Privacy Policy
Last updated: 30 June 2026 · BBSPA UK LTD
BBSPA Staffing is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard information when you use our platform.
1. Who We Are
BBSPA UK LTD is the data controller responsible for your personal data when you use this recruitment platform. Our registered office is 31a Charlotte Square, Edinburgh, Scotland, EH2 4ET. We are registered in the UK under company number SC794358. bbspa_Group operates across the United Kingdom, France and Italy; this platform and the personal data collected through it are controlled by the UK entity. For any data-protection question, contact privacy@bbspagroup.com.
2. Information We Collect
We collect information you provide directly — such as your name, email address, phone number, CV, professional history, and preferences — when you apply for roles, join our talent network, or contact us. We may also receive information from third-party authentication providers (Google, LinkedIn) when you use them to sign in.
3. How We Use Your Information
We use your information to match you with relevant opportunities, communicate updates about your application, send relevant role alerts if you have joined our talent network, and improve our recruitment services. We do not sell your personal data to third parties.
4. Lawful Basis for Processing
Under UK GDPR we rely on: your consent — given when you submit an application and tick the relevant boxes, and withdrawable at any time; the performance of, or steps to enter into, a contract or placement; and our legitimate interests in running a recruitment service and matching candidates to suitable roles, balanced against your rights and freedoms. Where we rely on consent, withdrawing it does not affect the lawfulness of processing carried out beforehand.
5. Data Sharing
Your profile and application data may be shared with hotel and hospitality partners when you are being considered for a specific placement. We will always seek your consent before sharing detailed information with prospective employers. We use trusted service providers (including Supabase for data storage and authentication) who are contractually bound to protect your information.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. If you close your account or request deletion, we will remove your personal data within 30 days unless retention is required by applicable law. Application records may be retained for up to two years for legitimate business purposes.
7. Your Rights
Under UK GDPR you have the right to access, correct, or delete your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, contact us at privacy@bbspagroup.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) — at ico.org.uk or on 0303 123 1113 — if you are unhappy with how we have handled your personal data.
8. Cookies
We use strictly necessary cookies to keep you signed in and operate the platform — these are always on. With your consent, we also use analytics cookies (PostHog) to understand how the site is used, and error-monitoring (Sentry) to diagnose faults; these stay off until you accept them in our cookie banner. We do not use advertising cookies and we do not sell your data. You can change or withdraw your choice at any time via "Cookie settings" in the footer, or through your browser settings.
9. Security
We implement industry-standard security measures including encrypted storage, secure authentication, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use after changes take effect constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or to exercise your rights, please contact our Data Protection team at privacy@bbspagroup.com or write to us at our registered office: 31a Charlotte Square, Edinburgh, Scotland, EH2 4ET.
Questions about this policy? Contact our team or email privacy@bbspagroup.com.