Privacy Notice

The Organisation 

Autotech Recruit Limited (07463246) (including Autotech Academy) and Autotech Training Limited (13192579) (including Autotech Connect) are wholly owned subsidiaries of Autotech Group Limited (13193017). 

Each Autotech Group company acts as an independent data controller for the personal data it processes in connection with its services. Autotech Group Limited provides central corporate and administrative support but does not determine the purposes for which personal data is processed unless expressly stated. 

Autotech Recruit Limited 

Autotech Recruit is a staffing business which provides temporary and permanent recruitment services to its clients, candidates and contractors. 

Autotech Recruit Limited must process personal data (including special category personal data) so that it can provide these services – in doing so, Autotech Recruit Limited acts as a data controller. 

You may give your personal details to Autotech Group Limited subsidiaries directly, such as on an application or registration form or via our website, or through correspondence (email, telephone or video call) or we may collect them from another source, such as a jobs board, client referral or a publicly available professional profile. 

The sources from which we may collect personal data indirectly include: employment and jobs boards (such as industry-specific job sites), client referrals, and publicly accessible professional profiles such as LinkedIn. Some of this information may therefore originate from publicly accessible sources. 

Where personal data is collected indirectly, the categories of data we typically obtain include: name and contact details, employment history and work experience, professional qualifications and certifications, and professional profile information. 

We do not require or intentionally process special category personal data as part of our recruitment services. Please do not include information relating to your health, ethnicity, religious beliefs or other special category data in applications or correspondence unless specifically requested. 

Currently, Autotech Recruit Limited trades as both ‘Autotech Recruit’ and ‘Autotech Academy’. 

Autotech Training Limited 

Autotech Training Limited provides technical and management training services to its clients, their employees and partners. 

Currently, Autotech Training Limited trades as both ‘Autotech Training’ and ‘Autotech Connect’. 

Autotech Training Limited must process personal data so that it can provide these services – in doing so, Autotech Training Limited acts as a data controller. 

We may collect personal details of training attendees, including name, address, date of birth and driving licence details. Where required, we may also process information relating to training outcomes, attendance records and professional qualifications. 

For training services only, we may invite delegates to voluntarily disclose information about specific needs, adjustments, or support requirements (for example learning support, accessibility needs, mental health or other relevant personal circumstances). This information is optional and is used solely to enable us to provide appropriate support or reasonable adjustments during training. 

This personal data is required to be able to deliver the training requested and is only used in accordance with the statement below: 

1. Collection and use of personal data 

a. Purpose of processing and legal basis 

Autotech Group’s subsidiaries will collect your personal data (which may include special category personal data) and will process your personal data for the purposes of providing you with services relevant to the Autotech Group subsidiaries you are engaging with, including work-finding and recruitment services or training and related services. 

We rely on the following lawful bases under UK GDPR, depending on the activity: 

• Legitimate interests, for matching candidates to roles and managing recruitment or training relationships;  

• Legal obligation, where processing is required to comply with employment law, tax, right‑to‑work, health and safety, or regulatory requirements;  

• Contract, where processing is necessary to enter into or perform a contract with you;  

• Consent, where required (for example, for optional communications or where no other lawful basis applies). 

b. Legitimate interest 

Where Autotech Group Limited subsidiaries have relied on a legitimate interest to process your personal data, our legitimate interests is/are as follows: 

•  In order to provide work-finding and recruitment services, we need to process your personal data to ensure compliance with our terms and conditions and to match you with suitable opportunities. 

• In order to provide training services, we need to process delegates’ personal data to deliver the relevant programme and ensure compliance with our terms and conditions. 

We have assessed these interests and consider that they do not override your rights or freedoms. 

c. Special category personal data (Autotech Training Limited only) 

For Autotech Training Limited services only, the Company may process limited special category personal data where this is voluntarily provided by delegates in relation to accessibility needs, learning support, mental health or other health‑related adjustments. 

This information is processed solely for the purpose of providing appropriate support and reasonable adjustments during training. 

The lawful condition relied upon under Article 9 UK GDPR is: 

• Article 9(2)(b) – processing necessary for obligations and rights under employment and equality law; and 

• where applicable, Article 9(2)(g) – substantial public interest in ensuring equality of opportunity and accessibility. 

Special category personal data is not used for any other purpose and is not required to participate in training unless relevant to the support requested. 

d. Recipients of data 

Autotech Group Limited subsidiaries will process your personal data and sensitive personal data with the following recipients: 

• Your designated umbrella payment company or your own limited company 

• Clients of Autotech Recruit Limited 

• For Autotech Training candidates only: the Awarding Training Body 

• And/or where we are required to do so by law (for example, HMRC) 

We may also share personal data with professional advisers, auditors and IT service providers where necessary and subject to appropriate contractual safeguards. 

Personal data may be shared between companies within the Autotech Group where necessary for legitimate business purposes, such as delivering services, managing contractual relationships, or meeting legal and regulatory obligations. Each group company acts as an independent data controller for the data it receives. 

e. Statutory/contractual requirement 

Your personal data is a contractual requirement (e.g. our client may require this personal data), and a requirement necessary to enter into a contract. You are obliged to provide the personal data. If you do not, the consequences of failure to provide the data are: We would be unable to offer you the relevant work-finding, recruitment, or training services. 

f. International data transfers 

We do not routinely transfer personal data outside the United Kingdom. 
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement. 

g. CCTV and video surveillance 

We use CCTV at our premises for the purposes of safety, security, and the prevention and detection of crime. CCTV may capture images of staff, visitors, contractors, and members of the public. 

CCTV footage is monitored only by authorised personnel and is retained for a limited period (typically up to 30 days), unless it is required for investigating an incident or for legal or insurance purposes. 

Where necessary, footage may be shared with relevant third parties such as the police or insurers. 

Individuals have the right to request access to CCTV footage that includes images of them. Requests should be made using the contact details set out in this privacy notice. 

2. Data retention 

Autotech Group Limited subsidiaries will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time. 

The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from a) the date of their creation or b) after the date on which we last provided you with work-finding services. 

We must also keep your payroll records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation. 

Where Autotech Group Limited subsidiaries have obtained your consent to process your personal and sensitive personal data – name, address, email, telephone, passport, driving licence, we will do so in line with our retention policy. Where processing is based on consent, data will be deleted or anonymised when consent expires unless we are required to retain it by law. 

Where personal data relates to training services delivered by Autotech Training Limited, we are required to retain certain training and assessment records for as long as is required by the relevant awarding body, regulatory body, or applicable legislation. Retention periods vary depending on the qualification or training programme and the requirements of the relevant body. 

 Where consent is not granted Autotech Group Limited subsidiaries will cease to process your personal or special category data. 

3. Your rights 

Please be aware that you have the following data protection rights: 

• The right to be informed about the personal data Autotech Group Limited subsidiaries processes on you; 

• The right of access to the personal data Autotech Group Limited subsidiaries processes on you; 

• The right to rectification of your personal data; 

• The right to erasure of your personal data in certain circumstances; 

• The right to restrict processing of your personal data; 

• The right to data portability in certain circumstances; 

• The right to object to the processing of your personal data that was based on a public or legitimate interest; 

• The right not to be subjected to automated decision making and profiling; and 

• The right to withdraw consent at any time. 

We do not use automated decision‑making or profiling as defined under Article 22 UK GDPR. 

4. Complaints or queries 

If you have any questions or concerns about this privacy notice or how your personal data is processed, please contact: 

Jack Salsbury (Head of IT & Information Security) on GDPR@autotechgroup.co.uk. 

You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.