Privacy Policy

Drivestaff ("we", "us", "our") is a specialist HGV driver and warehouse staffing agency. Our registered office is Unit 10, Barnfield House, Sandpits Lane, Accrington Road, Blackburn, BB1 3NY.

We are the data controller for the personal information we collect about you. If you have any questions about this policy or how we handle your data, please contact us at [email protected] or call 0161 696 1157.

Depending on how you interact with us, we may collect the following categories of personal data:

Candidates and workers

• Full name, address, date of birth and contact details (phone, email)
• Right-to-work documents (passport, visa, share code)
• Driving licence details, CPC card, digital tachograph card
• Employment history, qualifications and references
• National Insurance number and bank account details (for payroll)
• Emergency contact information
• Health information relevant to your ability to carry out driving duties (where legally required)

Client contacts

• Name, job title, business address, phone number and email address
• Details of your staffing requirements and booking history

Website visitors

• Information submitted via our contact or application forms
• Technical data such as IP address, browser type and pages visited (via analytics cookies, where consented)

We collect personal data:

• Directly from you when you register with us, submit an application, or contact us by phone, email or via our website
• From third parties such as referees, previous employers, or background-check providers
• From publicly available sources such as LinkedIn or job boards

We use your personal data for the following purposes:

• Recruitment and placement — to assess your suitability for roles and to match you with suitable assignments
• Compliance — to verify your right to work in the UK and to meet our legal obligations as a staffing agency
• Payroll and administration — to pay you for work completed and to manage your worker record
• Client services — to fulfil staffing requests from our client businesses
• Communication — to contact you about available work, assignments or changes to your booking
• Legal obligations — to comply with employment law, tax law and regulatory requirements

We process your personal data on the following legal bases under UK GDPR:

• Contract — processing is necessary to perform our contract with you or to take steps at your request before entering into a contract
• Legal obligation — processing is necessary to comply with a legal obligation (e.g. right-to-work checks, HMRC reporting)
• Legitimate interests — processing is necessary for our legitimate interests as a staffing agency, where those interests are not overridden by your rights
• Consent — where we rely on your consent (e.g. for certain marketing communications), you may withdraw it at any time

Where we process special category data (such as health information), we do so on the basis of legal obligations in the field of employment law, or with your explicit consent.

We may share your personal data with:

• Client businesses — to facilitate your placement on an assignment
• Payroll and accountancy providers — to process your pay
• Background check and compliance providers — to verify your documents and qualifications
• IT and software providers — who process data on our behalf under data processing agreements
• Regulatory bodies and government agencies — where required by law (e.g. HMRC, DVLA, Home Office)

We do not sell your personal data to third parties. Any third parties we share data with are required to keep it secure and to use it only for the purposes we specify.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations. As a guide:

• Worker and candidate records are retained for up to 6 years after the end of our relationship, in line with employment and tax law requirements
• Right-to-work documents are retained for the duration of employment plus 2 years
• Unsuccessful candidate applications are retained for up to 12 months unless you ask us to delete them sooner
• Client contact records are retained for up to 6 years after the last transaction

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

Our website uses cookies to improve your browsing experience and to understand how visitors use our site. We use a cookie consent banner to obtain your consent before placing non-essential cookies. You can manage your cookie preferences at any time through your browser settings.

Essential cookies (required for the site to function) are placed without consent. Analytics cookies are only placed with your consent.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Access to personal data is restricted to staff who need it to carry out their duties, and all staff are trained on data protection obligations.

We do not routinely transfer personal data outside the UK. Where any transfer does occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO — please reach out to us first at [email protected].

We may update this privacy policy from time to time. The latest version will always be available on this page. This policy was last reviewed in August 2026.