Privacy Policy
Home / Privacy
Core Search Recruitment Ltd (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring the security of the personal data we process. This Privacy Policy explains how we collect, use, disclose, and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our services, including PAYE and CIS payroll processing, you consent to the practices outlined in this policy.
1. Who We Are
Core Search Recruitment Ltd provides specialist payroll services including PAYE and CIS processing for companies, subcontractors, and temporary workers across the UK. We act as a Data Controller when we collect and use your personal data in the course of delivering our services.
If you have any questions about this policy or your data, you can contact us:
Telephone: 0333 051 0988
Email: info@coresearch.ltd
2. What Information We Collect
We may collect and process the following types of personal data:
a. For Clients (Businesses/Agencies):
Company contact details (name, phone, email)
Names and roles of key personnel
Bank account details for billing and payments
Payroll data relating to your workers (as a processor on your behalf)
b. For Workers (PAYE or CIS):
Full name, address, date of birth
National Insurance number
Unique Taxpayer Reference (UTR) for CIS workers
Contact information (email, phone)
Payment details (bank account, payment frequency)
Timesheets, hours worked, rate of pay
Right to work documentation (passport, visa etc.)
Tax code and payroll history
Pension enrolment data
3. How We Use Your Information
We use personal data for the following purposes:
To provide payroll processing services (PAYE and CIS)
To verify subcontractor CIS status with HMRC
To issue payslips, payment summaries, and statements
To meet legal and regulatory obligations (e.g. tax reporting)
To respond to enquiries and provide customer support
To manage invoicing, billing, and payment reconciliation
To maintain internal records and audit trails
4. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:
Contractual Obligation – processing is necessary to deliver payroll services to you or your workers.
Legal Obligation – for meeting statutory requirements such as tax reporting to HMRC.
Legitimate Interests – for efficient business operations and communication.
Consent – where we rely on consent (e.g. marketing), you can withdraw it at any time.
5. How We Share Your Information
We may share personal data with the following:
HM Revenue & Customs (HMRC) – for RTI submissions, CIS returns, and tax obligations.
Pension providers – for auto-enrolment and contributions.
Software providers – payroll platforms, cloud storage, or CRM systems (under strict data agreements).
Banks and payment providers – to facilitate salary or CIS payments.
Legal or regulatory authorities – where required by law.
We do not sell, rent, or trade personal data to third parties.
6. Data Retention
We retain personal data only as long as necessary to fulfil legal, contractual, and operational requirements.
Payroll data: Retained for a minimum of 6 years in line with HMRC and financial regulations.
Worker records: Retained as required under employment and CIS regulations.
Data is securely disposed of once retention periods have expired.
7. Data Security
We take data protection seriously and implement appropriate technical and organisational measures to protect personal information. These include:
Encrypted data storage
Access control and role-based permissions
Secure backups
Staff training and confidentiality agreements
Regular reviews of data handling procedures
8. Your Rights
Under the UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate or incomplete data
Request erasure (where applicable)
Restrict or object to processing
Data portability
Withdraw consent at any time (for consent-based processing)
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, please email info@coresearch.ltd.
9. Marketing Communications
We may send occasional updates or newsletters related to our payroll services. You can opt out at any time by clicking ‘unsubscribe’ in the email or by contacting us directly.
10. Third-Party Websites
Our website may contain links to external sites. We are not responsible for the privacy practices of other websites. We recommend reviewing their privacy policies separately.
11. Policy Updates
We may update this Privacy Policy from time to time. Any changes will be posted on our website with a revised effective date.
📩 Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Core Search Recruitment Ltd
Telephone: 0333 051 0988
Email: info@coresearch.ltd