Attest Technologies Limited- Privacy Notice- Prospective Employees
Date of publication: 12-01-2026
Data controller: ATTEST TECHNOLOGIES LIMITED, 25 Worship Street, London, EC2A 2DX, England, United Kingdom
(“Attest”, “we”, “us”)
ICO Registration Number: ZA120737
Contact for questions: Attest Legal Team, legal@askattest.com
Background: Attest Technologies Limited (“Attest”, “we”, “us”) collects and processes personal data relating to job applicants, prospective employees, workers and contractors to manage recruitment and, where applicable, the working relationship.
We are committed to being transparent about how we collect and use personal data and to complying with our data protection obligations.
This notice does not form part of any contract of employment or contract for services. We may update it from time to time and will publish the latest version on our website.
What personal data does Attest collect?
Depending on your interaction with us (for example, applying for a role or joining Attest), we may collect and process the
following categories of personal data:
Identification and contact details - name, address, email address, telephone number, date of birth, gender and images from identity documents where required
Recruitment and employment information - CVs, application forms, qualifications, skills, experience, employment history and interview or assessment notes
Financial and tax information - bank account details and national insurance number
Right to work information - nationality and immigration status.
Background checks - references, and where permitted by law, criminal records checks
Special category data
We may also process more sensitive personal data where appropriate and lawful, including:
Information about health conditions or disabilities (for example, to make reasonable adjustments); and
Information you choose to share with us relating to ethnicity, gender identity, religion, sexual orientation, disability, veteran status (US), or caregiver status, typically for diversity, equality and inclusion purposes.
Providing this information is voluntary unless we are legally required to collect it.
How is personal data collected?
We collect personal data in a variety of ways, including
through job applications, CVs, interviews and assessments;
from forms or information you provide before or during employment or engagement;
recording and transcribing candidate responses during interviews;
via HR, payroll or our IT systems;
from identity documents; and
from third parties such as referees, background check providers or public authorities, where permitted by law
Why does Attest process personal data?
We process personal data for the following purposes and lawful bases:
To take steps before entering into a contract (for example, assessing suitability for a role and making an offer);
To perform a contract (such as paying salary, administering benefits and managing the working relationship);
To comply with legal obligations (including right-to-work checks, tax, health and safety and employment law obligations); and
For legitimate business interests, including
recruitment, onboarding and workforce planning;
managing performance, conduct, absence and leave;
HR and business administration;
salary and benefits benchmarking;
diversity and inclusion monitoring;
IT security and acceptable use monitoring; and
responding to or defending legal claims.
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms.
Special category data is processed only where legally permitted, for example to meet employment law obligations or where you have chosen to provide it for diversity and inclusion purposes.
Who has access to personal data?
Access to personal data is limited to those who need it for legitimate business purposes, including People, Legal, Finance, IT, and relevant managers.
We may share personal data with trusted third parties, including:
International Transfers
Some of our service providers store or process data outside the UK and the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses and the UK’s International Data Transfer Agreement.
How does Attest protect personal data?
We take data security seriously and use appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access. Third-party processors are required to follow our instructions, maintain confidentiality and implement suitable security measures.
How long is personal data kept?
If you join Attest, we retain personal data for the duration of your employment or engagement and for up to six years afterwards (or longer where required by law).
If you do not join Attest, we retain recruitment data for a limited period, typically up to 24 months, unless a longer retention period is required or you consent to us keeping your details on file.
Your rights
You have rights under data protection law, including the right to:
recruit access your personal data;
request correction of inaccurate or incomplete data;
request deletion or restriction of processing in certain circumstances;
object to processing based on legitimate interests; and
lodge a complaint with the Information Commissioner’s Office.
To exercise your rights, please contact legal@askattest.com.
You can complain to the ICO at: https://ico.org.uk/make-a-complaint/.
What if you do not provide personal data?
Some personal data is necessary for us to consider your application or to enter into an employment or contractor agreement. If required information is not provided, we may be unable to progress your application or manage the working relationship effectively
Automated decision making
Attest does not make employment or engagement decisions based solely on automated decision-making.
We use an AI assistant (powered by Google Gemini) to help our hiring team summarise and assess interview transcripts. AI supports our team's assessment - it does not make hiring decisions.
For the avoidance of doubt, interview recordings, transcripts and summaries are used only for assessing applications and are not used to train any proprietary or third party AI models. Please reach out to talent@askattest.com if you have any questions regarding the interview process
