Last updated: June 2026 · Version 1.1
1. Who We Are
EDA Group Ltd ("EDA Group", "we", "us", "our") is a construction labour supply agency operating across London and the M25 corridor. We are registered as an employment business under the Conduct of Employment Agencies and Employment Businesses Regulations 2003.
For the purposes of UK data protection law, EDA Group Ltd is the data controller. Contact us at: ashley@theedagroup.com or 020 3987 9897.
2. What Data We Collect
Workers and Job Applicants
- Full name, address, date of birth, contact details (phone and email)
- National Insurance number
- Right to work documentation (passport, share code, Home Office documents)
- CSCS card details and expiry dates
- Other professional tickets and qualifications
- Bank account details for payroll purposes
- Emergency contact details
- Tax information (PAYE or CIS status, UTR number where applicable)
- Site attendance records and timesheet data
Clients and Hirers
- Business name, address, and contact details
- Names and contact details of individuals we deal with
- Vacancy and assignment information
- Invoice and payment records
3. Why We Use Your Data
- To fulfil our contract with you — processing applications, arranging assignments, managing payroll, issuing payslips and CIS statements
- Legal obligation — right to work verification, PAYE and CIS reporting to HMRC, pension auto-enrolment, RIDDOR reporting
- Legitimate interests — maintaining our register of workers, tracking compliance expiry dates, sending relevant work opportunities, fraud prevention
- Consent — where we ask for your specific agreement
4. Who We Share Your Data With
- Client sites and hirers — name, right to work status, CSCS card details, and relevant tickets to confirm placement eligibility
- Payroll bureau — name, NI number, bank details, and hours worked for payroll processing
- HMRC — as required for PAYE and CIS reporting
- Pension providers — for auto-enrolment purposes
- Invoice finance providers — business-level financial data only
We do not sell personal data to third parties.
5. How Long We Keep Your Data
- Active workers — duration of engagement plus 6 years
- Unsuccessful applicants — 6 months from date of application
- Right to work documents — 2 years after end of engagement
- Payroll and tax records — 6 years from end of relevant tax year
- Client records — 6 years from end of business relationship
6. Your Rights
- Right of access — request a copy of data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — request deletion, subject to legal retention obligations
- Right to restriction — limit how we use your data
- Right to data portability — receive your data in a structured format
- Right to object — to processing based on legitimate interests
- Right to withdraw consent — where processing is consent-based
To exercise any right, contact ashley@theedagroup.com. We will respond within one month.
7. Cookies
Our website uses minimal cookies for form functionality only. We do not use advertising or tracking cookies.
8. Security
We take reasonable technical and organisational measures to protect personal data. Form submissions are processed via Formspree's secure infrastructure. Payroll data is handled by our payroll bureau under a data processing agreement.
9. Complaints
If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.
10. Changes to This Policy
We may update this policy from time to time. The current version will always be available at this address.
EDA Group Ltd · Construction Labour Supply, London & M25 · 020 3987 9897 · ashley@theedagroup.com