datb limited (day at the Beach Ltd) is committed to protecting and respecting your privacy. This policy explains how we handle personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, each as amended by the Data (Use and Access) Act 2025. Our ICO registration number is ZA230773 under the name of Day at the Beach Ltd.
If you have any questions about this Policy or concerning your personal information, please contact Roz Howe (roz@datb.com); or by telepho
Personal data is defined as information that identifies, or that is capable of identifying, an individual.
We process personal data in accordance with the UK GDPR, the Data Protection Act 2018 and any other laws and regulations relating to personal data and privacy as may be in force in the UK from time to time. In particular, for employees or contractors, we shall process personal data that you provide or give us access to in the course of your engagement.
We may hold and use relevant information about you, whether you are a job seeker, an employee or an individual acting on behalf of a business.
The type of personal information we hold may vary depending on your relationship with us. It may include:
• Your name, personal and/or business contact details including email, address and phone number, and date of birth
• Payment information such as bank account details
• Passport number, driving licence number and national insurance number.
We may collect information from you whenever you contact us or are involved with us, for example when you:
• Contact us via email, phone, social media, website or post
• Take up employment with us
• Send us invoices, statements and requests and have other financial transactions.
We collect information from you when:
• you give it to us directly
• you have given other organisations permission to share it with us.
We may use your personal information in a number of ways which reflect the legal basis applying to processing of your data. These may include:
• Processing job applications including obtaining DBS checks
• When necessary for pursuing our legitimate business interests and carrying out our obligations under any contract between us and a third party
• Maintaining our organisational records and ensuring we know how you prefer to be contacted
• When necessary for carrying out our obligations for legal and regulatory authorities.
• When necessary to enable our professional advisors to carry out services on our behalf (e.g. accountancy and payroll services)
If we transfer your personal data outside the United Kingdom, we shall do so only where the destination is covered by UK adequacy regulations or where we have put in place an appropriate safeguard (such as the UK International Data Transfer Agreement or Addendum), and we shall take reasonable steps to ensure its confidentiality and security.
We may share personal data with: our professional advisers and service providers such as accountants and payroll providers; suppliers of IT, hosting, and communications services that we use to run our business; clients, where you act on their behalf or the information relates to our work for them; and legal and regulatory authorities where we are required to. We require our suppliers to protect personal data and to use it only for our purposes.
We rely on the following legal bases. Where more than one could apply we use the one that best fits the purpose.
Purpose |
Legal Basis |
|
Processing job applications, including DBS checkswhere the role requires them |
Steps at your request before entering into a contract; legitimate interests (recruiting suitable staff). DBS checks involve criminal offence data, which we process only where permitted by law for the role concerned. |
|
Employment administration, payroll, pensions, right-to-work checks (passport, driving licence, National Insurance number) |
Performance of the employment contract; legal obligation. |
|
Paying and being paid (bank account details, invoices, statements) |
Performance of a contract; legal obligation. |
|
Maintaining organisational records, knowing how you prefer to be contacted, dealing with clients and suppliers |
Legitimate interests (running our business and managing our relationships). |
|
Legitimate interests (running our business and managing our relationships). |
Legal obligation |
|
Anything else that depends on your agreement |
Consent, which you may withdraw at any time |
datb has put in place measures to protect the security of personal information. It has internal policies, procedures and controls in place to prevent personal information from being accidentally lost or destroyed, disclosed or used and accessed in an unauthorised way. In addition, we limit access to your personal information to those employees, contractors and workers who require it to perform their duties and responsibilities. Further information can be obtained from the company secretary.
Authorised datb staff will have access to your data for the purposes of carrying out the business of the company. They are familiar with our Security Policy in ensuring that data is kept safe.
We also have procedures in place to deal with a suspected data security breach and we will notify the Information Commissioner and you of a suspected breach where we are legally required to do so.
We keep personal data only for as long as we need it for the purposes it was collected for, or as the law requires. When personal data is no longer needed it is deleted or securely destroyed. Records kept in backups are protected until the backup is retired.
Typical periods are:
Information |
Retention |
|
Financial and payroll records |
6 years |
|
Employment records |
Retained during employment, deleted where employee has left and no legitimate, or legislated reason to retain. |
|
Unsuccessful job applications and CVs |
Deleted after 6 months if the recruitment did not lead to employment, if there is no legislated reason to retain. |
|
Business contact details |
While the relationship continues. |
You have the right to:
• be told how we use your personal data (this policy)
• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased in certain circumstances
• restrict or object to our processing in certain circumstances
• receive your data in a portable format where we process it based on consent or contract
• withdraw your consent at any time where we rely on it. Withdrawing consent does not affect processing done before you withdrew it.
To exercise any of these rights please contact the person named in the Introduction. We will respond within one month. If we need to ask you to clarify your request, the time limit is paused until you reply. When responding to an access request we carry out searches that are reasonable and proportionate. We may ask you to update your details so that the data we hold remains accurate; please tell us in writing of any changes as soon as practicable.
If you are unhappy with how we have handled your personal data, you can complain to us using the contact details in the Introduction. We will acknowledge your complaint within 30 days, investigate it, and respond without undue delay. Complaints are logged and reviewed through our quality management system. You also have the right to complain to the Information Commissioner (ICO) at ico.org.uk or on 0303 123 1113. Contacting us first does not affect your right to complain to the ICO.
Our software applications use only cookies that are strictly necessary for the service you have asked for. They are not used for tracking or marketing and are not shared with any other website or organisation. The function of these cookies is to maintain your session during a session and to recognise access from new devices for security notifications.
Because these cookies are strictly necessary, we do not ask for your consent to use them. You can delete or block cookies in your browser settings, but the application will not work properly if you do.
Separately, our website (www.datb.com) uses cookies to track how you interact with the site and displays a cookie acceptance notification.
We may change this policy from time to time and, if we make significant changes, we may directly contact you if relevant.
