Last updated: 25 Feb 2026

This Privacy Policy explains how SCM360 (including SCM360 Recruitment and SCM360 Security services) (“SCM360”, “we”, “us”) collects, uses, shares, and protects personal information when you use our websites, platforms, applications, and services (“Services”).

Our Services may include: multi-tenant software platforms, recruitment and staffing services, security consultancy, risk management, compliance support, training, client support operations, and related business functions. This policy does not cover trading activities.

---

1. Who We Are

SCM360 operates as a group offering multiple business lines. Depending on the Service you use, the relevant SCM360 entity will be the data controller for your information.

2. Information We Collect

• Identity & contact data: name, email, phone number, address (where required).
• Recruitment data: CV/resume, work history, qualifications, references, right-to-work info, role preferences.
• Client & service data: service requests, case notes, schedules, audit/compliance records (where applicable).
• Platform & tenancy data: organisation/tenant name, user roles, access permissions, configuration settings.
• Technical data: IP address, device identifiers, browser type, logs, cookies, usage analytics.
• Communications: emails, messages, call notes, support tickets.

3. How We Use Your Information

• To provide Services: operate the platform, manage accounts, deliver recruitment/security services.
• Recruitment operations: assess suitability, shortlist candidates, arrange interviews, maintain talent pools.
• Security & compliance services: deliver consultancy, incident support, risk assessments and reporting.
• Customer support: respond to enquiries, resolve issues, provide updates.
• Platform improvement: analytics, quality assurance, service optimisation and troubleshooting.
• Legal and safety: prevent fraud/abuse, comply with legal obligations and enforce terms.

4. Legal Bases (UK GDPR)

• Contract: where processing is needed to provide Services or take steps at your request.
• Legitimate interests: operating and improving our business, platform security, service delivery.
• Legal obligation: compliance with employment, safeguarding, security, tax, or regulatory requirements.
• Consent: where required (e.g., certain marketing communications). You can withdraw consent anytime.

5. Multi-Tenant Data Separation

SCM360 operates multi-tenant systems. We implement logical segregation to help ensure one tenant’s data is not accessible to another tenant’s users. Access is controlled through role-based permissions and administrative policies.

6. Sharing Your Information

We may share data with:

• Service providers: hosting, email, analytics, communications, support tools (acting as processors).
• Clients/employers: where you apply or consent to be presented for a role (recruitment context).
• Professional advisers: legal, compliance, auditors.
• Authorities: where required by law, court order, or to protect rights and safety.

We do not sell your personal information.

7. International Transfers

If we transfer data outside the UK, we will use appropriate safeguards (such as adequacy regulations or standard contractual clauses) where required.

8. Data Retention

We keep personal data only as long as necessary for the purposes described above, including legal, tax, employment, and compliance requirements. Recruitment records may be retained to support future opportunities (talent pool) unless you ask us to delete them (subject to legal limits).

9. Security

We use organisational and technical measures designed to protect personal data, such as access controls, encryption where appropriate, audit logging, secure hosting, and staff confidentiality obligations.

10. Your Rights

You may have rights to:

• Access your data
• Correct inaccurate data
• Request deletion (where applicable)
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)

You can also complain to the UK Information Commissioner’s Office (ICO) if you believe we have handled your data improperly.

11. Cookies

We use cookies and similar technologies to operate the site, maintain sessions, improve performance, and understand usage. You can manage cookies via your browser settings.

12. Contact Us

For privacy requests, contact:

• Email: privacy@scm360.co.uk (recommended)
• Or: use our website contact form

---

If you are using SCM360 Services on behalf of an organisation (tenant), your organisation may also be a controller of certain data. Where relevant, their internal privacy notice may apply in addition to this policy.