Lost Group Limited – Privacy and Cookie Policy – version 2.0 dated 14 July 2023


1. Introduction

Lost Group Limited (‘Lost’, ‘Lost Group’ ‘us’, ‘our’ or ‘we’) company number 14619676 is committed to ensuring that your privacy is protected and also that Lost is compliant with General Data Protection Regulation (‘GDPR’), and the Data Protection Act 2018. This privacy policy (‘Privacy Policy’) sets out how Lost uses the information that is collected about you and the procedures in place to protect your personal information. We reserve the right to amend this Privacy Policy we consider necessary from time to time.

2.Data Controller

For GDPR purposes, Lost is the Data Controller, and Lost processes personal information in relation to candidates, clients and also its own team members.

Lost ensures that the information supplied to us is processed with appropriate care and skill, fairly and lawfully, and is only used for the purposes set out in this Privacy Policy.

If you have any queries about the information we hold on you, please send an email to contact@lost.careers.

3. Information collected

Lost collects personal information about you, including your name, address, contact details and any relevant information you have provided to Lost regarding future employment such as your CV, employment history, experience, skills, references and any relevant qualifications.

We may also collect sensitive personal information with your consent, for example, information relating to your health, if this is specifically required for any roles.

We may collect personal information by various methods including through our website, by email, telephone, in writing, and in person.

4. Use of personal information

We will use your personal information to help us provide you with the best possible service in our role as a service provider. Your personal information may be held, used, processed and disclosed by us for the following reasons:

  • To provide our services to you, as listed on our website and to facilitate the search process;
  • To comply with contractual obligations with our clients;
  • To inform you about any roles that we believe you may be interested in, where you have consented to do so and can unsubscribe at any time;
  • To match your details with job vacancies and to help us to find a position that is suitable for you;
  • To send your personal information to clients in order to apply for a role, where you have consented to do so;
  • To enable you to submit your CV, employment history, or apply for roles;
  • To send other relevant information about the transport industry that we consider may be of interest to you;
  • To maintain our business relationship, where you are a user of our website, a client or candidate;
  • To enable us to send you relevant and appropriate marketing or other communications;
  • We may contact you periodically to make sure that the information stored on our system is accurate and up to date;
  • To trusted third parties who work with Lost and provide important services to us, such as professional advisors, IT and website support and technology providers. These third parties must comply with similar undertakings of privacy and confidentiality as Lost;
  • To answer any questions and enquiries that you may have;
  • To comply with our legal, regulatory and compliance obligations in connection with the detection of crime or the collection of taxes or duties or in order to verify your identity;
  • For record keeping internally;
  • To notify you of changes to our services;

5. Access to information and where it is held

Information supplied may be disclosed to Lost team members that are all based in the UK, and with your prior consent, employers seeking candidates for roles. Your information will also be disclosed to people to whom we may transfer rights and obligations in connection with our business, such as professional advisors like accountants and to any other organisations that provide a service to Lost such as our technology providers, and who have agreed to keep your information confidential.

Our servers are all hosted from a datacentre in the UK which is ISO 27001 certified. Subject to the terms and conditions of this Privacy Policy, Lost protects all data from being disclosed to any other third parties except when required by law.

It is rare for information you provide us to be transferred out of European Economic Area (EEA). In the case that the transfer of data is necessary to provide you with a service, we will notify you of this.

6. Duration that information is held for

We will hold your information for as long as it is necessary to comply with our statutory and contractual obligations. We will hold some categories of documents for longer than others. This will be based on the purpose for which they are processed and our contractual and statutory obligations. All information will only be held for as long as is necessary to protect our legitimate business interests as a Data Controller.

7. Protection of information

The internet is not always secure. However, Lost has put in place relevant technology, policies and training for all employees to protect your information from unauthorised and unlawful access, use, modification, or loss.

It should be appreciated however, that no system is perfect and you should always be careful when you reveal confidential information to any third party.

Lost shall use reasonable endeavours to ensure the security of the data, but shall have no liability for any loss or damage, including for access to data, caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect the Client’s computer equipment, computer programs, data or other proprietary material through use of the Services.

8. Legal basis for processing personal information

Our legal basis for the processing of your personal information is our legitimate business interests, although we will also rely on contract, legal obligation and consent for specific uses of data.

We will rely on contract as a legal basis if we are negotiating or have entered into a placement agreement with you or your organisation. In order to enter into a contract, we will need you to supply certain personal information as the contract will contain obligations on both your part and our part such as financial information to pay you.

Certain categories of your personal information may also contractually be required in accordance with instructions of our clients. You will need to provide such personal information in these circumstances. If the information is not provided, we, or our client, may not be able to enter into a contract with you.

We will rely on legal obligation if we are required to hold information on you to fulfil our legal obligations. There are some obligations which relate to businesses in general, such as complying with taxation, anti bribery, fraud & crime prevention and also co-operation with regulatory authorities such as HMRC if appropriate.

We reserve the right to end our business relationship with you if you have entered into a contract with us and refuse to provide any information required by law such as information and documentation to confirm your right to work and verification of identity.

We will process your personal information on the basis that you have consented to do so for one or more specific purposes. For example, you will have provided your written or verbal consent for us to use your information to send your personal information to clients in order to apply for for a role or to receive specific marketing updates.

You may withdraw your consent at any time.

The remainder of the processing is carried out under our legitimate business interests or the interests of a third party (client). We do not consider that any of the processing will prejudice you in any way and instead will help us offer a more tailored, efficient service for all parties.

We consider it to be reasonable to retain records of our transactions and dealings to ensure that our business runs smoothly and also to provide the best service possible.

You have the right to object to this by sending an email to contact@lost.careers. In some cases we may continue to retain some information if we have a legal obligation or overriding business interest to do so.

9. Access, modification or deletion of information

You have the right to access a copy of the information that is held on you. Lost may ask you for more information about your request, and also to verify your identity. If your request is not accepted, Lost will provide you with the reasons for this, and we will also inform you of the regulatory authority you can complain to.

You also have the right to amend, delete, withdraw your consent or restrict processing of the information which Lost holds on you, subject to certain expectations. Where Lost is unable to approve your request we will provide you with the reasons for not doing so.

We will make all reasonable endeavours to act on your request in the timescale required by applicable laws.

10. Use of Cookies

‘Cookies’ are small files, which typically contain information such as a site name and unique user ID, that are stored on a user’s computer. Our website uses cookies to distinguish you from other users of our website. This assists us to provide users with a good experience when they visit our website and also allows us to make improvements to our website.

Certain features on the Website are only available if you enable the cookie. Lost also uses a Cookie to assist it to provide information which is relevant to your interest.

You are free to decline Cookies although that may restrict certain features on the Website.

Lost may also track certain information through Google Analytics and also the use of JavaScript code.

11. Rights and choices

You have a choice as to whether or not you wish to receive information from Lost. We will usually not contact you for marketing purposes unless you have given us prior consent.

We will use electronic profiling which involves decision making by humans on our database to find appropriate and relevant jobs and opportunities based on your details. You may withdraw your consent or restrict Lost from processing your personal information in certain circumstances. This may however potentially impact on the services that we are able to supply you.

GDPR provides certain rights for you including rights to be informed, of access, of rectification, of erasure, to restrict processing, data portability, to object and in relation to automated decision making and profiling.

The Information Commissioner’s Office website contains further information regarding your rights.

12. Other websites

Lost’s website may contain links to other websites, for example links regarding our Charitable Policy. If you click on such a link, you are not protected by this Privacy Policy and you are advised to read the Privacy Policy of the other website as it may differ from this Privacy Policy. We is not responsible for the Privacy Policies and practices of other sites.