Last updated: 4 September 2026
1. Information we collect
Depending on how you interact with us, we may collect:
- Identity and contact details (name, email, phone, country, city, address).
- Application details (position, work and schedule preferences, languages).
- Professional information (work experience, education, certifications, CV and documents).
- Responses to application questions and any information you choose to provide.
- Technical data (such as essential cookies needed for the site to function).
- The country your application was sent from, derived from your network (IP) address at the moment you apply. We record the country only — your IP address itself is not retained.
- If you are offered a role and accept it: the details you confirm at that point, which include your nationality, your identity or passport document number, your full residential address and postcode, and — if you are engaging through a company — that company’s name, registration number and tax number.
- Identity verification documents: an image of an official identity document and a photograph of you holding it. Applicants in certain countries are asked for these after the online assessment; everyone else is asked when they accept an offer, before any written agreement is drawn up.
1a. Identity verification
We ask applicants to confirm their identity, and there are two points at which this happens. For some roles and locations it is asked before the application continues. For everyone else it is asked at the end, when an offer has been accepted and before a written agreement is prepared — we do not enter into an agreement with someone whose identity has not been confirmed. Either way you are asked for an image of an official identity document — a passport, national identity card or driver’s licence — and a photograph of yourself holding it. You are only ever asked once: if you have already provided them, or we have already verified you, you are not asked again.
A photograph used to confirm that you are the person shown on a document is biometric data. We ask for your explicit consent before collecting it, separately from any other consent, and you are told what it is for at the point we ask. We use these images only to confirm your identity and to prevent the same person applying repeatedly under different details. They are never used for automated facial recognition, never sold, and never shared outside our recruitment team.
Images are stored encrypted and access is restricted to recruitment staff. They are deleted once a verification decision has been made and there is no longer a need to keep them; the outcome of the decision is retained as part of your application record. You may withdraw consent and ask us to delete these images at any time by writing to privacy@workroute.co.uk, and we will do so unless we are required to keep them by law.
1b. Public company records
For some applications we search the public register of company officers kept by Companies House, the United Kingdom registrar, using your name and — where we hold it — the month and year of your date of birth. This tells us whether you already act as a director or secretary of a UK company, which affects how an engagement with us would be arranged.
We search only information Companies House publishes to anyone, we record the result against your application, and a search is run by a member of our recruitment team when it is relevant rather than automatically for every applicant. A name can be shared by many people, so any match is treated as something to check and never as a fact about you, and it is never the reason an application is refused.
1c. Counting visits to this website
We keep a daily count of how many people visit this site and which pages they look at, so we know which roles are of interest and whether the site is working. This is done entirely on our own server: no analytics provider, no advertising network, and no information about your visit is sent anywhere else.
No cookie is used and nothing is stored on your device. So that one person browsing several pages is not counted as several visitors, our server derives a short identifier from your network address and browser using a secret that is destroyed and replaced every midnight. Your network address itself is never written down, the identifier cannot be turned back into it, and because the secret changes daily you cannot be recognised from one day to the next.
What we keep is a daily total — how many visits, to which pages, from which countries, on which kind of device, and which website referred them. These are counts, not records: there is no history of any individual’s browsing, and nothing in them relates to a particular person. Automated visitors such as search-engine crawlers and messaging-app link previews are excluded.
2. Why we collect information
We use personal information to:
- Receive, assess, and manage job applications.
- Communicate with you about your application and the recruitment process.
- Operate, secure, and improve our website.
- Comply with applicable legal and regulatory obligations.
- Where you have opted in, send you future recruitment updates.
The country derived from your network address is used only to compare against the country you selected on the form, because these roles are open in specific locations. A difference is never treated as a decision in itself — a VPN, a work network or simply travelling all produce one — and no application is rejected automatically because of it. We do not derive your city, region or location beyond the country, and we do not store your IP address.
2a. Details confirmed when you accept an offer
If we offer you a role, the acceptance link in your offer email asks you to check the details we already hold and correct anything that is out of date, and to supply the few further details needed to draw up an agreement — your nationality, your identity document number, your full address, and your company details if you are engaging through one.
This information is used to prepare and administer your agreement with us, and for no other purpose. Your earlier application record is kept alongside it rather than overwritten, so that both remain accurate. We will never ask you for a payment, a bank card, or a password at any stage; bank details are requested only after a written agreement has been signed, and never through this form.
3. Recruitment-data processing
Information you submit through the application form is used to evaluate your suitability for the role(s) you apply to, to contact you, and to administer the hiring process. Please also read our Applicant Privacy Notice, which describes recruitment processing in more detail.
4. Legal basis for processing
Where applicable law requires a legal basis, we rely on your consent, the steps necessary to consider you for a role at your request, our legitimate interest in recruiting suitable candidates, and compliance with legal obligations. The specific legal basis may vary by jurisdiction.
5. How information is stored
Personal information is stored on systems operated by us or our service providers, using access controls and technical measures intended to protect it. Uploaded documents are intended to be stored in secured, restricted-access storage.
6. Who information may be shared with
- Authorized members of our recruitment and hiring teams.
- Service providers that help us operate the website, storage, and email (processors).
- Authorities or third parties where required by law or to protect our rights.
We do not sell personal information.
7. Your rights
Subject to applicable law, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to request a copy of your data. To exercise these rights, contact us using the details below.
8. International data transfers
Because we support international businesses, your information may be processed in countries other than your own. Where this occurs, we take steps intended to ensure appropriate safeguards are in place.
9. Security measures
We use organizational and technical measures designed to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data-retention periods
We retain applicant information for approximately 12 months after a recruitment decision, unless a longer period is required or permitted by law or you ask us to delete it sooner. See our Data Retention Policy for details.
11. Cookies and analytics
We use essential cookies to operate the site and, only with your consent, analytics and other non-essential cookies. See our Cookie Policy and use the cookie preferences link in the footer to manage your choices.
12. Contact for privacy requests
For privacy questions or requests, contact us at privacy@workroute.co.uk or by post at 168/170 Main Street, Bellshill, Lanarkshire, ML4 1AE, United Kingdom.
13. Updates to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “last updated” date on this page.