Privacy Policy for CAW Consultancy

Effective Date: 02/07/2026

At CAW Consultancy, accessible from www.cawconsultancy.co.uk, your privacy is crucial to us. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website.

1. Contact Details of the Data Protection Officer (DPO)

Name: Craig Willetts   
Email: Craig@CAWConsultancy.co.uk  

2. Information We Collect

When conducted BS 7858 screening we may collect personal data about you from:

- You Directly: Information you provide voluntarily, such as name and email address when filling out a contact form.
- Employers/Clients: When you apply for a role or are considered for an opportunity.
- Referees: Where relevant and permitted.
- Publicly Available Sources: Such as professional networking sites, business websites, and public records.
- Credit Reference Agencies (CRAs): Where required for consumer credit, identity, or affordability checks.
- Third-Party Service Providers: Used to support recruitment, screening, and compliance processes.

 

Credit Reference checks for screening to BS 7858

To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs).
We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data.

• Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority
  FCA Firm Reference Number: 742313

• TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority
  FCA Firm Reference Number: 737740

The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.

Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices:

• Creditsafe Privacy / Transparency Notice:
  Transparency Notice | Customers & Suppliers

• TransUnion Bureau Privacy Notice:
  https://www.transunion.co.uk/legal/privacy-centre/pc-bureau

3. Legitimate Interests Pursued by the Controller

Our legitimate interests include:

- Operating our business.
- Fulfilling contractual obligations.
- Ensuring system and data security.
- Preventing fraud.
- Supporting audit and compliance activities.
- Protecting TransUnion data.

These interests are balanced against the rights and freedoms of individuals, with appropriate safeguards in place.

4. Use of Your Information

We use your information for the following purposes:

- Respond to Inquiries: To answer your questions and provide customer support.
- Website Improvement: To enhance our services based on user feedback.

5. Data Sharing and Disclosure

We do not share, sell, or disclose your personal data to any third parties. Your information is kept confidential and used solely for the purposes stated above.

6. Data Security

We implement reasonable security measures to protect your personal data from unauthorized access or disclosure. However, no method of transmission over the internet or electronic storage is perfectly secure.

7. Data Retention Period

We keep personal data only for as long as necessary to fulfill its purpose and to meet legal or regulatory obligations. Data used for credit reference or affordability checks is retained only for as long as required and then securely deleted.

8. Provision of Personal Data

The provision of certain personal data is primarily contractual and, in some circumstances, required to meet legal and regulatory obligations. Personal data is required to:

- Enter into and perform contracts with customers, suppliers, or business partners.
- Process orders, manage accounts, and deliver goods and services.
- Verify identity and prevent fraud.
- Comply with applicable legal, regulatory, accounting, and tax obligations.

Consequences of Not Providing Personal Data: If you choose not to provide the personal data we request, we may be unable to:

- Enter into a contract with you.
- Fulfill orders, supply goods, or provide services.
- Conduct necessary verification, compliance, or fraud prevention checks, which may delay or restrict our services.

Where personal data is requested for optional purposes, such as marketing communications, providing this data is not mandatory, and you may withdraw your consent at any time without affecting your ability to receive goods or services from us.

9. Automated Decision-Making and Profiling

Non-Automated Decision Making and Profiling: We may use automated systems and tools to support certain business processes, such as risk assessment, fraud prevention, affordability checks, identity verification, or record management. These tools may analyze personal data using predefined criteria or rules to generate indicators, scores, or recommendations. However, we do not make decisions that have a legal or similarly significant effect on individuals based solely on automated processing. Any such decisions are subject to meaningful human review.

10. International Data Transfers

We do not transfer, store, or process personal data outside of the United Kingdom. All personal data is handled exclusively within the UK and is not accessed by individuals or third-party providers located outside of the UK.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page, and we encourage you to review it periodically for updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

CAW Consultancy  
Email: Craig@CAWConsultancy.co.uk  
Phone: 07427535662 
Address: Suite 3 Turner Business Centre, Manchester, M24 1RU