Hirer and Business Contact Privacy Notice

Vortexorce Limited (“Vortexorce”, “we”, “us”) is the controller of the personal data described in this notice. We are registered in England and Wales with company number 13304681, and our registered office is at Suite RA01, 195-197 Wood Street, London, E17 3NU. We were formerly named Driversgo Ltd until 11 April 2026.

This notice is for individuals connected with our business clients, whom we call hirers. That means:

• the person who signs our Terms of Business, and the directors, partners or officers whose details we verify;
• authorised users who hold a Portal login;
• site contacts, supervisors and accounts payable contacts named in an assignment or in the Commercial Schedule;
• anyone who enquires about our services on behalf of a business; and
• any individual who guarantees a hirer’s obligations to us.

It does not cover the agency workers we supply. They have their own notice, the Agency Worker Privacy Notice. Section 7 below explains how a hirer must handle worker data it receives.

Where we rely on legitimate interests, we have documented an assessment weighing those interests against your rights. You may ask us for a summary of it.

As an employment business we must pay the workers we supply for the hours they have worked whether or not the hirer has paid us. Credit assessment is how an employment business manages that exposure, and our Terms of Business allow us to carry out credit reference and identity searches on a hirer and, where the hirer is a small company, partnership or sole trader, on its directors, partners or principals.

We do not carry out such searches at present. Before we start, we will name the credit reference agency we use in this notice and link to that agency’s own information notice, and we will tell you before we search you as an individual. You may ask us not to search you, although we may then decline to open the account or may require pre-funding or a deposit instead.

You should know what a search would mean if we do introduce one: the agency keeps a record of it, and where the search is on an individual rather than on a company, that record may be visible to other organisations searching the same individual.

We do not sell your personal data and we do not share it for anyone else’s marketing.

Where a provider we use stores or accesses data outside the United Kingdom, we transfer it only under adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, and we carry out a transfer risk assessment first. You may ask us which providers are involved and which mechanism applies.

This section is about the hirer’s own responsibilities, not about your personal data, but it belongs here because hirers regularly ask about it.

When we supply a worker, we and the hirer are each independent controllers of the worker’s data for our own purposes. The data-sharing terms in Annex G of our Terms of Business are mandatory and set out what may be shared and why. In summary, a hirer:

• receives the result of a right-to-work or identity check, not copies of the documents, unless the law or the role requires the copy;
• receives availability and fitness flags and work restrictions, never a diagnosis, medical history, fit note content, test result or anything from which a health condition, disability or pregnancy could be inferred, and must delete and tell us if such information reaches it by accident;
• may use worker data only to fill and run assignments, for site access and safety, for timesheet verification and for legal compliance;
• must not scrape, bulk-export, copy, resell or publish worker data, must not build its own worker database from the Platform, and must not use worker data for recruitment outside the Platform;
• must not publish or share any rating or assessment of a worker;
• must give a reason from a fixed list when it places a worker in a group that excludes that worker from its future assignments, must never use health, sickness, disability, pregnancy, trade union activity, a protected disclosure or the assertion of a statutory right as that reason, and must correct a placement shown to be wrong; and
• must tell us of any personal data breach affecting data received from us, without undue delay and within 24 hours of becoming aware of it.

Where we process data solely on a hirer’s instructions rather than for our own purposes, including where a hirer uses the Platform for its own directly employed workforce, we sign an Article 28 data-processing addendum before that processing begins.

We may send you information about our services by email where you have asked for it, where you have given your details in the course of enquiring about or buying our services, or where you are a corporate subscriber and the law permits it. Every marketing message carries an unsubscribe link, and you can also tell us at any time using the details in section 1. We will stop, and we will not ask you to justify the decision. Stopping marketing does not stop service messages about your account, your invoices or the workers on assignment with you, which we have to send.

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to object to direct marketing at any time, the right not to be subject to a solely automated decision with a legal or similarly significant effect, and the right to complain to the Information Commissioner. Exercising any of them is free.

Contact us using the details in section 1. We reply within one month, extendable by up to two further months for complex or repeated requests, in which case we will tell you within the first month and explain why. We may need to verify your identity. We charge nothing, except that we may charge a reasonable fee for further copies of the same information or where a request is manifestly unfounded or excessive, and we will explain any fee first.

You can complain to the Information Commissioner’s Office at any time: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk.

We review this notice at least annually and whenever our processing changes. Material changes are notified through the Portal or by email before they take effect. Previous versions are available on request.