RysUp ("we", "us") provides HR advisory and recruitment support services to businesses. This policy explains what personal data we collect, why, and how we handle it, in line with UK GDPR and the Data Protection Act 2018.
When you enquire about or use our services, we may collect: your name and contact details, your business's name and size, and — where you become a client — HR-related data about your employees necessary to provide advice (e.g. names, roles, dates relevant to contracts, disciplinary or absence matters). For recruitment support, this may also include candidate details such as CVs, application materials, and interview notes.
To respond to enquiries, deliver the HR advisory or recruitment service you've engaged us for, produce documents and advice on your behalf, and meet our own legal and contractual obligations.
Where we process personal data about your employees or job candidates on your behalf, we act as a data processor and you remain the data controller. We only use that data to deliver the services you've instructed, and do not use it for any other purpose.
Data is stored digitally using reputable, access-controlled business tools (such as encrypted cloud storage and email), and is not kept in physical form beyond what's needed for a short working period. We limit access to the two of us, and take reasonable technical and organisational measures to protect data against unauthorised access, loss, or misuse.
We do not sell personal data. We may share data with service providers who support our operations (e.g. document storage, payment processing), under appropriate agreements. For recruitment support, candidate data is shared only with you, the hiring business, unless you instruct us otherwise.
We retain personal data only as long as necessary for the purposes described, or as required by law. Candidate data from recruitment engagements is retained only for the duration of the hiring process plus a short period afterwards, unless you ask us to delete it sooner or retain it for a specific lawful reason.
Under UK GDPR you have rights to access, correct, delete, or restrict use of your personal data, and to complain to the Information Commissioner's Office (ico.org.uk) if you have concerns.
Questions about this policy: hello@rysup.co.uk