Last updated: 13 August 2026

1. About this notice

AccuraSol Limited (“AccuraSol”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy rights. This notice explains what personal data we collect, why we collect it, what we do with it, how long we keep it, and the rights you have over it.

This notice applies to personal data we handle as a data controller — that is, where we decide why and how personal data is used. Section 3 explains the separate role we play when we handle personal data on behalf of our clients.

Who we are

We are the data controller for the personal data described in this notice unless we tell you otherwise.

We have not appointed a statutory Data Protection Officer, as we are not required to do so under UK GDPR. Our Data Protection Lead is responsible for overseeing data protection at AccuraSol and is the point of contact for any question or request relating to your personal data.

2. The law we follow

We process personal data in accordance with:

• the UK General Data Protection Regulation (UK GDPR)
• the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025
• the Privacy and Electronic Communications Regulations 2003 (PECR)

Where we handle the personal data of individuals located in the European Economic Area, the EU GDPR may also apply. Section 12 explains what this means for you.

3. Our two roles: controller and processor

AccuraSol provides IT services, software engineering, quality engineering and managed services to business clients. This means we handle personal data in two distinct capacities, and different rules apply to each.

As a data controller, we decide why and how personal data is used. This applies to the personal data of our own employees and contractors, job applicants, business contacts, prospective clients, website visitors and enquirers. This notice describes that processing.

As a data processor, we handle personal data contained within our clients’ own systems and applications, strictly on their documented instructions and for the purpose of delivering the services they have engaged us for. In those cases our client is the data controller and their own privacy notice governs how that data is used. We do not use client data for our own purposes.

If you believe your personal data is held within a client system we support, and you wish to exercise your rights over it, you should contact that organisation directly. If you contact us instead, we will pass your request to the relevant client without undue delay and support them in responding, but we cannot act on it ourselves without their instruction.

4. Personal data we collect, and why

4.1 Website visitors and enquirers

What we collect: Your name, email address, telephone number (if provided), company name, and the content of your message, submitted through the contact form on accurasol.io or by email.
Where we get it: Directly from you.
Why we use it: To respond to your enquiry, to provide the information you have asked for, and — where your enquiry relates to our services — to discuss how we may be able to help you.
Lawful basis: Legitimate interests. Our legitimate interest is in responding to enquiries about our business and in communicating with people who have approached us.
Is it required? Providing your details is voluntary, but we cannot respond to an enquiry without a way of contacting you.
How long we keep it: 12 months from our last contact with you, unless the enquiry leads to a business relationship, in which case it is retained under section 4.4.

4.2 Job applicants

What we collect: Your name, contact details, CV, employment and education history, skills and qualifications, right-to-work information, interview notes and assessment outcomes, and any other information you choose to include in your application.
Where we get it: Directly from you, through our careers page or by email. Where you provide referee details, we may also collect information from your referees, with your knowledge.
Why we use it: To assess your suitability for a role, to communicate with you about your application, to verify the information you have given us, and to comply with our legal obligations as an employer.
Lawful basis: Legitimate interests for assessing and progressing your application. Legal obligation for right-to-work verification and equality-related record keeping. Steps prior to entering a contract where we make an offer.
Special category data: We do not ask for information about your health, religion, ethnicity or other special category data as part of the application process. If you volunteer such information — for example, to request an adjustment to the interview process — we will use it only for that purpose.
Is it required? Providing your data is voluntary, but we cannot consider an application without it.
How long we keep it: If your application is unsuccessful, we delete your personal data promptly after the recruitment process for that role has concluded. We do not retain unsuccessful applications for future opportunities. If you would like us to keep your details on file, please tell us, and we will only do so with your explicit consent, which you may withdraw at any time. If your application is successful, your data becomes part of your employment record.

4.3 Business contacts and prospective clients

What we collect: Name, job title, business email address, business telephone number, employer name, and publicly available professional information relevant to whether our services may be of interest to your organisation.
Where we get it: Directly from you; from professional networking platforms such as LinkedIn; from your organisation’s public website; from publicly available business directories and job listings; and from reputable third-party business data providers. We do not obtain personal data from consumer sources or from sources that require your consent for us to use it.
Why we use it: To contact you in a professional capacity about IT services, engineering and staff augmentation services that may be relevant to your organisation, and to maintain a record of our business development activity.
Lawful basis: Legitimate interests. Our legitimate interest is in promoting our services to organisations likely to need them. We have carried out a legitimate interests assessment and concluded that limited, relevant, business-to-business contact of this kind does not override your rights.
Your right to object: You have an absolute right to object to us using your personal data for direct marketing. If you object, we will stop immediately and permanently, and we will keep the minimum record necessary to ensure we do not contact you again. Every marketing email we send includes an unsubscribe link, and you may also email dataprotection@accurasol.io at any time.
How long we keep it: Two years from our last meaningful engagement with you, after which it is deleted unless a business relationship has begun. Records of objections and unsubscribes are kept indefinitely so that we can honour them.

4.4 Clients and supplier contacts

What we collect: Names, job titles, business contact details, correspondence, and records relating to the services we provide or receive.
Where we get it: Directly from you or your organisation.
Why we use it: To perform our contract with your organisation, manage the relationship, deliver and receive services, invoice and take payment, and keep proper business records.
Lawful basis: Contract where you are our direct counterparty; legitimate interests in managing our commercial relationships; and legal obligation for accounting and tax records.
How long we keep it: Six years from the end of the contract or our last transaction, in line with statutory record-keeping requirements.

4.5 Employees, workers and contractors

We process personal data about our employees, workers and contractors — including those engaged through our delivery operations outside the United Kingdom — for the purposes of employment administration, payroll, benefits, performance management, immigration and right-to-work compliance, health and safety, and meeting our legal obligations as an employer.

Our people are given a separate, more detailed privacy notice covering this processing. If you are an employee, worker or contractor and have not received it, please contact dataprotection@accurasol.io.

Employment records are retained for six years after the end of the employment or engagement, except where a longer period is required by law.

5. Cookies and website analytics

Our website uses a small number of cookies and similar technologies.

Strictly necessary cookies are required for the website to function and to remember your cookie preferences. These do not require your consent.

Analytics cookies help us understand how visitors use our website — which pages are viewed, how people arrive, and where problems occur — so that we can improve it. These are not set unless you consent to them through the cookie banner displayed when you first visit accurasol.io.

You can change or withdraw your cookie preferences at any time through the cookie settings link on our website. You can also block or delete cookies through your browser settings, though this may affect how the site works.

We do not use cookies to build advertising profiles, and we do not sell or share analytics data with advertising networks.

6. Who we share your personal data with

We do not sell your personal data. We share it only where necessary, and only with organisations that are bound to protect it.

We share personal data with the following categories of recipient:

• IT and cloud service providers, including our email, productivity and file storage platform, and our website hosting provider
• Business systems providers, including our customer relationship management and business development tools
• Payroll, accounting and professional advisers, including our accountants and, where necessary, our legal advisers
• Our overseas delivery partner, described in section 7
• Our clients, where you are a candidate being proposed for a role on a client engagement, and only with your knowledge
• Regulators, law enforcement and public authorities, where we are legally required to disclose information
• Professional advisers and prospective purchasers, in the event of a corporate transaction such as a sale or reorganisation of our business

Every supplier that processes personal data on our behalf does so under a written contract that meets the requirements of UK GDPR. They may act only on our instructions and may not use your personal data for their own purposes.

7. Transfers of personal data outside the United Kingdom

AccuraSol uses technology infrastructure and services provided by companies that may process data outside the UK, including in the United States and European Economic Area (EEA).

Where this happens, we aim to ensure appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.

8. How long we keep personal data

We keep personal data only for as long as we need it for the purpose we collected it, and to meet our legal obligations. Our standard retention periods are:

Where a longer period is required by law, or where data is relevant to an ongoing or anticipated legal claim, we retain it for as long as necessary and then delete it securely.

9. How we keep personal data secure

We take the security of personal data seriously and maintain technical and organisational measures appropriate to the risk, including:

• multi-factor authentication on all accounts with access to personal data
• role-based, least-privilege access, reviewed regularly
• encryption of data in transit and at rest
• controlled and logged remote access arrangements for personnel working outside the UK
• confidentiality obligations and data protection training for all personnel
• secure, tested backups
• a documented incident and personal data breach response procedure

No system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours where required, and will notify you directly without undue delay where the risk to you is high.

10. Your rights

Under UK data protection law you have the following rights, free of charge:

Automated decision-making. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How to exercise your rights. Email dataprotection@accurasol.io. We may ask you for information to confirm your identity. We will respond within one month. If your request is complex, or if you have made a number of requests, we may extend this by up to two further months, and we will tell you within the first month if we need to do so.

11. How to complain

Complaining to us. If you are unhappy with how we have handled your personal data, please tell us first, so that we have the chance to put it right. Email dataprotection@accurasol.io, or write to the Data Protection Lead at our registered office.

We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed of our progress, and tell you the outcome and our reasons.

Complaining to the regulator. You also have the right to complain to the Information Commissioner’s Office at any time. You are not required to complain to us first, although we would welcome the opportunity to resolve matters directly.

12. Individuals in the European Economic Area

Where the EU General Data Protection Regulation applies to our processing of your personal data, you have equivalent rights to those set out in section 10, and you may also lodge a complaint with the supervisory authority in the EEA country where you live, work, or where you believe an infringement has taken place.

Transfers of personal data from the EEA to the United Kingdom are covered by an adequacy decision adopted by the European Commission, which recognises the UK as providing an equivalent level of protection. Onward transfers from the UK to Pakistan are governed by the safeguards described in section 7.

13. Children’s privacy

Our services and website are directed exclusively at businesses and professionals. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

14. Third-party links and integrations

Our website may contain links to third-party websites or reference platforms such as LinkedIn, Microsoft Azure, AWS, GitHub, or others. Clicking these links will take you to services governed by their own privacy policies. AccuraSol is not responsible for the privacy practices of third-party websites.

15. Changes to this notice

We review this notice regularly and will update it whenever our processing changes. The date at the top shows when it was last updated. Where changes are significant, we will draw them to the attention of the people affected.

16. Contact us

For any question about this notice, about how we handle personal data, or to exercise any of your rights, please contact:

Data Protection Lead
AccuraSol Limited
28 Felbrigg Close, Luton, LU2 8UL, United Kingdom
dataprotection@accurasol.io

AccuraSol Limited is registered in England and Wales, company number 16235270.