Privacy Policy

1. Introduction

NextGen Traffic Ltd (“we”, “us”, “our”) is committed to protecting your personal data and privacy. This policy outlines how we collect, store, use, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all individuals whose data we process, including workers, contractors, clients, and website users.

2. Who We Are

We are a specialist provider of recruitment, labour supply, and CIS payroll services within the highways, civils, and traffic management sectors. Our registered office is:
[Insert Registered Address]
Email: [Insert Contact Email]
Phone: [Insert Contact Number]

3. What Information We Collect

We collect personal data necessary for the provision of recruitment, labour supply, payroll services, and legal compliance. This includes:

For Operatives and Contractors:

• Full name, address, contact details (phone, email)

• Date of birth

• National Insurance number

• UTR (Unique Taxpayer Reference)

• Bank details (for payment processing)

• Copy of ID (passport, driving licence)

• Proof of Right to Work in the UK

• Emergency contact details

• Qualification certificates (e.g. LANTRA, CITB, Streetworks, CSCS, etc.)

• Work history and references

• Medical fitness to work (where applicable)

For Clients and Businesses:

• Company name and registered address

• Contact person’s name and business email/phone

• Project site information

• Payment and invoicing details

• Communications and service agreements

Website Visitors:

• IP address and browser information

• Cookie preferences

• Information submitted via contact forms

4. How We Use Your Data

We use your data to:

• Place you into suitable job roles

• Verify your right to work and relevant qualifications

• Meet contractual obligations with clients and operatives

• Process CIS payroll and make accurate payments

• Submit CIS returns to HMRC

• Maintain safety and compliance on construction/highways sites

• Fulfil legal and regulatory requirements

• Communicate with you regarding roles, placements, and payments

• Improve our services and manage internal operations

5. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contractual obligation – to supply services to you or your company

• Legal obligation – to comply with UK employment and tax laws

• Legitimate interest – to manage our operations effectively and prevent fraud

• Consent – where required, e.g. for marketing communications (you may withdraw consent at any time)

6. Sharing Your Data

We only share your personal data with third parties when necessary, such as:

• HMRC (for payroll and CIS reporting)

• Clients (to confirm operatives’ qualifications and site readiness)

• Third-party software providers (e.g., payroll systems, CRM, compliance platforms)

• Regulatory bodies (e.g., for audits or legal compliance)

• Training bodies (to verify or renew certifications like LANTRA, CITB, Streetworks)

All third parties are required to maintain the confidentiality and security of your data.

7. Data Retention

We retain your data only for as long as necessary:

• Payroll and tax records: 6 years, as required by HMRC

• Worker registration and qualification data: 3 years after last engagement

• Client contact records: Up to 6 years post-contract

• CVs or applications: 1 year, unless a placement is made

After this period, data is securely deleted or anonymised.

8. Data Security

We implement strong physical, digital, and organisational safeguards to protect your data, including:

• Encrypted data storage and transfer

• Secure access control for staff and systems

• Regular internal audits and compliance checks

• Password protection and multi-factor authentication

• Staff training on data protection and handling

9. Your Rights

Under UK GDPR, you have the following rights:

• Access – request a copy of the personal data we hold

• Rectification – correct inaccurate or incomplete data

• Erasure – request deletion of data where it’s no longer needed

• Restriction – limit how your data is used

• Objection – object to processing under legitimate interest

• Data portability – request your data be transferred to another service

• Withdraw consent – at any time, for non-essential processing (e.g. marketing)

To exercise any of these rights, please contact us at [Insert Contact Email].

10. Cookies & Website Tracking

Our website uses cookies to enhance functionality and track basic user behaviour (e.g., Google Analytics). You can manage or disable cookies via your browser settings. For full details, see our Cookie Policy.

11. Third-Party Links

Our website may contain links to other sites. We are not responsible for the privacy practices of those websites and encourage you to read their policies separately.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in legal, regulatory, or operational requirements. The latest version will always be posted on our website.

13. Contacting Us

For data requests, concerns, or questions about this policy, please contact:

Data Protection Officer
NextGen Traffic Ltd
[Insert Address]
Email: [Insert Contact Email]
Phone: [Insert Contact Number]