Privacy Policy

1. Who we are

KAB Projects is a trading name of K A B PROJECTS (NW) LTD, a company registered in England & Wales under company number 16584990, whose registered office is Apartment 2 Park Court, 1a Mesne Lea Road, Worsley, Manchester, England, M28 7EU.

We are a specialist recruitment business placing electrical, high-voltage and mechanical engineers into offshore wind and M&E construction projects. We act both as an employment agency (for permanent placements) and as an employment business (for contract and temporary supply), as those terms are used in the Employment Agencies Act 1973 and the Conduct of Employment Agencies and Employment Businesses Regulations 2003.

For the personal data described in this notice we are the data controller. That means we decide why and how your personal data is used, and we are responsible to you and to the regulator for it.

We are not required to appoint a statutory Data Protection Officer. Responsibility for data protection sits with the directors.

Our own staff, and the internal systems they use, are covered by a separate internal staff privacy notice rather than this one.

2. The personal data we collect

2.1 If you contact us through this website

Our enquiry form collects your first name, last name, work email address, company name, the type of enquiry you select, and whatever you choose to write in the message box. Nothing on the form is required beyond your name and email — please do not put sensitive information into the free-text box.

2.2 If you are a candidate or work-seeker

• Identity and contact data — name, address, telephone numbers, personal and work email, date of birth, nationality.
• Right-to-work data — passport, visa, share code, or other documents we are legally required to check, together with our record of the check.
• Career data — your CV, work history, references, education, salary or rate expectations, availability and notice period.
• Certification and competency data — GWO, IRATA, HV SAP/AP authorisations, OEM platform training, offshore survival, and the expiry dates we track against them.
• Medical fitness data — confirmation that you hold a valid offshore medical (for example ENG1 or an equivalent), and any adjustment or accessibility need you tell us about.
• Assignment and payment data — timesheets, rates, umbrella or limited-company details, National Insurance number, bank details where we or a payroll intermediary pay you.
• Placement records — which roles you were put forward for, interview feedback, and the outcome.

2.3 If you are a client or a client contact

Name, job title, employer, work contact details, the roles you are hiring for, correspondence with us, and the commercial and payment records relating to our terms of business.

2.4 Technical data about your visit

Our hosting provider keeps standard server logs, which include the IP address your device connects from, the pages requested, the time of the request and your browser type. These are kept for security and troubleshooting. We do not run analytics, advertising or profiling on this website — see section 11.

3. Where we get it from

• From you directly — the enquiry form, your CV, application forms, calls, emails and meetings.
• From publicly accessible professional sources — LinkedIn and comparable professional networks, job boards you have posted a CV to, and company websites.
• From third parties — referees you nominate, certification and training bodies where we verify a qualification, previous employers, and umbrella or payroll intermediaries.
• From our clients — interview feedback and assignment records.

Where we obtain your data from a source other than you, we will tell you within one month of getting it, or at the point we first contact you, whichever is sooner.

4. Why we use it, and our lawful basis

Where we rely on legitimate interests, we have weighed our interest in running a recruitment business against your rights and freedoms, and we have concluded that our use of your data is what you would reasonably expect from a recruiter you have engaged with. You can ask us for that assessment, and you can object to the processing — see section 10.

5. Special category and criminal offence data

Some of what we handle is special category data under UK GDPR Article 9 — principally health information connected with your offshore medical certificate and any adjustments you need, and any information about your racial or ethnic origin you give us for equal opportunities monitoring.

Where we process it, we rely on:

• Article 9(2)(b) — obligations in the field of employment law, read with Schedule 1 Part 1 paragraph 1 of the Data Protection Act 2018;
• Article 9(2)(h) — assessment of working capacity, where fitness for offshore work is in question; and
• Schedule 1 Part 2 paragraph 8 of the Data Protection Act 2018 — equality of opportunity or treatment. Monitoring data is voluntary, kept separately, and never shown to a hiring client in a form that identifies you.

We have an appropriate policy document in place covering this processing, as Schedule 1 requires.

We do not routinely carry out criminal record checks. Where a client's site access rules require one, we will tell you before it happens, tell you who is doing it, and process the result under Article 10 and Schedule 1 Part 2 of the Data Protection Act 2018.

6. Who we share it with

Everyone acting as a processor for us is bound by a written contract that meets UK GDPR Article 28. We do not sell your personal data, and we do not share it for anyone else's marketing.

7. International transfers

Our own systems are hosted in the UK or the European Economic Area wherever we can arrange it. Some of the services above are operated by providers outside the UK, and offshore wind is an international industry — a client or project may be based in Denmark, Germany, the Netherlands, Poland, Taiwan or elsewhere.

Where personal data leaves the UK, we make sure one of the following applies:

• the destination is covered by UK adequacy regulations (this covers the EEA);
• the transfer is made under the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, backed by a transfer risk assessment; or
• another safeguard permitted by Chapter V of the UK GDPR applies.

Ask us at admin@kabprojects.com and we will tell you which safeguard applies to a particular transfer.

8. How long we keep it

At the end of these periods we delete the data or anonymise it so it can no longer be linked to you. If a claim, investigation or dispute is live, we keep what is relevant to it until it is resolved.

9. How we keep it safe

Your data is held in access-controlled systems with multi-factor authentication, and is only reachable by the people who need it to do their job. Devices are encrypted, accounts are removed when someone leaves, and staff are trained on handling candidate information. We keep a record of personal data breaches and, where one is likely to result in a risk to your rights, we report it to the Information Commissioner within 72 hours and tell you if the risk to you is high.

10. Your rights

Under the UK GDPR you have the right to:

• be informed about how we use your data — which is what this notice is for;
• access a copy of the personal data we hold about you;
• rectification — have inaccurate data corrected and incomplete data completed;
• erasure — ask us to delete your data, where we have no overriding reason to keep it;
• restrict processing — ask us to pause using your data while a question about it is resolved;
• data portability — receive data you gave us in a machine-readable form;
• object — to processing based on our legitimate interests, and, absolutely and at any time, to direct marketing; and
• not be subject to a solely automated decision that has a legal or similarly significant effect on you.

To exercise any of these, email admin@kabprojects.com. We will respond within one month. If your request is complex we may extend that by up to two further months, and we will tell you why within the first month. There is no charge unless a request is manifestly unfounded or excessive. We may need to verify your identity first.

11. Cookies and similar technologies

This website does not use analytics, advertising, tracking or profiling cookies, and it does not build a profile of you. That is why you are not being asked to accept a cookie banner — there is nothing here that requires your consent under the Privacy and Electronic Communications Regulations.

The site does load a small number of resources from third parties in order to work and to look right. When it does, your browser tells those providers your IP address:

The site also links to WhatsApp (wa.me). Nothing is sent to WhatsApp until you choose to open that link and start a conversation, at which point WhatsApp's own privacy policy applies.

The site stores three small items in your browser. None of them is a cookie, none is sent to us, and none holds anything that identifies you. Clearing your browser data removes all three.

If we ever add analytics or advertising technology, we will put a compliant consent banner in place first and update this notice.

12. Complaints

If you are unhappy with how we have handled your personal data, please tell us first at admin@kabprojects.com — most things are quicker to fix directly.

You also have the right to complain to the UK's data protection regulator at any time:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

Complaints about how we operate as an employment agency or employment business, rather than about data, go to the Employment Agency Standards Inspectorate at gov.uk.

13. Changes to this notice

We review this notice at least once a year and whenever we change how we handle personal data. The version and date at the top of this page tell you which version you are reading. Where a change materially affects you, we will contact you directly rather than rely on you noticing it here.