Our commitment to data protection
Zeel Solutions Limited recognises the importance of protecting personal information. We aim to handle personal data responsibly, transparently and securely in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our recruitment and workforce management services may be used to manage information about candidates, workers, employees, clients and suppliers. Our responsibilities depend on the services provided and the circumstances in which personal data is processed.
Our role: controller or processor
When we act as a data processor
When we process personal data on behalf of a customer through our software services, we generally act as a data processor. The customer will usually determine the purposes for which the data is used and is responsible for identifying an appropriate lawful basis and providing privacy information to individuals. We process personal data in accordance with applicable contractual terms and documented customer instructions, subject to our legal obligations.
When we act as a data controller
For some activities, such as handling business enquiries, managing supplier relationships and administering our own business operations, Zeel Solutions Limited may act as a data controller. In those circumstances, we are responsible for determining the purposes and lawful basis of processing and meeting our applicable data protection obligations.
For more information about how we use personal information in our own business activities, please read our Privacy Policy.
Information we may process
Depending on the services used and customer instructions, personal data processed through our systems may include:
- Contact and identification details.
- Candidate, recruitment, placement and employment-related records.
- Worker, assignment, attendance and timesheet information.
- Payroll, billing and related administrative information.
- User account, access and technical information.
Customers should ensure that the personal data they collect and use is necessary for their purposes and handled lawfully.
Security measures
We use technical and organisational measures intended to protect information against unauthorised access, accidental loss, destruction and alteration. The measures applicable to a customer depend on the service, configuration and contractual arrangements.
- Data in transit: our web portals are accessed over HTTPS to help protect information transmitted between a browser and our servers.
- Access controls: user permissions can be used to restrict access to relevant areas and categories of information.
- Account security: portal features may include password controls, password-reset procedures and CAPTCHA protections.
- Network restrictions: IP address restrictions may be available for applicable services and configurations.
- Backups and recovery: backup and recovery arrangements are managed in accordance with the relevant service and operational procedures.
- Encryption at rest: database encryption at rest has been offered as an optional service. Customers should confirm its availability and configuration for their environment.
These descriptions are general and do not replace the security commitments in an applicable contract. Customers should contact us for service-specific information.
Independent assurance
Zeel Solutions has previously published information about ISAE 3402 auditing. The current status, reporting period, scope and availability of any assurance report must be confirmed before reliance is placed on it. Please contact us for current, applicable assurance information.
Individual rights
Depending on the circumstances and applicable law, individuals may have the right to access their personal data, correct inaccurate data, request erasure or restriction, object to certain processing, request data portability, withdraw consent where processing relies on consent, and exercise rights relating to certain automated decisions.
These rights are subject to legal conditions and exceptions. If your information is held in a customer's system, please contact the relevant employer, recruitment agency or other organisation responsible for managing your information in the first instance. Where we act as a processor, we will assist the customer as required by our contractual and legal obligations. If Zeel Solutions Limited is the controller, you can contact us using the details below.
Data retention and deletion
Personal data should be kept only for as long as necessary for the relevant purposes, taking account of legal requirements and legitimate operational needs. Where we act as a processor, the return and deletion of customer data are governed by the applicable agreement and documented instructions, subject to legal requirements. Where we act as a controller, our retention arrangements depend on the purpose for which the information is used.
Specific retention periods should be set out in the relevant privacy information or customer documentation where applicable.
Sharing and international transfers
Personal data may be made available to authorised personnel, customers and relevant service providers where necessary for the delivery of services or another documented purpose. Where third parties process personal data on our behalf, appropriate contractual and security arrangements should be in place.
Any transfer of personal data outside the UK must comply with applicable data protection requirements and use an appropriate transfer mechanism and safeguards where required. Details of relevant providers, data locations and transfer safeguards should be confirmed against current arrangements.
Personal data breaches
We maintain processes for handling security incidents in accordance with our operational procedures and applicable obligations. Where we act as a processor, we will notify the relevant customer of a personal data breach in accordance with applicable contractual terms and legal requirements and provide appropriate assistance. The customer, as controller, is responsible for assessing its own regulatory and individual notification obligations.
Customer responsibilities
Customers using our services should ensure that they:
- Identify and document an appropriate lawful basis for processing.
- Provide clear privacy information to candidates, workers and other relevant individuals.
- Collect only the personal data necessary for their purposes.
- Apply suitable user permissions and account security controls.
- Maintain appropriate retention and deletion practices.
- Respond to individual rights requests within applicable deadlines.
- Review their contractual terms and data processing arrangements with us.
Customers should seek independent legal or data protection advice where appropriate.
AI and automated processing
Where AI-enabled or automated features are used, the personal data involved, purposes, providers and safeguards should be assessed for the specific feature and configuration. Any processing that falls within applicable rules on automated decision-making must be handled in accordance with those requirements. Please consult the relevant product documentation and privacy information for details applicable to your service.
ICO registration and regulatory information
We are registered with the Information Commissioner's Office (ICO) under reference Z1329630.
For independent guidance or to raise a concern, visit the Information Commissioner's Office (ICO).
Contact us
If you have a question about data protection or how we handle personal information, please contact Zeel Solutions Limited:
Solutions HousePendeford Business Park
Wobaston Road
Wolverhampton, WV9 5HA
Telephone: 01902 623 590
Data protection email: gdpr@zeelsolutions.com
Reviewing this information
We review our data protection information periodically and update it when necessary to reflect changes to our services, processing activities, legal requirements or security arrangements.
Last reviewed: 20th October 2026