Privacy Policy

The Sunrise Recruitment Ltd ("Sunrise", "we", "us") is a UK recruitment agency supplying temporary and permanent staff to healthcare, hospitality, education and commercial clients. We are the data controller for the personal data described in this policy, which covers our website, the Sunrise app and our recruitment services.

We are registered with the Information Commissioner's Office (ICO), registration number 00011935216.

For any privacy question or request, email London@tsrecruiter.co.uk.

• Identity and contact details: name, date of birth, address, email, phone number and photo.
• Next of kin / emergency contact details you provide.
• Work history, qualifications, training certificates, references and job preferences.
• Right-to-work information, such as passport, visa or share code details.
• Background checks, such as DBS certificate details, where the role requires them.
• Information about your health only where needed for a role (for example fitness-to-work or vaccination records for healthcare settings), handled as special category data.
• Pay information: bank details, National Insurance number and tax information.
• Availability, shift bookings, timesheets and work records.
• Location at the moment you clock in or out of a shift, to confirm attendance. We do not track your location at any other time.
• Device information needed to send you app notifications, and basic technical logs.

For clients we hold business contact details for the people we work with, together with booking, timesheet and invoicing records. For our own staff using the platform we hold their account details and activity needed to run the service.

• To find you work and manage your placements — matching you to shifts and roles, sharing your profile with clients, booking shifts and sending you offers and reminders (performance of a contract, or steps taken at your request before entering one).
• To meet our legal obligations — right-to-work checks, safeguarding and vetting checks required for regulated roles, the Conduct of Employment Agencies and Employment Businesses Regulations 2003, and pay, tax and National Insurance (legal obligation).
• To pay you and invoice clients (contract and legal obligation).
• To run and secure our service — preventing fraud, verifying attendance and improving the app (legitimate interests).
• Special category and criminal records data are processed only where needed for the role and permitted by the Data Protection Act 2018 (employment, social protection and safeguarding conditions).

We do not sell your personal data and we do not use it for automated decision-making.

• Clients where you are put forward for or booked on work, limited to what they need (for example your name, role, compliance status and relevant checks).
• Referees you name, to obtain references.
• Government bodies where required, such as HMRC and the Home Office.
• Service providers who run our systems on our behalf under contract: Supabase (secure database, hosted in Ireland), Vercel (website hosting), Resend (email delivery) and Apple (app notifications).

Some providers may process data outside the UK. Where this happens we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to protect it.

We keep personal data only as long as necessary. Typical periods are: candidate records while you are active with us and for up to 2 years after your last contact or assignment; right-to-work records for 2 years after your work with us ends (as required by the Home Office); pay, tax and accounting records for 6 years; and records required by the Conduct Regulations for at least 1 year. DBS certificate information is kept only as long as needed for the role and in line with DBS guidance. After this, data is securely deleted or anonymised.

You can delete your account at any time in the app under Profile → Delete my account, or by emailing London@tsrecruiter.co.uk. Your login is closed immediately and we delete your personal data within one month, except for records the law requires us to keep for the periods above, which are then deleted when those periods end.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, where we have no legal reason to keep it;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where we rely on it.

To use any of these rights, email London@tsrecruiter.co.uk. We will respond within one month.

• Location: used only when you clock in or out of a shift.
• Camera and photos: used only when you choose to upload a document or profile photo.
• Notifications: used to send shift offers, reminders and updates. You can turn these off at any time in your phone settings.

Your data is stored on secure, access-controlled systems with encryption in transit. Access is limited to authorised Sunrise staff who need it for their work.

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.