Infraspec recognises that any personal data must be secure and only used in direct relation to the service we provide and with permission from the provider.

Our Privacy & Data Policy

Infraspec is committed to protecting our candidates’ and clients’ privacy in accordance with all relevant legislation, including the Data Protection Act 1998, the Privacy & Electronic Communications Regulations 2003 and the General Data Protection Regulations (GDPR) 2018. We use and store personal information only in accordance with the policies and procedures outlined in this policy.

Our service offering

Infraspec are a recruitment provider. We operate as an Employment Agency and Employment Business as defined by the Conduct of Employment Agencies and Employment Businesses Regulations 2003. Through this service provision we collect data, with the ‘consent’ of individuals, to perform our role.

Because of our definition we have conducted a data protection impact assessment (DPIA) as recommended by the Information Commissioners Office (ICO) and have followed the ICO’s recommend process template to create a robust policy and process for our business. This ensures we offer the best protection for our candidates and clients and that we are informed and satisfied about the policies of our third party suppliers where data may be processed. A DPIA will be performed on an annual basis.

Information collection and use

Infraspec Ltd is the sole owner of the information we gain from you. We will not sell, share, or rent this information to others in ways that differ from that disclosed in this policy.

Under GDPR rulings we ensure we have ‘consent’ from any individual before processing information and that we use the information for ‘legitimate business reasons’ only and for the best interests of all parties.

No individuals’ information is processed without an employee of Infraspec speaking to you first. We will always explain what we do with your information and why it is necessary.

If at any time you are not happy with the process you can opt out of our service. By talking to us you are not automatically opting in.

Disclosure of your information to others

Infraspec Ltd uses your information for internal, legitimate business reasons only, and does not disclose your personal information to third parties, except under the following circumstances:

  1. We may email your CV and other personal details to our clients, but only with your prior consent. We inform you of where your CV is being sent. A CV will only contain your name and work history. Further personal details may be forwarded to third parties to support the recruitment process. This may include receiving a job offer or to be paid through a factoring facility. Again, you will be consulted about this process to gain your consent.
  2. We may disclose some personal details to third parties we employ to perform functions on our behalf. These individuals or companies will have access to your information as necessary to perform their functions, but they may not share that information with any other third party. You will be made of aware of such circumstances.
  3. We may disclose such information if legally required do so to:
  4. Conform to legal requirements or comply with legal process
  5. Protect the rights or property of Infraspec Ltd.
  6. Personal data may be shared with a bank or finance provider.

The accuracy of your registration information

You are responsible for ensuring that any information or documents you provide to Infraspec Ltd is accurate, complete and your own. Infraspec Ltd is entitled, forthwith and without notice, to remove from our systems any such information found to be false, inaccurate, incomplete or not your own.

Keeping your registration information current

Everybody’s situation changes and we will always aim to keep regular contact with you however if you update your information, we would appreciate you making us aware. You can forward an updated CV or new qualifications and certifications through our website, or via email or call us and update any changes in your circumstance. We will update our systems accordingly.

Data protection

Once Infraspec Ltd has obtained your CV, we create your file on our secure cloud-based database. This data is stored on UK based servers and is fully encrypted. All your information is enclosed in this file. The file includes your CV, personal details, employment details and a record of emails and conversations gained from liaising with you. All information added is deemed necessary and helpful to Infraspec providing an effective recruitment service.

If you wish to request the removal of personal information from the Infraspec Ltd database, please contact

Data content


Infraspec receives data from our candidates primarily through them submitting a Curriculum Vitae (CV) and registration forms.

This data can include name, address, telephone numbers, date of birth, identity documentation, company details, bank account details, education, work history and conversation history. This data is added to a secure database, which Infraspec employees can use to provide its service.


Infraspec receives data from our clients either directly or indirectly through mediums such as the internet browsers, press and social media.
This data can include, names, addresses, telephone numbers, job titles, job descriptions and conversation history. This data is added to a secure database, which Infraspec employees use to provide its service.

Where we store data

Infraspec run a paperless office system, therefore the repositories for data are, database, laptop/email, & mobile phones. All software is accessed through cloud-based technologies and hard drives have encrypted security.


Infraspec Ltd take every precaution to protect your information. Access to your personal information is restricted within Infraspec Ltd. Only employees who require information to perform a specific job may be granted access to this information. We conduct an annual ‘cyber essentials assessment’ to ensure that are systems are fit for purpose. For more information on our security protocols please contact Richard Hodgkins, Director 0207 101 4449.

Accessing your information

You have the right to request a copy of the information held by Infraspec Ltd about you in our records. You have the right to have you details removed from our systems. Please see for more information.
All requests for copies of information should be sent to

In the event of a data breach

In the event of a data breach all employees are trained to report that breach immediately to a Director. The Director will ascertain if there is any risk to the rights and freedom of that said individual and report the matter to the ICO.

Changes to the policy

If Infraspec decides to change its privacy, GDPR and IT policy, we will post these changes on our websites and any associated links so that you will always know what information we gather, how we might use that information and to whom we will disclose it to.

We welcome your comments concerning our privacy policy. If at any time you have questions or concerns about Infraspec’s privacy policy or you believe that we have not adhered to this privacy policy, please contact us by email at or call, Richard Hodgkins, Director. 0207 101 4447.