in an aggregated manner for statistical purposes.

Professional and CV Information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.). CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph, interview notes and personal data included in the cover letter or as part of the application process).

Based on our legitimate interest in training and updating our systems. We have implemented mitigating measures to limit the privacy impact, such as de-identification and an easy opt-out in your choices.

Statutory & Legal Compliance: To comply with employment, tax, equal opportunity, and workplace diversity laws.

Identifiers and Special Categories: National Insurance (NI) number, driving license, right-to-work documents, and (where legally required) details on race, ethnic origin, health, disability, and criminal records.

Legal Obligation: Necessary to satisfy UK statutory obligations under employment, tax, and social security regulations.

Dispute management and litigation

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation. Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body)

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes

B2B Marketing & Engagement: (including sending job-related communications, updates about our services and, where applicable, marketing communications that may be of interest to you).

Contact and Professional Data: Your name and contact details (including email address and phone number), gender, digital signature, and languages spoken. Information related to your professional background, including (without limitation) your job title or role, location, skills, and career interests.

Based on consent, where required, in particular for receiving marketing communications that are not strictly related to your job applications or account management; and/or Based on our legitimate interest, where applicable, to maintain and develop our relationship with registered candidates, to inform you about relevant opportunities, services, and updates related to your professional interests. You may withdraw your consent or object to receiving marketing communications at any time by using the opt-out option provided in each communication or through your account settings.

Events

Identification and contact data: name, contact information (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken. Photographs and video footage: when participating in recruitment-related events, meetings, conferences etc.

Based on our legitimate interest in maintaining a good relationship with our community of candidates and promoting our Services by inviting you to our events. In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

Surveys (including satisfaction surveys)

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Survey results: we may process your responses to questions in surveys. Information you choose to share with us: we may process additional information if you choose to share that with us.

Based on our legitimate interest to survey our candidates so as to better understand their needs, to improve our Services and to build and maintain a good relationship with our candidates.

Facilities, security and contingency planning purposes

Identification and contact data: name, contact information (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken. Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons. Information related to identification/access control cards: employee identification and access control cards may contain your name, photograph, employee number and may be linked to other details on record (department, phone number, license plate). CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding and securing our assets, our facilities, our information systems and our people. In this context, the collection and verification of identification and contact information is necessary for access control, on-site security, and effective contingency planning.

To conduct corporate transactions (including mergers, acquisitions and divestments)

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad's interest in developing its business through mergers, acquisitions and divestment.


This data may be obtained directly or indirectly from you. In the latter case, we will inform you of the purpose and data sources we use, when we communicate with you in connection with our Services (e.g. to alert you about a job opportunity), or in any event within one month of the time we indirectly obtain your data. The exception is where the provision of this information to you would cause disproportionate efforts. In that case, we may take alternative measures to protect your rights and freedoms.

Randstad may collect your data from the following sources, unless otherwise indicated for a specific processing activity:

  • Forms you complete: these clearly indicate mandatory and optional data. Please note that refusing to provide mandatory data may prevent your participation in selection processes;
  • Interviews and direct correspondence: this includes personal data gathered during video, recorded, telephone, and in-person interviews, as well as information sent via email;
  • Public social media profiles: data from your public profile may be collected to contact you as a potential candidate for current or future vacancies and to assess your suitability for positions offered;
  • Randstad Clients: clients may provide us with your personal data to facilitate your participation in their selection processes; and, or,
  • Third parties (referrers): individuals who provide employment references or information about your work or professional performance

Data retention schedules

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or to comply with local legal, tax, and audit requirements. The following standardized retention periods apply across Randstad UK:

  • Unplaced Candidates (Database Records): Retained for 3 years from the date the record was created in our database, ensuring your profile remains available for potential matchmaking.
  • Placed Candidates (Permanent Role): Retained for 5 years from the date your permanent role begins.
  • Candidates (General HR Services & Interactions): Retained for 2 years from our last interaction with you (such as profile updates, email correspondence, or logging into your account).
  • Financial, Pay, and Tax Records: Retained for 7 years to satisfy UK statutory audit and HMRC tax obligations.
  • Digital Marketplace (DMP) Validation Data: Uploaded documents and sensitive data collected specifically for Digital Marketplace validation are retained for 2 years (or for your active employment period plus 2 years to meet legal obligations).

temporary workers

Once you have been successfully matched to a temporary assignment, we will collect additional personal data from you to provide you with our Services and to support you as a temporary worker.

Purpose(s) for processing

Categories of personal data

Legal basis for processing

General HR management and administration purposes (including workforce management)

Identification information: (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken. Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/parttime/etc.). Performance-related information: including (without limitation) information on your performance reviews. Family and dependent information: information related to your family and dependents including (without limitation) details regarding family composition (names, genders, ages), any "special needs" or education requirements for children or dependents, special needs of elderly parents, emergency contact information.

The processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for compliance with employment and social security legal obligations

Compensation, Payroll, Tax & Benefits: To calculate and pay salaries, invoice clients, manage pension contributions, and process expenses.

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/parttime/etc.). Financial information: financial information including (without limitation) your bank account number, bank details, VAT number. Salary information: salary information including (without limitation) recurring payments and benefits, bonus. Performance-related information: including (without limitation) information on your performance reviews.

The processing is necessary for the performance of the temporary worker's employment contract; and/or, processing is necessary for compliance with employment and social security/tax legal obligations.

Insurance, pension and other benefits

Financial information: financial information including (without limitation) your bank account number, bank details, VAT number. Salary information: salary information including (without limitation) recurring payments and benefits, bonus.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for compliance with employment and social security legal obligations.

Performance management, career development and training

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/parttime/etc.). Performance-related information: including (without limitation) information on your performance reviews.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the development and training of employees.

Fleet Management

Identification information: (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken. Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/parttime/etc.). Vehicle information: information about your personal or company car including (without limitation) your license plate, parking tickets and driving fines.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets.

Disciplinary and grievance management, investigations, appeals (including managing complaints) and handling reports through Randstad's misconduct reporting procedure.

Identification information: (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken. Disciplinary information: information relating to disciplinary measures taken against you, if any. Grievance information: in order to assist in the reporting of grievances and (suspected) misconduct within the Randstad Group of companies, we have established dedicated channels through which stakeholders may voice concerns, either through local reporting mechanisms in place at the level of the local Randstad Group companies or, for serious misconduct (including whistleblowing), through our Integrity Line, the Randstad Group reporting facility. Whenever we receive a grievance report or a report about (suspected) misconduct we may process personal data related to the complainant, the other individuals mentioned in the complaint and the person(s) that is/are subject of the complaint and/or of the investigation into the complaint.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

Dispute management and litigation

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation. Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body).

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

Health and safety management

Special categories of data, such as: Health-related information: health-related information including (without limitation) injuries and exposure, incident reports, disability, sickness and absences and maternity leave information, as legally required. To the extent we process these special categories of data, we will protect, secure and use that information in a manner consistent with this notice and applicable laws.

The processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for compliance with employment and social security legal obligations. If not based on the above grounds: Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; or protection of the vital interests of the Data Subjects

Managing holidays, leaves and other absences

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

Processing is necessary for the performance of the temporary worker's employment contract; and, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business.

Compliance with labour, tax and social security laws and other legal or regulatory requirements (e.g. equal opportunity and workplace diversity requirements)

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Government issued identifiers: government issued identifiers including (without limitation) the national identification number, social insurance number and social security number, as legally required. This may include, without limitation, the provision of any further information that may be formally required by governmental or regulatory authorities. Special personal data: where necessary to comply with its legal obligations, or if otherwise permitted by or pursuant to law, Randstad may process data about race or ethnic origin, political opinions, religious or philosophical beliefs, genetic and biometric data, health, sex life, trade union membership, criminal record data, and/or personal data about unlawful or disruptive behavior.

Processing is necessary for compliance with employment and compliance with our legal obligations under labour, tax, social security and other laws and regulations.

IT support

Professional information: information related to your work including (without limitation) your job title, your location and your department. Information you choose to share with us: including (without limitation) information you share when using IT support or calling the helpline, and information about you that may be conveyed by your use of a webcam in communicating with us.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

Facilities, security and contingency planning purposes

Information related to identification/access control cards: employee identification and access control cards may contain your name, photograph, employee number and may be linked to other details on record (department, phone number, license plate). Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons. CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding and securing our assets, our facilities, our information systems and our people.

Network and device usage optimization and related security controls (including company network access and authentication)

Information related to your usage of Randstad devices, software and access to Randstad's network: information related to your use of our devices, software and access to our networks, including (without limitation) your browsing history, your use of email, internet and social media, whether at the workplace, on our equipment or otherwise through our networks.

Processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

Preventing, detecting and investigating fraud and other crimes, and compliance with sanctions regimes (including identification of politically exposed persons, specially designated nationals and screening against sanctions lists)

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Trade sanctions information relating to you: we may verify whether you are a politically exposed person, a specially designated national or otherwise subject to sanctions under applicable laws or regulations.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes; and/or, Processing is necessary to comply with our legal obligations (including when authorities or administrations ask information about a temporary worker).

Emergency and disaster management

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Family and dependent information: information related to your family and dependents including (without limitation) details regarding family composition (names, genders, ages), any "special needs" or education requirements for children or dependents, special needs of elderly parents, emergency contact information.

Based on a legitimate interest pursued by Randstad, which includes ensuring the safety of talent; and, Where the above ground is not possible because local mandatory law requires so, only in those limited cases may this be based on a consent.

Relocation, mobility and travel management

Professional information: information related to your work including (without limitation) your job title, your location and your department. Travel and expense data: travel and accommodation information and expenses including (without limitation) travel itineraries, hotel and travel reward cards.

Processing is necessary for the performance of the temporary worker's employment/contract; and/or, Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business.

To monitor and enforce compliance with Randstad policies and procedures

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Information related to your usage of Randstad devices, software and access to Randstad's network: information related to your use of our devices, software and access to our networks, including (without limitation) your browsing history, your use of email, internet and social media, whether at the workplace, on our equipment or otherwise through our networks.

For the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

To monitor and enforce compliance with legal obligations applicable to us (including the requirements set out in your contract with us)

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

Recruitment and staffing

Professional information: information related to your work including (without limitation) your job title, your location and your department. CV/resumes and other recruitment information: CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph, interview notes and personal data included in the cover letter or as part of the application process). Financial data: financial information including (without limitation) your bank account number, bank details, VAT number. Information you choose to share with us: we may process additional information if you choose to share that with us.

The processing is necessary for the performance of the temporary worker's employment contract; and/or, Processing is necessary for compliance with employment and social security legal obligations. If not based on the above grounds: Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; or protection of the vital interests of the Data Subjects

Profile enrichment, keeping your talent profile up to date for recruitment purposes, including matching you with relevant job opportunities. See "Profile enrichment" under "HR technologies" below for details on how this works.

Public profile data (profile enrichment): name, email address, location, open-to-work status, current organisation and job title, previous experience, skills, languages, professional summary, education, certifications and similar professional information as available on your public profile(s). We do not collect connections, endorsements, activity data or other platform-generated information.

Your consent. See "Profile enrichment" under "HR technologies" below for details on how to withdraw your consent.

Employee surveys, statistical purposes

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Survey results: we may process your responses to questions in surveys. Information you choose to share with us: we may process additional information if you choose to share that with us.

Based on our legitimate interest to survey our temporary workers so as to better understand their needs, to improve our services and to build and maintain a good relationship with our temporary workers and with the clients our temporary workers work at.

Business development and temporary worker engagement (including sending job-related communications, updates about available assignments, services and, where applicable, marketing communications that may be of interest to you).

Identification information: Your name and contact details (including email address and phone number), gender, digital signature, and languages spoken. Professional information: Information related to your professional background, including (without limitation) your job title or role, location, skills, and experience relevant to assignments.

Based on consent, where required, in particular for receiving marketing communications that are not strictly related to your temporary assignments or account management; and/or Based on our legitimate interest, where applicable, to maintain and develop our relationship with registered temporary workers, to inform you about relevant opportunities, services, and updates related to your professional interests. You may withdraw your consent or object to receiving marketing communications at any time by using the opt-out option provided in each communication or through your account settings.

Events

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Photographs and video footage: when participating in our events, meetings, conferences etc., we may process photographs or videos of you.

Based on our legitimate interest to organise events so as to better build and maintain a good relationship with the community of temporary workers and with the clients our temporary workers work at. In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

To manage memberships of employees to professional associations

Professional information: information related to your work including (without limitation) your job title, your location and your department. Trade union membership: personal data revealing your trade union membership.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business

To perform internal and external audits.

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business, including compliance with laws and regulations.

To conduct corporate transactions (including mergers, acquisitions and divestments).

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad's interest in developing its business through mergers, acquisitions and divestment.


Data retention schedules

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or to comply with local legal, tax, and audit requirements. The following standardized retention periods apply across Randstad UK:

  • Temporary Workers (Assignment Data): Retained for 5 years from the last day you worked on a temporary assignment, satisfying local employment law requirements.
  • Financial, Pay, and Tax Records: Retained for 7 years to satisfy UK statutory audit and HMRC tax obligations.
  • Digital Marketplace (DMP) Validation Data: Uploaded documents and sensitive data collected specifically for Digital Marketplace validation are retained for 2 years (or for your active employment period plus 2 years to meet legal obligations).

business relations

In the context of our Services, we process your personal data if you are working for companies with which we are conducting (or intending to conduct) business (e.g. to make offers for the Services and to maintain a business relationship with the company you work for).

What personal data do we collect about you and Why do we need your personal data

We may process the following personal data about you for the purposes specified below:

Purpose(s) for processing

Categories of personal data

Legal basis for processing

To administer and manage the contractual relationship between Randstad and our clients and suppliers;

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Necessary for the performance of the contract between Randstad and the client or supplier;

Business development (including sending direct marketing and offers);

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Depending on the circumstances this may be based either on your consent or on our legitimate interest to maintain good relations with our current or prospective clients and suppliers; If you are no longer interested in these Randstad messages you are always able to opt-out from receiving such communications.

Preventing, detecting and investigating fraud;

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Trade sanctions information relating to you: we may verify whether you are a politically exposed person, a specially designated national or otherwise subject to sanctions under applicable laws or regulations.

To comply with our legal obligations when some authorities or administrations ask information about our contact as a client (including personal data); and/or Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

Facilities, security and contingency planning purposes;

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons. CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its , company assets, employees protecting its legal interests and managing legal claims/disputes; and/or protection of the vital interests of the Data Subjects

Health and safety management.

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; and/or protection of the vital interests of the Data Subjects.

To conduct corporate transactions (including mergers, acquisitions and divestments);

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad's interest in developing its business through mergers, acquisitions and divestment.

Events

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Photographs and video footage: when participating in our events, meetings, conferences etc., we may process photographs or videos of you.

Based on our legitimate interest to organise events so as to better build and maintain a good relationship with our clients and our suppliers. In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

IT Support

Professional information: information related to your work including (without limitation) your job title, your location and your department. Information you choose to share with us: including (without limitation) information you share when using IT support or calling the helpline, and information about you that may be conveyed by your use of a webcam in communicating with us.

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

Surveys (including satisfaction surveys)

Identification information: your name and other contact information including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. Survey results: we may process your responses to questions in surveys. Information you choose to share with us: we may process additional information if you choose to share that with us.

Based on our legitimate interest to survey our clients so as to better understand their needs, to improve our Services and to build and maintain a good relationship with our clients

Dispute management, litigation and handling any reports through Randstad's misconduct reporting procedure.

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation. Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body).

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests, managing legal claims/disputes with our clients and suppliers and handling reports of potential misconduct within or relating to Randstad.

Compliance with legal or regulatory requirements

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department. This may include, without limitation, the provision of any further information that may be formally required by governmental or regulatory authorities. Special personal data: where necessary to comply with its legal obligations, or if otherwise permitted by or pursuant to law, Randstad may process data about race or ethnic origin, political opinions, religious or philosophical beliefs, genetic and biometric data, health, sex life, trade union membership, criminal record data, and/or personal data about unlawful or disruptive behavior.

Processing is necessary for compliance with our legal or regulatory obligations (e.g. obligations under tax laws to keep certain information including personal data).

To monitor and enforce compliance with Randstad policies and procedures.

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

For the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

To perform internal and external audits.

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken. Professional information: information related to your work including (without limitation) your job title, your location and your department.

For the purpose of the legitimate interests pursued by Randstad, which include the proper conduct of its business and accuracy of financial reporting.


Data retention schedules

We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or to comply with local legal, tax, and audit requirements. The following standardized retention periods apply across Randstad UK:

  • Business Relations (B2B Contacts):
    • Contracted Clients & Suppliers: Retained for the duration of the contractual relationship plus 5 to 7 years following contract termination (to satisfy UK statutory accounting requirements and contract limitation periods).
    • Prospective Clients (B2B Leads): Retained for 2 years from our last interaction with you, or until you object or withdraw your consent.
  • Financial, Pay, and Tax Records: Retained for 7 years to satisfy UK statutory audit and HMRC tax obligations.

HR technologies

our use of innovative HR technologies for talent matching and services

Our ultimate goal is to support people and organizations in realizing their true potential. We believe that the best way to achieve that goal is by combining our passion for people with the power of today's HR technologies. By HR technologies we mean technologies that help us digitize and enhance a variety of recruitment-related processes.

For example we use chatbots to improve your talent experience. Chatbots give candidates the opportunity to answer questions based on the requirements of the job they apply for. This is a user-friendly way for candidates to:

  • provide us with relevant information that may not be readily apparent from the application, profile or resume of a candidate.
  • know promptly whether their skills meet a job's essential requirements and, if not, to easily explore other jobs or to identify gaps in their skillset.
  • answer at any moment convenient to the user.

As part of the larger recruitment process, HR technologies allow us to connect candidates more quickly to our consultants. This, in turn, allows our consultants to better support candidates in exploring jobs and to deliver the right candidates more quickly to our clients. HR technologies also allow our consultants to find people based not only on the jobs they qualify for but also on the basis of jobs they are interested in.

digital marketplace in the App

Randstad App's digital marketplace automates the recruitment and placement processes. Automated decision-making is used to facilitate the recruitment and placement processes by automatically validating you for specific job profiles based on the personal data and documents (including certificates, licenses, and compliance frameworks) you upload, matching you to suitable job opportunities and creating the required contract. This means that decisions regarding your eligibility for certain roles are made without direct human involvement.

What personal data is processed?

We process your identification and contact data, which includes your name, contact information, citizenship, country of residence, date of birth, languages spoken, and, in some cases, gender. Additionally, your CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph and personal data included in the cover letter or as part of the application process) as well as any documents you upload are processed to verify your qualifications and compliance with job requirements as well as labour law requirements. Certain sensitive personal data, such as your social security number, health information or criminal background data, may be processed and collected earlier than in traditional recruitment processes, specifically when explicitly required to validate you for a job profile for the Digital Marketplace. This collection is required with a view to entering into a contract with you and is in full compliance with applicable data protection laws.

How does automated decision-making work?

The information you provide directly feeds into this automated assessment process, which is integral to the Digital Marketplace. The system evaluates various personal aspects against the job requirements set by Randstad and the employer as applicable. This is achieved by analyzing your uploaded personal data, including documents, against a predefined set of rules and thresholds. For instance, if a mandatory criterion for a job is not met based on the information in your documents, the automated system will mark you as ineligible for that specific role. This process ensures a consistent and fair assessment by uniformly applying criteria to all candidates, thereby enabling the display of relevant job opportunities to you.

Subsequently, based on your job preferences, such as your preferred commute distance and your availability, you are recommended suitable jobs or shifts. You are able to update your preferences, which in turn updates the recommended jobs and shifts.

While we are not providing a complex mathematical explanation of the underlying algorithms, our aim is to provide you with meaningful information about the rationale behind these decisions.

Legal Basis for Processing

The processing of your data and the use of automated systems for matching services are necessary for the performance of a contract (or in anticipation of entering into a contract) between you and Randstad, specifically to enable your participation in and use of our Digital Marketplace. This means that the processing of your data is based on (pre-)contractual necessity.

Please ensure that all data and documents you provide are accurate and up-to-date, as eligibility decisions, which are driven by automated decision-making, rely solely on this information. We implement robust measures to verify data accuracy, and your active input plays a crucial role in maintaining this quality.

Your Choices

  • Existing talents: If you are an existing talent, the DMP will be available to you and you can request to be validated so that you can make use of the digital marketplace. In the event you decide to opt-in to the Digital Marketplace, Randstad will use the documentation and personal data previously collected for traditional placement and matching purposes to facilitate the initial DMP validation. This is considered a compatible use of data with the original purpose of placement and matching.
  • Data Retention: We may retain your uploaded documents and personal data, including any sensitive data collected for validation purposes, for a period of 2 years since they were uploaded for the purposes of providing you our Services. Please note that these limited retention periods for certain data types also restrict the duration of your validation for the Digital Marketplace.
  • Transparency: This automated assessment, a core component of the Digital Marketplace, can significantly impact your access to job opportunities. Eligibility directly determines which jobs you are able to pursue, with eligibility increasing your employment potential and ineligibility preventing you from applying for that specific role. This type of decision has a significant effect on your career opportunities.
  • Requesting Human Intervention: If you believe a decision made through the automated decision-making process is incorrect or wish to have a human review your profile and job matching, you have the right to request human intervention. You can do this by contacting ai-escalations@randstad.co.uk.

improving the client experience

HR technologies help us to search through a broader and more diverse set of candidates so that we become even better at finding the best talent with the most relevant skill-set for our clients. Thanks to these technologies our consultants can focus on the tasks that require genuinely human traits that technology cannot emulate: creativity and emotion.

PECR Compliance & Email Tracking Pixels

Our marketing and informational emails may contain a campaign-unique, single "web beacon pixel" to help us measure campaign effectiveness by tracking open rates and hyperlink clicks.

  • Marketing & Newsletters: In strict compliance with Regulation 22 of PECR 2003, these tracking pixels can only be installed on your device with your prior, explicit, and active opt-in consent. We do not utilize pre-ticked opt-in boxes or forced consent gates. You may withdraw your consent at any time. If you do not want tracking pixels downloaded, you can set your email client to display messages in plain text rather than HTML, or disable the automatic download of images.
  • Exemptions (No Consent Required): In accordance with Regulation 6 of PECR and the modernizing exemptions introduced by Schedule 12 of the Data (Use and Access) Act 2025, your consent is not required for transactional emails (e.g., password resets), mandatory service or safety notices, or aggregated, anonymized statistical analysis.

responsible use of HR technologies

Randstad is committed to the ethical and responsible use of innovative HR technologies (you can read our AI principles here). Randstad does not use these technologies as a substitute for humans or human interaction in any part of its processes. Instead, our use of HR technologies is intended to make interactions with clients and candidates more personal, relevant and meaningful.

We strive to involve human beings whenever we make decisions that significantly impact you. If, in exceptional cases, we were to make such decisions based on a fully automated process (ie. without involvement of humans), we will only do so where that is permitted by law and after having notified you.

To ensure all candidates are treated fairly we take steps to avoid bias where we use HR technologies. For example:

  • We regularly test the output created by these technologies to identify potential unfair bias.
  • We regularly obtain expert advice to continuously improve the way in which we identify and remove bias.
  • Both our consultants and our search and match algorithms are thoroughly trained and always work together.

with whom we share your personal data

We may share your personal data:

Randstad Group Entities:

  • with other entities of the Randstad group of companies. We are part of a multinational group of companies and sometimes we may share personal data with other Randstad groups of companies for the purposes of efficient management of business, compliance with legal and regulatory requirements and to provide our Services to you (include as matching) and to our clients. For an overview of these entities, click here.

Our "partner for talent" strategy focuses on building long-term relationships with clients and talents, understanding their unique challenges, and delivering tailored solutions to help them thrive in a dynamic global talent market. We leverage data, technology, and our deep industry expertise to connect the right talent with the right opportunities.

External partners for service delivery:

  • with Randstad clients. Within the scope of our Services, including recruitment and provision of temporary work.
  • with third parties providing HR-related services to us (e.g. payroll service providers).
  • with third party providers of IT-related services (e.g. we use an external provider to support our IT infrastructure; e.g. an important part of our software and databases sit in a cloud-environment which is operated by a third party service provider).
  • with third parties providers of marketing-related services (e.g. we may store your personal data in a cloud-based CRM-application that is hosted and provided by a third party service provider; e.g. when we use a third party service provider to organise an event we may share your personal data with that third party in order to invite you to that event).
  • with providers of professional services (e.g. to our auditors, our tax advisors, our legal advisors).
  • with banks and insurers (e.g. in order to pay the salaries of our temporary workers we share some of their personal data with our bank).
  • with pension funds.

Public and Regulatory Authorities:

  • with public authorities (e.g. pursuant to applicable law Randstad must disclose personal data to the social security authorities and to tax authorities)
  • with law enforcement authorities, courts and regulatory authorities (e.g. as part of a criminal investigation police services may require us to disclose personal data to them).

We may also disclose your personal data to third parties:

  • in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; or
  • if all or a substantial part of our assets are acquired by a third party, in which case the personal data that we hold about you may be one of the transferred assets.

International Restricted Transfers & The UK "Data Protection Test"

When we transfer personal data outside the United Kingdom (UK), we ensure appropriate safeguards are observed in strict compliance with Chapter V of the UK GDPR and the Data (Use and Access) Act 2025.

Under Schedule 7 of the Data (Use and Access) Act 2025 (incorporating section 74AB of the DPA 2018), any international transfer of personal data must satisfy the statutory "Data Protection Test". This test requires us to verify that the standard of protection provided in the destination country is "not materially lower" than that provided under the UK GDPR and the DPA 2018.

To meet these requirements, we only execute transfers if:

  1. The destination country is recognized as providing an adequate level of data protection by the UK Government.
  2. The transfer is subject to standard data protection clauses approved by the UK Government (specifically the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses).
  3. Any other appropriate safeguard under Article 46 of the UK GDPR is actively maintained.

For further details regarding our international transfer protocols, please contact us at: privacyofficer@randstad.co.uk.

how we will protect your personal data

We have technical and organizational security measures in place to protect your personal data from being accidentally lost, used, altered, destructed, disclosed or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your personal data are governed by Randstad's rules for information and IT security, data protection and other internal regulations and guidelines applicable to the processing of personal data.

While we have measures in place to protect your personal data, it is important for you to understand that 100% complete security cannot be guaranteed. Accordingly, we have procedures in place to deal with data security incidents and to comply with legal requirements applicable to the detection, handling and notification of personal data breaches.

your data protection rights

Under UK data protection laws, you possess the following statutory rights regarding your personal information:

Rights

What does this mean?

1. Right to be informed

You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this notice.

2. Right of access (subject Access Request)

You have the right to access the personal data we keep about you - this is because we want you to be aware of the personal data we have about you and to enable you to verify whether we process your personal data in accordance with applicable data protection laws and regulations.

3. Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request the rectification of your personal data.

4. Right to erasure (Right to be Forgotten)

This is also known as 'the right to be forgotten' and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep it. This is not a general right to erasure, there are exceptions.

5. Right to restrict processing

You have rights to 'block' or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be 'blocked' to make sure the restriction is respected in future.

6. Right to data portability

You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such personal data transferred directly to a third party.

7. Right to object to processing

You have the right to object to certain types of processing, in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests or on public interest grounds; the right to object to processing for direct marketing purposes (including profiling); the right to object to the use of your personal data for scientific or historical research purposes or statistical purposes in certain circumstances.

8. Right to withdraw consent

If our processing of your personal data is based specifically on your consent, you have the right to withdraw that consent at any time. This includes your right to withdraw consent to our use of your personal data in the context of voluntary employee surveys.

9. Right to object to automated decision making

You have the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Automated decision making takes place when an electronic system uses personal data to make a decision without meaningful human intervention.

This right is subject to certain exceptions. For example, we may use automated decision-making when it is necessary for entering into or performing a contract with you (pre-contractual or contractual necessity) or based on your explicit consent (where you have freely given consent for such automated processing), provided that we implement appropriate safeguards, including:

  • the right to obtain human intervention;
  • the ability to express your point of view; and
  • the right to contest the decision or request a review.

If automated processing is necessary for entering into or performing a contract, your objection to the use of such processing may, in some cases, make it impossible for us to enter into or continue the contract.

If automated processing is based on a legal basis other than contractual necessity (e.g., consent), you retain the right to object or withdraw your consent at any time, and we will review your objection in accordance with our data protection requirements.


changes to this data protection notice

We may update this notice from time to time. You can see the date on which the last change was made below in this notice. We advise you to review this notice on a regular basis so that you are aware of any changes.

Complaints & Escalations

If you have any questions about this notice, wish to exercise your rights, or have any privacy concerns, you can contact our Data Privacy Team directly via the following channels:

We will handle your request with special care to ensure your rights can be exercised effectively. We may ask you for proof of identity to protect your security and ensure we do not share your data with unauthorized third parties. In accordance with the law, we will respond to your request within one month.

Lodging a Complaint with the ICO

You have the right to lodge a complaint at any time with the UK's supervisory authority, The Information Commissioner's Office (ICO), using the following contact details:

Updated 14th September 2026