Attest Technologies Limited- Privacy Notice- Prospective Employees
Date of publication: 12-01-2026
Data controller: ATTEST TECHNOLOGIES LIMITED, 25 Worship Street, London, EC2A 2DX, England, United Kingdom
(“Attest”, “we”, “us”)
ICO Registration Number: ZA120737
Contact for questions: Attest Legal Team, legal@askattest.com
Background: Attest Technologies Limited (“Attest”, “we”, “us”) collects and processes personal data relating to job applicants, prospective employees, workers and contractors to manage recruitment and, where applicable, the working relationship.
We are committed to being transparent about how we collect and use personal data and to complying with our data protection obligations.
This notice does not form part of any contract of employment or contract for services. We may update it from time to time and will publish the latest version on our website.
What personal data does Attest collect?
Depending on your interaction with us (for example, applying for a role or joining Attest), we may collect and process the
following categories of personal data:
- Identification and contact details - name, address, email address, telephone number, date of birth, gender and images from identity documents where required
- Recruitment and employment information - CVs, application forms, qualifications, skills, experience, employment history and interview or assessment notes
- Financial and tax information - bank account details and national insurance number
- Right to work information - nationality and immigration status.
- Background checks - references, and where permitted by law, criminal records checks
Special category data
We may also process more sensitive personal data where appropriate and lawful, including:
- Information about health conditions or disabilities (for example, to make reasonable adjustments); and
- Information you choose to share with us relating to ethnicity, gender identity, religion, sexual orientation, disability, veteran status (US), or caregiver status, typically for diversity, equality and inclusion purposes.
Providing this information is voluntary unless we are legally required to collect it.
How is personal data collected?
We collect personal data in a variety of ways, including
- through job applications, CVs, interviews and assessments;
- from forms or information you provide before or during employment or engagement;
- via HR, payroll or our IT systems;
- from identity documents; and
- from third parties such as referees, background check providers or public authorities, where permitted by law
Why does Attest process personal data?
We process personal data for the following purposes and lawful bases:
- To take steps before entering into a contract (for example, assessing suitability for a role and making an offer);
- To perform a contract (such as paying salary, administering benefits and managing the working relationship);
- To comply with legal obligations (including right-to-work checks, tax, health and safety and employment law obligations); and
- For legitimate business interests, including
- recruitment, onboarding and workforce planning;
- managing performance, conduct, absence and leave;
- HR and business administration;
- salary and benefits benchmarking;
- diversity and inclusion monitoring;
- IT security and acceptable use monitoring; and
- responding to or defending legal claims.
Special category data is processed only where legally permitted, for example to meet employment law obligations or where you have chosen to provide it for diversity and inclusion purposes.
Who has access to personal data?
Access to personal data is limited to those who need it for legitimate business purposes, including People, Legal, Finance, IT, and relevant managers.
We may share personal data with trusted third parties, including:- recruitment and background check providers; and
- payroll, benefits and occupational health providers
International Transfers
Some of our service providers store or process data outside the UK and the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses and the UK’s International Data Transfer Agreement.
How does Attest protect personal data?
We take data security seriously and use appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access. Third-party processors are required to follow our instructions, maintain confidentiality and implement suitable security measures.
How long is personal data kept?
If you join Attest, we retain personal data for the duration of your employment or engagement and for up to six years afterwards (or longer where required by law).
If you do not join Attest, we retain recruitment data for a limited period, typically up to 24 months, unless a longer retention period is required or you consent to us keeping your details on file.Your rights
You have rights under data protection law, including the right to:
- recruit access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion or restriction of processing in certain circumstances;
- object to processing based on legitimate interests; and
- lodge a complaint with the Information Commissioner’s Office.
To exercise your rights, please contact legal@askattest.com.
You can complain to the ICO at: https://ico.org.uk/make-a-complaint/.
What if you do not provide personal data?
Some personal data is necessary for us to consider your application or to enter into an employment or contractor agreement. If required information is not provided, we may be unable to progress your application or manage the working relationship effectively
Automated decision making
Attest does not make employment or engagement decisions based solely on automated decision-making