Name: Platform Smart Ltd

Address: Upper Deck Admirals Quarters, Portsmouth Road, Thames Ditton, Surrey, England, KT7 0XA

E-mail: cyber.security@platform-smart.co.uk; associates@platform-smart.co.uk; marketing@platform-smart.co.uk

We are registered with the Information Commissioner’s Office ZA851633

• Name

• Contact details including email address and phone numbers

• Identification documents such as passport and/or visa document

• Date of Birth

• Financial Information

• Health and medical information

• Disclosure and Barring Service (DBS), if applicable

• Employment references from prior employers, which may include P45, P60 or bank statements, if applicable

• Public media research check, if applicable

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• Carry out our obligations arising from any contracts entered into between you and us.

• Notify you about changes to our service.

• Send newsletters from time to time.

• To administer our business and support those who work with us.

• To comply with legal or regulatory requirements.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Your consent.  You are able to remove your consent at any time by contacting cyber.security@platform-smart.co.uk

2. We have a contractual obligation.

3. We have a legitimate interest.

We use the information that you have given us in order to:

• To fulfil our obligations to you as part of our Associate programme.

• Send invoices and payment reminders to you.

• Deal with enquiries and complaints.

• Comply with our legal and regulatory obligations.

• Send marketing communications to you.

We may share this information with our clients for the purposes of review and potential introduction and to trusted third parties to fulfil our obligations as an employer.  We may also share information at the request of the Police or any other statutory authority or regulator who has a reasonable need for this information to effectively conduct their business e.g. tax and payroll purposes or criminal investigations.

Your information is securely stored on MS Azure, MS 365, CMap and JobAdder.

At the end of our retention period, we will securely destroy your information.

• Category of personal information.

• Type of information held.

• Retention period.

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at cyber.security@platform-smart.co.uk if you wish to make a request.

If you have concerns about how we handle your personal information, you have the right to raise a complaint directly with us.  Please contact us at cyber.security@platform-smart.co.uk if you wish to make a complaint.  Under the Data Use and Access Act 2025, we are required to operate a transparent and accessible complaints process. We will acknowledge your complaint within 30 days and aim to provide a clear outcome without undue delay.

If you are not satisfied with our response, you may escalate your complaint to the Information Commissioner’s Office (ICO).  Details of how to contact the ICO can be found at www.ico.org.uk.