Privacy Policy

1. Who We Are

UKSecurityJobs.co.uk is operated by Digital Software Group Ltd ("we", "us", "our"). We are a verified security jobs platform connecting SIA-licensed security professionals with security employers across the United Kingdom.

We are committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

Security Officers (Candidates)

• Full name, date of birth, gender (optional)
• Contact details — email address, phone number
• Current and previous addresses (5-year history)
• SIA licence number(s) and expiry dates (encrypted at rest)
• Employment history including employer details, dates and job titles
• Referee contact details — the name, job title, email address and telephone number of a manager at each of your previous employers who can verify your employment
• Driving licence details and vehicle information
• Qualifications, certifications and training records
• Interview responses and professional profile information
• Right to work documentation
• Profile photo (if uploaded)

Employers

• Company name and Companies House registration number
• Contact name, position, email address and telephone numbers
• Company address and website
• Company logo (if uploaded)
• Job posting details

All Users

• Authentication data (managed by Clerk — see Section 8)
• Usage data and analytics (via Google Analytics 4)
• IP address and browser/device information

3. How We Use Your Data

Candidates

• To verify your SIA licence against the public SIA register
• To build and maintain your BS7858-ready vetting profile
• To match you with relevant security job opportunities
• To share your profile with employers when you apply for a role
• To send you job match alerts, availability reminders and platform notifications
• To comply with our legal obligations
• To share your profile with employers operating a talent pool, and to notify you of available shifts, if you have opted in to the talent pool feature

Employers

• To verify your company details
• To publish your job listings to verified candidates
• To process payments for job posting services
• To send platform notifications and service updates

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: Processing necessary to provide the platform services you have signed up for
• Consent: Where you have given specific consent — for example, for optional profile information you choose to provide, or to receive updates about the platform if you have asked us to.
• Legitimate interests: To improve our platform, prevent fraud and ensure security
• Legal obligation: Where required by law

5. Special Category and Criminal Offence Data

We have deliberately designed UKSecurityJobs so that we do not collect special category personal data (such as health, ethnicity, religion, or sexual orientation) or criminal offence data (such as criminal convictions or driving bans).

Where eligibility for security work depends on these matters, that assessment rests with the relevant authorities and employers: the Security Industry Authority carries out the statutory criminal record check when it issues a licence, and your employer carries out BS7858 vetting before you start work. We do not duplicate those checks, and we do not ask you to disclose that information to us.

The most sensitive information we do hold is your SIA licence number and your address history. These are encrypted and access to them is strictly limited.

6. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• With employers: When you apply for a role, your profile is shared with that employer only
• Service providers: Supabase (database — EU West, Ireland), Clerk (authentication), Render (API hosting), Cloudflare (CDN and security), Google Analytics (usage analytics)
• Legal requirements: Where required by law, court order or regulatory authority
• SIA verification: We check your licence number against the publicly available SIA licence register

Referee details

When you enter your employment history, you give us the contact details of someone at each previous employer who can verify that you worked there. This is required by BS7858, the vetting standard for security personnel.

We never contact your referees ourselves. Their details are shown only to an employer whose vacancy you have applied to, so that the employer can carry out their own vetting. That employer decides whether to contact them, and is responsible for that contact.

We hold referee details for as long as your account exists, and delete them when your account is deleted. We rely on our legitimate interest in enabling employment verification for security roles.

If you are a referee whose details have been given to us, you have the same rights over that information as anyone else. Contact admin@uksecurityjobs.co.uk and we will tell you what we hold and act on any request you make.

7. Talent Pools

Some security companies using UKSecurityJobs operate a talent pool: their own bench of trusted officers they contact directly when work comes up, including short-notice and ad hoc shifts as well as permanent roles.

This is entirely optional and switched off unless you choose to turn it on.

How you become findable

You can only be found by these companies if you switch on "let employers find me" in your profile. The switch is only available once your profile is complete and your SIA licence has been verified. You can switch it off at any time, and you can choose whether all participating companies can see you or only the ones you select. You can also block named companies.

A list of the companies currently using the talent pool is published on the platform so you can see exactly who can find you.

What is shared, and when

• When you have switched on "let employers find me": your first name and last initial, your town or city, your verified SIA licence types, your availability status, and whether your address and employment history cover the last five years. No contact details.
• When you accept an invitation to join their talent pool: the above, plus your full name, email address and telephone number, so they can contact you.
• When you are a member of their talent pool: the above, plus any notes the company records about you, and your responses to the shift callouts they send you.

Our lawful basis

We rely on your consent (UK GDPR Article 6(1)(a)) for all talent pool processing. You give that consent twice: once when you switch on "let employers find me", and again when you accept an individual company's invitation. We record the date and the exact wording you agreed to on each occasion.

You can withdraw consent at any time, without giving a reason, by switching off "let employers find me" and by using the "leave pool" button for any company whose pool you have joined. Withdrawing consent does not affect anything done before you withdrew it, and does not affect your ability to use the rest of the platform.

Shift callouts

If you are a member of a company's talent pool, they can email you about available shifts. Each email contains the shift details and a link to say whether you are available. Replying that you are available does not confirm the shift — the company will contact you.

You will stop receiving callouts if your SIA licence expires, and will start receiving them again once a renewed licence is verified. You can stop them permanently by leaving the pool.

Companies operating a talent pool

Each company operating a talent pool is a separate data controller for the information it receives about you, and is responsible for how it uses that information. Digital Software Group Ltd remains the controller for the platform itself.

Risk Secured Ltd is currently the only company using this feature. Risk Secured Ltd and Digital Software Group Ltd share a common director. Risk Secured Ltd can see only those candidates who have chosen to be findable and have not blocked it, exactly as any other participating company would.

How long this data is kept

• Your findability setting and your choices about which companies can see you: kept while your account exists.
• A record of an invitation you declined, or where a company decided not to proceed: deleted after twelve months.
• Your talent pool membership, including after you leave a pool: kept while your account exists, so that you are not invited again by a company you have left.
• Shift callouts and your responses to them: kept while your account exists.

Deleting your account removes all of the above. See the section on your rights.

8. Third-Party Services

Clerk (Authentication): We use Clerk to manage user authentication. Clerk processes your email address and name to provide sign-in functionality. Clerk's privacy policy is available at clerk.com/privacy.

Supabase (Database): Your profile data is stored in a Supabase PostgreSQL database hosted in EU West (Ireland, eu-west-1). Data does not leave the European Economic Area. Supabase's privacy policy is at supabase.com/privacy.

Google Analytics 4: We use GA4 to understand how the platform is used. This uses cookies. You can opt out via our Cookie Policy.

9. Data Retention

• Candidate profiles: Retained while your account is active. Deleted within 30 days of account deletion request.
• Employer data: Retained while your company account is active. Deleted within 30 days of account deletion request.
• Job applications: Retained for 12 months after the application date.
• Analytics data: Retained for 14 months (Google Analytics default).
• Talent pool — findability setting and employer choices: kept while your account exists.
• Talent pool — declined invitations or where a company did not proceed: deleted after twelve months.
• Talent pool membership (including after leaving a pool): kept while your account exists, so that you are not invited again by a company you have left.
• Talent pool — shift callouts and responses: kept while your account exists.

10. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, use our contact form or email admin@uksecurityjobs.co.uk. We will acknowledge your request within three business days and respond substantively within one calendar month from the date of receipt, in accordance with UK GDPR Article 12. You also have the right to complain to the Information Commissioner's Office (see Section 15) if you are dissatisfied with how we handle your request.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Field-level encryption for SIA licence numbers
• HTTPS encryption for all data in transit
• Row-level security on database tables
• Authentication via Clerk with industry-standard security
• Regular security reviews and planned penetration testing

12. Cookies

We use cookies to operate the platform and analyse usage. For full details, see our Cookie Policy.

13. Children

Our platform is intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. The date at the top of this page shows when the policy was last updated.

15. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please contact us first or email admin@uksecurityjobs.co.uk.