Vanderpuye Slater Back to site

Privacy policy

Last updated 18 August 2026 · Version 2026-08-18

This policy explains what personal data Vanderpuye & Slater Limited collects, why we collect it, and the rights you have over it. It covers this website, our recruitment work, and any contact you have with us.

Who we are

Vanderpuye & Slater Limited is a construction recruitment agency supplying temporary workers to construction sites across Greater London.

Registered nameVanderpuye & Slater Limited
Company number08736243, registered in England and Wales
VAT number518065103
Registered office18 Hillbrow, New Malden, England, KT3 4HT
Emailmark@vanderpuyeslater.com
Phone07346 811925

For data protection purposes we are the data controller for the information described in this policy. If you want to talk to us about your data, use the contact details above.

What we collect

Type of dataExamples
Contact detailsName, phone number, email address, company
Enquiry detailsTrade needed, headcount, start date, site postcode, notes you write in the form
Consent recordWhich contact channels you agreed to, the date and time, and the page you agreed on
Technical dataPages viewed, referring site, approximate device type, and a one-way hashed version of your IP address

If you apply to work through us, we also collect the data needed to place you: right to work documents, CSCS, CPCS or NPORS card details, qualifications, references, and payment details. We only ask for what a site or the law requires.

We do not knowingly collect data from anyone under 16.

Why we use it, and our lawful basis

PurposeLawful basis
Responding to your staffing enquiryLegitimate interests, and steps taken at your request before entering a contract
Supplying workers and running placementsPerformance of a contract
Verifying right to work, cards and ticketsLegal obligation
Marketing by phone, SMS or emailYour consent, which you give by ticking the boxes on our form
Keeping records for tax, insurance and auditLegal obligation
Improving the websiteLegitimate interests in running a functional site

Consent and how to withdraw it

Our contact form asks separately about phone calls, SMS and WhatsApp, and email. Every box starts unticked. We only use a channel you have actively ticked, and we record when and where you ticked it.

You can withdraw consent at any time. Reply STOP to any text message, use the unsubscribe link in any marketing email, or email mark@vanderpuyeslater.com. Withdrawing consent does not affect anything we did lawfully before you withdrew it, and it does not stop us contacting you about a live placement, which we do on the basis of our contract with you.

Who we share it with

We share your data only where we need to:

We never sell your personal data and we do not share it for third-party advertising.

Where your data is held

Our systems are hosted in the United Kingdom, the European Economic Area and the United States. Where data moves outside the UK or EEA, we rely on UK adequacy regulations or the International Data Transfer Addendum to Standard Contractual Clauses, so your data keeps the same protection it has here.

How long we keep it

RecordRetention
Website enquiries that do not become work12 months from your last contact with us
Client and worker placement records6 years after the end of the relationship, for tax and insurance
Right to work records2 years after employment ends, as required by law
Consent and opt-out records6 years, so we can evidence what you agreed to
Website analytics26 months

Your rights

Under UK GDPR you have the right to:

Email mark@vanderpuyeslater.com and we will respond within one month. There is no charge. If you are not happy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies and analytics

This site does not use advertising or tracking cookies. We store one item in your browser to remember whether you chose light or dark mode, and one session identifier so we can count a visit as a single visit rather than many.

We measure page views, which sections people read, and which links they use, so we know which parts of the site are working. This data is aggregated and your IP address is hashed before storage, so we cannot identify you from it.

Security

Data is encrypted in transit and at rest. Access is limited to the people who need it to do their job. If a breach occurs that puts your rights at risk, we will tell you and the ICO within 72 hours.

Changes to this policy

If we change this policy we will update the date at the top. Where a change materially affects your rights, we will contact you directly.