Privacy Policy

1. Who we are and how to contact us

The controller of personal data collected through the Website is RAST Consultants, a project of ABCD Ventures. For privacy questions, to exercise your rights, or to contact our privacy contact, email [email protected]. Where a law requires us to appoint a representative or data protection officer in a particular jurisdiction, their details will be published on this page.

In some of our Services (for example, recruiting candidates for a client, or running a client’s payroll) we act on behalf of that client. In those cases the client decides why and how the data is used and we act as its processor or service provider; the client’s own privacy notice also applies.

2. Personal data we collect

We collect only the data we need. Depending on how you interact with us, this may include:

• Enquiry and contact data: name, email address, phone or WhatsApp number, company, the service you are interested in, and anything you write in a message or form (for example, team size or number of drivers needed).
• Job application data: name, contact details, education, experience, availability, answers to application questions, and any documents or information you choose to provide. We do not ask for government identification numbers, bank details or health information through the Website.
• Client and business contact data: names, job titles, business contact details and communications of people at client and prospective client organisations.
• Candidate and employee data processed for clients: information needed to deliver a requested Service, such as CV details, licence class and endorsements for driver recruitment, or salary and tax information for payroll, provided to us by the client or the individual.
• Technical data: IP address, browser and device type, pages viewed, referring page, date and time, and security and diagnostic logs, collected automatically by our hosting and security providers.
• Cookie and similar-technology data: described in our Cookie Policy.
• Preferences and communications: your marketing or cookie choices and records of our correspondence with you.

We do not knowingly collect special-category (sensitive) personal data through the Website. Please do not include it in free-text fields.

3. Where we get personal data

We collect data directly from you (forms, emails, calls, meetings), automatically through the Website, from our clients (about their candidates, employees or contacts), from candidates’ public professional profiles and job boards where permitted, and from referrals.

4. How and why we use personal data (purposes and legal bases)

Where GDPR or UK GDPR applies, we rely on the following legal bases:

We do not use personal data for solely automated decision-making that produces legal or similarly significant effects. Shortlisting and hiring decisions involve human review.

5. Who we share personal data with

We do not sell personal data. We share it only as described below, under written terms that require appropriate protection:

• Service providers: infrastructure and security providers such as Cloudflare (hosting, content delivery, bot protection) and Supabase (database, authentication and file storage), and providers of email, communications and business software.
• Clients: where you apply for a role or we present you as a candidate, we share relevant application details with the hiring client.
• Payment processors: if and when we collect payments online, card and bank details are handled directly by our payment service providers. We do not store full card numbers.
• Analytics and advertising partners: such as Google and Meta, only if enabled and, where required, with your consent (see our Cookie Policy).
• Professional advisers, auditors and insurers bound by confidentiality.
• Authorities and courts where we are legally required, or to protect rights, safety and property.
• Business transfers: in connection with a merger, acquisition or restructuring, subject to this policy.

6. International transfers

We work internationally, so personal data may be processed in countries other than your own, including countries that may not offer the same level of protection. Where GDPR or UK GDPR applies and data is transferred outside the EEA or UK, we use approved safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or an adequacy decision, together with additional measures where appropriate. You can request details of the safeguards by contacting us.

7. How long we keep personal data

We keep personal data only as long as necessary for the purposes described in this policy, including to satisfy legal, accounting or reporting requirements. As a guide:

When data is no longer needed we delete or irreversibly anonymise it.

8. Your rights

Depending on where you live, you may have some or all of the following rights. To exercise any of them, email [email protected]. We may need to verify your identity, and we will respond within one month (45 days for CCPA requests, extendable where permitted).

• Access a copy of your personal data and information about how it is used.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) in the circumstances set out by law.
• Restriction of processing, and objection to processing based on legitimate interests or for direct marketing.
• Portability of data you provided, in a structured, commonly used format.
• Withdraw consent at any time, without affecting earlier processing.
• Lodge a complaint with your local data protection authority (for example, the Information Commissioner’s Office in the UK or your national supervisory authority in the EU/EEA). We would appreciate the chance to resolve concerns first.

Marketing emails include an unsubscribe link, and you can also ask us to stop at any time.

9. Additional information for residents of California and other US states

We collect the categories of personal information described in section 2 (identifiers, contact information, professional and employment-related information, internet or network activity, and inferences drawn from them) for the business purposes described in section 4. In the preceding twelve months:

• We have not sold personal information for monetary consideration.
• We do not “share” personal information for cross-context behavioural advertising unless you accept advertising cookies; if you do, that sharing is limited to the advertising partners described in our Cookie Policy. You can opt out at any time through Cookie settings in the footer or by sending a Global Privacy Control (GPC) signal, which we honour.
• We do not knowingly sell or share personal information of consumers under 16.
• We do not use or disclose sensitive personal information for purposes other than those permitted by law.

California residents (and residents of other states with similar laws) may request to know, access, correct or delete personal information, opt out of sale or sharing, and not be discriminated against for exercising these rights. You may use an authorised agent, and we may require verification. Email [email protected] with the subject line “Privacy Request”. Residents of Canada, Australia, Brazil and other jurisdictions may exercise the rights available to them under local law in the same way.

10. Job applicants and candidates

If you apply for a role with RAST or through RAST for a client, we use your information to assess your suitability, communicate with you and, where you apply to a client’s vacancy, to share it with that client. By submitting an application you confirm the information is accurate. You may ask us at any time to update or delete your application. We do not share your details with a client for a role you have not applied for without first asking you.

11. Children

The Website and Services are intended for businesses and adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will delete it.

12. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based permissions for our team, bot and abuse protection, and database-level security policies. No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify you and the relevant authorities as required by law.

13. Third-party websites

The Website may link to third-party websites and services. We are not responsible for their privacy practices. Please read their policies.

14. Do Not Track and Global Privacy Control

We honour Global Privacy Control signals as a request to opt out of sale/sharing and non-essential tracking. Because there is no uniform standard for “Do Not Track” browser signals, we do not otherwise respond to them.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised. If we make material changes we will take reasonable steps to tell you, for example by a notice on the Website.

16. Contact us

RAST Consultants, a project of ABCD Ventures. Email: [email protected]. You can also use the form on our Contact page.