Privacy policy
This notice explains what personal data Poscas Limited collects through this website, why we collect it, who it is shared with and how long we keep it.
Last updated
Who we are
Poscas Limited(“we”, “us”) is the data controller for personal data collected through https://www.poscaslimited.co.uk. We provide security, cleaning, property and temporary staffing services in the United Kingdom.
Registered office: [registered office address to be confirmed]. Company number: [company number to be confirmed]. ICO registration: [registration number to be confirmed].
For any question about this notice or about your data, contact info@poscaslimited.co.uk or call +44 7482 948882.
What we collect
We only collect what you choose to send us through a form on this site.
- Enquiry and quote forms: your name, email address, and optionally your phone number, company, location, preferred start date and the details of your requirement.
- Job applications: your name, email address, location, preferred area of work, and optionally your phone number, availability, a covering note and your CV.
- Newsletter sign-up: your email address and optionally your name.
- Technical information: your IP address and the country and city your request appears to come from. This is used to rate-limit form submissions and to detect automated abuse.
We do not use advertising cookies, analytics cookies or third-party trackers, and this site sets no cookies for marketing purposes.
Why we process it, and our lawful basis
- Responding to your enquiry — necessary to take steps at your request before entering into a contract (UK GDPR Article 6(1)(b)).
- Considering your job application — legitimate interests in assessing candidates for roles we recruit for (Article 6(1)(f)), and steps prior to a contract of employment.
- Sending you newsletter updates — your consent (Article 6(1)(a)), given by confirming the link we email you. We use double opt-in, so nothing is sent until you confirm from the address itself. You can withdraw consent at any time.
- Preventing spam and abuse — legitimate interests in keeping our services available and our systems secure (Article 6(1)(f)).
Who your data is shared with
Your submission is emailed to our monitored enquiries inbox. We do not sell personal data, and we do not share it for anyone else’s marketing.
- Resend — our email delivery provider, which transmits messages on our behalf. Your details pass through their systems as part of sending the email.
- Vercel — our hosting provider, which serves this website and runs the code that processes your submission.
Both providers process data on our instructions under a data processing agreement. Where data is transferred outside the UK, that transfer relies on the UK International Data Transfer Addendum or equivalent safeguards.
How long we keep it
This website has no customer database. Your submission exists as an email in our enquiries inbox and, for a limited period, in our hosting provider’s operational logs.
- Enquiries and quote requests — retained for up to 24 months so we can respond to follow-up questions and honour previous quotes.
- Job applications and CVs — retained for up to 12 months so we can match you against roles as they open. Tell us at any time if you would prefer we delete them sooner.
- Technical logs — retained for up to 30 days. Email addresses, phone numbers and names are masked in our application logs before they are written.
Your rights
Under UK data protection law you have the right to:
- ask what personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- ask us to delete your data;
- object to or restrict how we use it;
- withdraw consent to marketing at any time;
- receive data you gave us in a portable format.
To exercise any of these, email info@poscaslimited.co.uk. We will respond within one month.
If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
How we protect it
- All traffic to this site is encrypted in transit with HTTPS, enforced by HSTS.
- Form submissions are validated on the server, rate-limited by origin, and screened for automated abuse.
- Personal data in our application logs is masked — an email address is recorded as
jo***@example.comrather than in full. - Newsletter confirmation and unsubscribe links are cryptographically signed and expire, so they cannot be forged or reused.
Changes to this notice
We update this notice when our processing changes. The date at the top reflects the most recent revision. Material changes affecting how we use data you have already given us will be communicated directly where we hold a contact address for you.
Sections marked [to be confirmed] require the company's registered details before publication. Have this notice reviewed against your current processing and, where applicable, by a legal adviser.