Policies
Data Protection Policy
Onshore Technical handles personal information about candidates, contractors, referees, clients and our own people. This policy sets out how we meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated 9 October 2026
1. Scope
This policy applies to all personal information Onshore Technical Ltd holds, in any format, and to everyone who works for us or on our behalf, including directors, employees, contractors and consultants. For what we collect, why, who we share it with and how long we keep it, see our Privacy Policy.
2. Our principles
We make sure personal information is: • Used lawfully, fairly and transparently. • Collected for specified, legitimate purposes and not used in ways incompatible with them. • Adequate, relevant and limited to what we need. • Accurate and, where necessary, kept up to date. • Kept no longer than necessary. • Kept secure. We are responsible for, and able to show, our compliance with these principles.
3. Responsibilities
Our directors are responsible for data protection at Onshore Technical, including this policy, our records of processing and dealing with the Information Commissioner's Office. Everyone who works for us must handle personal information in line with this policy, access only what they need for their work, and report any actual or suspected data breach to a director immediately.
4. Lawful basis and transparency
We identify and record a lawful basis before using personal information for a new purpose. We tell people how we use their information through our Privacy Policy, the notices on our forms, and — where we obtain someone's details from another source — a notice sent to them within one month. We only process special category information, such as health information, where a client or site requires it, and only with an additional lawful condition under UK GDPR Article 9 and the Data Protection Act 2018.
5. Security
We keep personal information in access-controlled systems, available only to staff who need it for their role, and protected in transit by encryption. We review our security measures as our systems change. We use service providers (processors) only where they give sufficient guarantees of security, and under written contracts that require them to act only on our instructions, as UK GDPR Article 28 requires. Where information is transferred outside the UK, we use the safeguards UK law requires.
6. Data breaches
We record every personal data breach. Where a breach is likely to risk people's rights and freedoms, we report it to the Information Commissioner's Office within 72 hours of becoming aware of it. Where the risk to people is high, we tell them without undue delay.
7. Individuals' rights
We respond to requests to access, correct, delete, restrict, object to or move personal information within one month, free of charge, and we keep a record of each request and our response. Anyone can make a request by emailing info@onshoretechnical.co.uk. An objection to direct marketing is always honoured, and we keep the email address on a suppression list so that it stays honoured.
8. Retention
We keep personal information only for as long as we need it, in line with the retention periods in our Privacy Policy. Candidate records are reviewed once two years have passed without contact, and deleted unless there is a reason to keep them.
9. New systems and processing
Before introducing new technology or a new way of using personal information that is likely to pose a high risk to people, we carry out a data protection impact assessment, and we build data protection into the design of our systems.
10. Training and review
Staff who handle personal information are trained on this policy and their data protection responsibilities. We review this policy at least once a year, and whenever the law or our processing changes.
11. Contact
Onshore Technical Ltd, 128 City Road, London, EC1V 2NX. Email info@onshoretechnical.co.uk or call 0330 043 9006. You can also contact the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.