Privacy
1. Introduction
PARS UK (“we,” “us,” or “our”) operates as a not-for-profit organisation dedicated to enhancing standards within the self-employed sector through voluntary licensure of Virtual Personal Assistants (“VPAs”) across the United Kingdom. This Privacy Policy outlines the manner in which we collect, process, store, disclose, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection laws.
By accessing or using our website and services, you acknowledge and consent to the practices described herein.
2. Data We Collect
2.1 Personal Data Provided by Data Subjects
We collect personal data which may include, but is not limited to:
-
Identification data (e.g., name, date of birth, photographic identification documents);
-
Contact details (e.g., email address, telephone number, postal address);
-
Professional credentials and references;
-
Information provided by employers for the purposes of matching with VPAs.
-
Such personal data is collected directly from the data subject or their authorised representatives.
2.2 Data Collected Automatically
We may also collect technical information automatically during your use of our website, including IP address, browser type, device information, pages visited, and other usage data, for purposes of security, analytics, and service improvement.
3. Purpose and Legal Basis for Processing
We process personal data on the following lawful bases:
-
Consent: Where you provide explicit consent, including for identity verification processes and marketing communications;
-
Performance of a Contract: To facilitate registration, licensure, and service provision between VPAs and employers;
-
Legal Obligation: To comply with applicable laws and regulatory requirements;
-
Legitimate Interests: To maintain the security and integrity of our services, prevent fraud, and improve user experience, provided such interests do not override your fundamental rights.
4. Data Retention
Personal data shall be retained only for as long as necessary to fulfil the purposes outlined, subject to applicable legal obligations. Specifically:
-
Identification documents uploaded for verification purposes are deleted immediately upon successful verification and are not retained thereafter;
-
Personal data related to licensure and online profiles shall be retained indefinitely unless a valid deletion request is received;
-
Employer data collected for matching purposes shall be permanently deleted promptly following successful pairing with a VPA.
5. Data Sharing and Disclosure
We do not sell or lease personal data. Disclosure of personal data may occur with:
-
Registered VPAs and employers for the purpose of service facilitation;
-
Third-party service providers engaged under data processing agreements who provide services such as hosting, communications, and data management;
-
Law enforcement, regulatory authorities, or other parties where required by law or to protect the rights, property, or safety of PARS UK or its users.
6. Data Subject Rights
In accordance with the UK GDPR, data subjects have the following rights:
-
Right of access to personal data;
-
Right to rectification of inaccurate or incomplete data;
-
Right to erasure (subject to legal exceptions);
-
Right to restriction of processing;
-
Right to object to processing based on legitimate interests or direct marketing;
-
Right to data portability;
-
Right to withdraw consent at any time without affecting the lawfulness of prior processing.
-
Requests to exercise any rights should be submitted via our designated privacy request mechanisms. We will respond within one calendar month, subject to verification of identity.
7. Security Measures
We implement appropriate technical and organisational measures to safeguard personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage, including but not limited to:
-
Encryption of data in transit and at rest;
-
Access controls and authentication mechanisms;
-
Secure upload and storage procedures for identification documents;
-
Regular staff training on data protection principles.
-
Notwithstanding these measures, absolute security cannot be guaranteed.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyse site usage, and provide relevant communications. Users may control cookie preferences through their browser settings. Further information is available in our Cookie Policy.
9. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such sites, and users are encouraged to review their respective policies.
10. Children’s Privacy
Our services are not directed at persons under the age of 16. We do not knowingly collect or process personal data from children under 16.
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or services. Updated versions will be posted on this page with revised effective dates. Continued use of the site constitutes acceptance of such changes.
12. Contact Information
For questions regarding this Privacy Policy or to exercise data subject rights, please contact our data protection officer here.
13. Legal Disclaimers
-
Registered VPAs are independent contractors and not employees or agents of PARS UK; PARS UK disclaims all liability for actions taken by VPAs.
-
While we strive to ensure accurate matching and vetting processes, we make no guarantees regarding the suitability or performance of VPAs.
-
Liability for loss or damage arising from use of our services is excluded to the fullest extent permitted by law, except in cases of death or personal injury caused by our negligence.