People Group Services Limited Company Number: 11570329

Data Protection and Privacy Policy

Introduction

This policy sets out how People Group Services Ltd (“we”, “our”, “us”) collects, uses, stores and protects personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy and data protection laws.

We are committed to safeguarding the privacy and security of personal information about our employees, workers, contractors, clients, suppliers and other individuals we interact with.

Scope

This policy applies to all personal data processed by People Group Services Ltd in the context of:

• employment and contractor relationships
• commercial and operational activities
• recruitment, onboarding, payroll and compliance services
• website usage and marketing communications

It applies whether the data is held electronically or in paper format.

Data Protection Principles

We adhere to the following principles when processing personal data:

1. Lawfulness, fairness and transparency
2. Purpose limitation
3. Data minimisation
4. Accuracy
5. Storage limitation
6. Integrity and confidentiality
7. Accountability and record-keeping

We only process personal data where we have a lawful basis to do so (e.g. contractual necessity, legal obligation, consent, or legitimate interests).

What Personal Data We Collect

Depending on the context, we may collect:

• Identification information (name, date of birth)
• Contact details (address, email, telephone numbers)
• Employment, payroll and tax information
• Financial information for payment processing
• Website usage and technical data
• Any other information individuals choose to provide

How We Collect Your Data

Personal data may be collected:

• Directly from individuals (e.g. during onboarding, forms, emails)
• From third parties where legally permitted (e.g. agencies, HMRC)
• Automatically via our website (cookies and analytics)

Purposes for Processing

We use personal data to:

• Administer contracts, payroll and compliance obligations
• Communicate with you regarding services and support
• Comply with statutory reporting and legal obligations
• Improve our services and technology platforms
• Manage recruitment processes and workforce systems

Lawful Basis for Processing

We rely on one or more of the following lawful bases:

• Performance of a contract
• Legal and regulatory compliance
• Consent where provided
• Legitimate interests that do not unduly affect your privacy rights

Data Sharing and Disclosure

Data may be provided by supplying electronic or hard copies or providing portal access to view data.

We may share personal data with:

• Government bodies and regulators (e.g. HMRC, pensions authorities)
• Auditors appointed by either Agencies or Hirer's.
• Industry regulation and accreditation bodies for the purposes of assessing and monitoring our compliance.
• Third-party service providers acting on our behalf
• Advisers, auditors and insurers where necessary
• Other organisations where required by law

We do not sell personal data to third parties.

Data Security and Retention

We implement appropriate administrative, technical and organisational measures to safeguard personal data against unauthorised access, alteration or loss.

Data is retained only for as long as necessary to fulfil the purposes it was collected for, including any legal retention period. For example, payroll and tax records may be retained for statutory periods required by HMRC.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of data in limited circumstances
• Restrict or object to processing
• Request transfer of your data
• Withdraw consent where processing is based on consent

Requests can be submitted in writing to our Data Compliance Team at compliance@peoplegroupservices.com or another contact provided by us.

We may need to verify your identity before responding to a request.

Cookies and Tracking Technologies

We use cookies and similar technologies on our website to:

• Analyse usage and improve user experience
• Support login and form functions
• Administer marketing and analytics

Information about our use of cookies (and how to control them) is set out in a separate Cookies Policy where applicable.

Marketing Communications

We may send promotional communications where you have consented to receive them. You may opt out of marketing at any time by following unsubscribe instructions included in communications or contacting us directly.

International Transfers

Personal data will not be transferred outside the UK or European Economic Area unless adequate protections are in place, in compliance with applicable law.

Complaints and Contact

If you have questions or concerns about this policy or how we use your personal data, please contact:

Data Compliance Team
Email: compliance@peoplegroupservices.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Changes to this Policy

We may update this privacy policy from time to time to reflect changes in legal requirements or our business practices. The updated policy will be published on our website with a revised effective date.

Declaration

This Policy is approved by the Board of Directors of: People Group Services Limited Company Number: 11570329

Last updated: 12th June 2026