Privacy

Line Up Limited trading as Line Up Aviation (the Company) is a recruitment business which provides work-finding services to clients and work-seekers. In order to provide these services, the Company processes personal data and, where necessary, special category personal data and criminal convictions data. In doing so, the Company acts as a data controller for the purposes of UK GDPR and the Data Protection Act 2018.

Registered office: Unit 9 Foundry Court, Foundry Lane, Horsham, West Sussex, RH13 5PY, United Kingdom
Company number: 2620495

This privacy notice explains how and why we collect, use, store and share personal data and describes your rights in relation to that data.

Collection and use of personal data

Purpose of processing and lawful basis

We collect and process personal data for the purposes of providing work-finding services. This includes:

communicating with you about job opportunities;
assessing suitability for roles;
maintaining and updating our records;
submitting your details to clients;
arranging payment and administering payroll where applicable;
managing our relationship with you and our clients;
complying with legal, regulatory and safeguarding obligations.

The Company processes personal data on the following lawful bases:

Contract – where processing is necessary to take steps at your request prior to entering into a contract or to perform a contract with you;
Legal obligation – where we are required to process data to comply with applicable law, including employment, immigration, tax, aviation security and safeguarding requirements;
Legitimate interests – where processing is necessary for our recruitment activities and does not override your rights and freedoms;
Consent – only where required, for example for optional marketing communications.

Where consent is used, you may withdraw it at any time. Withdrawal of consent does not affect processing carried out on another lawful basis or processing already completed.

Legitimate interests

Where we rely on legitimate interests, these include:

operating as a recruitment business and providing work-finding services;
maintaining accurate and up-to-date candidate records;
communicating with candidates about relevant roles;
developing and improving our services;
preventing fraud and ensuring network and information security.

We carry out a balancing assessments to ensure our legitimate interests do not override your rights and freedoms.

Special category and criminal data

Where we process special category data (such as health information), we rely on the following conditions under Article 9 UK GDPR:

processing necessary for carrying out obligations in employment and social security law;
where necessary for the establishment, exercise or defence of legal claims;
or with your explicit consent where required.

Where we process criminal convictions data, this is done in accordance with Article 10 UK GDPR and Schedule 1 of the Data Protection Act 2018, including for regulatory compliance, safeguarding, and preventing unlawful acts. We maintain an appropriate policy document as required.

Statutory and contractual requirements

The Company is required to collect and retain certain personal data under law, including the Conduct of Employment Agencies and Employment Businesses Regulations 2003, immigration legislation, tax and social security law, working time legislation and regulatory requirements. Failure to provide required data may prevent us from offering work‑finding services.

Recipients of data

We may share personal data with:

clients to whom we introduce or supply you;
referees and former employers;
payroll providers and payment intermediaries;
neutral vendors or managed service providers;
auditors and professional advisers;
suppliers of recruitment, CRM and other technology platforms.
background screening and vetting providers.

Information where data is not collected directly

Categories of personal data

Personal data may include:

name, contact details and address;
date of birth;
nationality and right‑to‑work information;
employment history, qualifications and certifications;
next of kin details.

Special category personal data may include:

health information, including disability information;
information required for occupational health or fitness for work;
security clearance status.

Criminal convictions data may include information required for security or client regulatory purposes, processed in accordance with UK law and with appropriate safeguards.

Sources of data

We may collect data from:

you directly;
job boards and professional networking platforms;
former employers or referees;
clients;
service providers such as vetting or credit‑checking agencies;
publicly available sources.

Overseas transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including adequacy regulations, the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses.

You may request further details of these safeguards by contacting us.

Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected and to comply with legal obligations. This includes:

work‑seeker records retained for at least one year in accordance with the Conduct Regulations;
right‑to‑work records retained for two years after engagement ends;
payroll and tax records retained in line with HMRC requirements, generally up to six years.

We periodically review personal data and securely delete or anonymise records where they are no longer required, including where there has been no meaningful engagement for a defined period.

Your rights

You have the right to:

be informed about how your data is used;
access your personal data;
request rectification;
request erasure in certain circumstances;
restrict processing;
data portability where applicable;
object to processing based on legitimate interests;
withdraw consent where processing is based on consent;
not be subject to a decision based solely on automated processing, including profiling, where it produces legal or similarly significant effects on you.

We do not currently carry out automated decision-making of this nature.

Requests may be made by contacting [email protected].

Cookies

Our website uses cookies in accordance with applicable cookie and electronic communications regulations. Further information is available in our Cookie Policy.

Where required, we obtain your consent before placing non-essential cookies.

Log files

We use log files and IP addresses for system administration, security and aggregated analytics. These are not used to identify individuals directly.

Log data is retained for a limited period for security and monitoring purposes.

External links

Our website may contain links to external sites. We are not responsible for their privacy practices.

Sale of business

If the business is sold or restructured, personal data may be transferred subject to appropriate safeguards and notification.

Such processing will be based on our legitimate interests in ensuring business continuity.

Data security

We implement appropriate technical and organisational measures to protect personal data, including access controls, encryption, secure systems and staff training. No internet transmission is entirely secure and we cannot guarantee absolute security.

Children’s data

Our services are not intended for children, and we do not knowingly collect personal data relating to individuals under 18.

Data protection contact

We have not appointed a Data Protection Officer. For all data protection matters, please contact: [email protected].

Changes to this notice

This privacy notice may be updated from time to time. Material changes will be communicated.

Complaints

If you have concerns about how we process personal data, contact [email protected]. You may also complain to the Information Commissioner’s Office.

Version: 1.1
Last updated: 26th March 2026