True North Umbrella
0161 5184 429

Privacy Policy

Last updated: October 2026

1. Introduction

True North Umbrella ("we", "our", or "us") is committed to protecting your privacy and ensuring that your personal data is handled securely and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use, store, and share your personal information when you visit our website, register for umbrella employment, or use our payroll services.

2. Who We Are (Data Controller)

True North Umbrella is the data controller responsible for your personal information.

3. Personal Information We Collect

To provide compliant employment and payroll services, we may collect and process:

  • Identity Data: Full name, date of birth, nationality, right-to-work documentation, National Insurance number.
  • Contact Data: Residential address, personal email address, telephone numbers.
  • Financial & Payroll Data: Bank account details for wage disbursements, tax codes, P45/P60 history, student loan deductions.
  • Employment & Timesheet Data: Timesheets, agency assignment details, contract rates, workplace location.
  • Enquiry Data: Information submitted through our contact forms or telephone enquiries.

4. Lawful Bases for Processing

We process your personal data under the following lawful bases:

  • Contractual Performance: To administer your contract of employment, calculate PAYE wages, and disburse weekly pay.
  • Legal Obligation: To comply with HMRC Real Time Information (RTI) reporting, National Insurance legislation, right-to-work verification, and statutory workplace pension auto-enrolment.
  • Legitimate Interests: To respond to enquiries, maintain IT security, and prevent financial fraud.
  • Consent: Where you have opted in to receive our newsletter or email communications (which you may withdraw at any time).

5. Data Sharing and Third Parties

We do not sell your personal data. We only disclose information to authorised third parties where strictly required for payroll, statutory, and operational purposes:

  • HM Revenue & Customs (HMRC): For tax, National Insurance, and statutory reporting.
  • Pension Providers: Options Workplace Pension Trust and NOW: Pensions for statutory auto-enrolment.
  • Recruitment Agencies & End Clients: For timesheet verification, remittance advice, and assignment contracts.
  • Banking Partners: For processing BACS and same-day payment disbursements.

6. Data Retention

Under UK statutory tax and accounting legislation, payroll and financial records must be retained for at least six full financial years following the end of your employment. General enquiries that do not result in employment are safely deleted within 12 months.

7. Your Legal Rights

Under the UK GDPR, you have the right to:

  • Request access to the personal data we hold about you (Subject Access Request).
  • Request correction of incomplete or inaccurate data.
  • Request erasure of your data, subject to statutory retention obligations (e.g. HMRC records).
  • Object to or restrict the processing of your data under certain conditions.
  • Lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.

8. Contact Us

For any data protection inquiries or to exercise your statutory rights, please contact our Data Compliance Team at hello@truenorthumbrella.co.uk or call us on 0161 5184 429.