Legal

Vacruit Privacy Policy

Last updated: 22 September 2026

1. Who We Are

This policy explains how Outsource Central Ltd, trading as "Vacruit" (company number 15105569, registered office C/O Findlay Todd Accountants, Clervaux Terrace, Jarrow, Tyne and Wear, United Kingdom, NE32 5UP), collects, uses and protects personal data.
We are the data controller for the personal data described in this policy.
Questions about this policy or your data: sam@vacruit.com or WhatsApp +44 7438 862362.

When you submit our enquiry form, we collect your name, email address, phone number, company name and details of the role or hiring need you describe, so we can respond and discuss our Services.
If you book a call via our Calendly link, Calendly collects your name, email and the details you provide to schedule that call, under Calendly's own privacy policy.

Once you engage us, we collect billing and contact details needed to deliver our Services and invoice you.

As part of our recruitment process, we collect candidates' CVs, contact details, work history, right-to-work information and interview notes, so we can assess suitability and introduce them to Clients.

We process enquiry and client data on the basis of our legitimate interest in responding to enquiries and performing our contract with Clients, and candidate data on the basis of taking steps to enter into a contract and our legitimate interest in providing recruitment services.
We share data with trusted service providers who help us run our business: our website hosting/backend provider (form processing and secure storage), Resend (sending enquiry notifications by email), and Calendly (booking consultation calls). Each processes data only on our instructions, under its own terms.
We do not sell personal data, and we only share candidate details with the specific Client(s) they are being considered for.

Because we recruit candidates based in the Philippines, South Africa, Nigeria, India and Pakistan, candidate personal data may be transferred to, or accessed from, those countries as part of our recruitment process.
In practice, we keep candidate data within a closed circle: it is only shared between Vacruit, the candidate (VA) themselves, and the specific Client, and only once a placement with that Client is confirmed. We have not put a formal cross-border transfer mechanism (such as an IDTA or the UK Addendum to the EU Standard Contractual Clauses) in place yet. Please have a UK solicitor confirm whether this limited-sharing approach is sufficient for our current recruitment activity, or whether a formal safeguard should be added given the countries involved.
Our website hosting and email providers may also process data on servers outside the UK; where they do, they provide their own safeguards under their respective privacy policies.

We keep enquiry and client data for as long as needed to provide our Services and meet our legal and accounting obligations, and candidate data for as long as they may reasonably be considered for placements, or as otherwise agreed.
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
Under UK GDPR, you have the right to access, correct, delete, or restrict use of your personal data, to object to certain processing, and to data portability where applicable. To exercise these rights, contact us at sam@vacruit.com.

Our website does not currently use analytics or tracking cookies. If this changes in future, we will update this policy and ask for your consent where required.
Our Services are intended for businesses and individuals aged 18 and over; we do not knowingly collect data from children.
We may update this policy from time to time; the current version will always be available at vacruit.com/privacy.
If you're unhappy with how we've handled your data, please contact us first at sam@vacruit.com so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.