Privacy policy

  1. Purpose

    Adura is committed to protecting the privacy and security of your data. This privacy notice describes how Adura Energy Limited and its subsidiaries (collectively referred to as “Adura”, “we” or “us”) collect and use personal information about you, in accordance with the Data Protection Act (2018) and the UK General Data Protection Regulation (UK GDPR).

    Adura, registered at 90 Bartholomew Close, London, EC1A 7BN, is a data controller for the information we hold about you. This means that we are responsible for deciding how we hold and use personal information about you. This notice informs you of what information we collect, how we use it and who you can contact to discuss your data privacy queries.

    This notice applies to current and former employees, prospective employees, contractors, business customers, other stakeholders and website visitors. We may update this notice from time to time, so please ensure that you are familiar with it. Where we make any material changes to this notice, we will provide you with an updated copy of this notice as soon as reasonably practical.

    It is important for you to read and retain this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information and what your rights are under the data protection legislation.

  2. What information we collect, use and why?

    1. Prospective employees, current employees, former employees and contractors:

      Staff Recruitment, Administration and Management

      We use personal data such as identification details, contact information, employment history and qualifications to manage recruitment processes, employment administration and day-to-day staff management. This includes maintaining accurate records, supporting career development and ensuring effective workforce planning.

      Managing Salaries and Pensions

      Personal data, including payroll details, bank information and pension arrangements are processed to administer salaries, benefits and pension schemes. This ensures timely and accurate payment, compliance with tax obligations and delivery of agreed benefits.

      Managing Staff Health and Well-being

      We process health-related information, absence records and any necessary adjustments to support employee well-being, workplace safety and occupational health requirements. This helps us provide a safe working environment and meet our duty of care obligations.

      Complying with Legal Requirements

      Certain personal data are used to fulfil legal and regulatory obligations, including employment law, tax reporting, health and safety standards and anti-fraud measures. This ensures Adura operates in compliance with applicable laws and maintains a secure and lawful workplace.

      Sensitive personal data

      We may also collect or use the following special category information to comply with legal requirements and the provision of health and safety arrangements. This information is subject to additional protection due to its sensitive nature:

      • Information about your race or ethnicity, religious beliefs, sexual orientation and political opinions.
      • Information about your health, including any medical condition, health and sickness records.
      • Biometric data.
      • Information about criminal convictions and offences.

    2. Business partners, suppliers, industry customers, other stakeholders and website visitors:

      Business operations

      We process your personal data, including contract details, to manage and maintain our business relationships, deliver agreed services, and ensure compliance with contractual and legal obligations. This includes activities such as account administration, invoicing, performance monitoring, and fulfilling regulatory requirements. We also use personal data to maintain security, prevent fraud, and protect our legitimate business interests.

      Website visitors

      When you visit our website, we may use third-party website analytics services to understand how visitors interact with the website. This helps us understand what areas interest our stakeholders and is used for continuous improvement. We also use cookies as part of website functionality and user experience. Please visit our cookie policy for more information.

      Media and other enquiries

      If you get in touch with us for media or other queries, we’ll process the personal data provided to respond to your request. We may retain the information you provide for a set period in line with our retention schedule.

      Communication and Marketing

      We may use your contact details to share relevant updates about our services, industry insights, and events that may be of interest to you. These communications are designed to support our business relationship and will respect your preferences. You can opt out of marketing communications at any time.

      Integrity Due Diligence

      Adura carries out integrity due diligence so that we can understand who our counter-parties are and comply with legal requirements, including trade sanctions laws and laws relating to anti-money laundering and other financial crimes. Personal data may be processed for this purpose.

  3. Your rights for the personal data we process

    In line with UK data protection law, you have the choice to exercise certain rights in relation to your personal data. This includes:

    • Right of access – You have the right to ask us for copies of your personal information. You can request other information, such as details about where we get personal information from and who we share personal information with.
    • Right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
    • Right to erasure – You have the right to ask us to delete your personal information.
    • Right to restriction of processing – You have the right to ask us to limit how we can use your personal information.
    • Right to object to processing – You have the right to object to the processing of your personal data.
    • Right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
    • Right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time.
    • Right to make a complaint to the data protection authority

    If you request to exercise your rights, we must respond to you without undue delay and within one month, subject to appropriate verification. To exercise your rights, please get in touch using the contact details in the section “Contact details and complaints” below.

  4. Legal basis for processing personal data

    Adura processes your personal data only where permitted by law.

    The main legal bases for processing include: where it is necessary to comply with our legal obligations (such as employment or tax laws); where it is required for the performance of your employment contract or to take steps at your request before entering into a contract; where it is necessary for our legitimate interests such as effective business management, maintaining security, or improving our services, provided these interests are not overridden by your rights and interests; and, in limited cases, where you have given your explicit consent.

    Where we rely on consent, you may withdraw it at any time. We may also process certain sensitive personal data where required by law or to protect your vital interests.

  5. Where we get your personal information from?

    We collect your information from the following places:

    • Directly from you
    • Employment agency
    • Referees (external or internal)
    • Security clearance providers
    • Occupational Health and other health providers
    • Pension administrators or government departments (e.g. HMRC and DWP)
    • Staff benefit providers
    • Public sources (e.g. LinkedIn or other websites)
    • CCTV footage or other recordings
    • Logs and data recorded from Adura’s IT systems

  6. How long do we keep information?

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, accounting, or reporting requirements. The specific retention period depends on the nature of the data and our obligations under applicable law. Once your information is no longer needed, it will be securely deleted or anonymised. For more details on our retention periods or the criteria we use to determine them, please contact us using the details provided in this notice.

  7. Cookie Policy

    This website uses cookies to enhance your browsing experience, provide essential site functionality, and help us understand how our services are being used. Cookies are small text files stored on your device that enable features such as remembering your preferences, analysing site performance, and delivering relevant content. You can manage or disable cookies at any time through your browser settings, though some features of the website may not function properly without them. By continuing to use this site, you agree to our use of cookies in accordance with this Cookie Policy.

    A more detailed and comprehensive Cookie Policy will be published here soon.

  8. How we keep your information safe?

    Adura is committed to protecting personal data in accordance with required relevant data security standards, including the UK General Data Protection Regulation (UK GDPR), which requires the implementation of appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

    Adura maintains a suite of information security policies and standards aligned to industry practice (e.g. CIS, ISO27001, and NIST CSF), which govern the way that Adura systems and data are technically protected and how Information Security risks are identified and reported.

  9. Who we share information with?

    In some circumstances, we may share information with the following organisations. Your personal data will only be shared when necessary for the purposes outlined above and on a strict need-to-know basis with:

    • Authorised third-party agents, service providers, external auditors and subcontractors, such as those performing background, integrity due diligence or reference checks on Adura’s behalf;
    • Public authorities, government bodies, regulators or tax agencies where required to comply with legal or regulatory obligations or as permitted by law, such as HMRC;
    • IT Suppliers and service providers required to operate our digital infrastructure; and
    • Operational service providers, such as personnel transport and safety systems.

  10. Sharing information outside of the UK

    If we transfer your personal data to Adura group companies or authorised third parties outside of the country (including outside the UK or European Economic Area), we ensure appropriate safeguards are in place. These include contractual commitments, organisational measures, and recognised transfer mechanisms such as UK-approved International Data Transfer Addenda (ITDA) clauses, as well as compliance with any applicable local legal requirements.

  11. Contact details and complaints

    If you have any questions about this privacy notice or how we handle your personal information, please contact the compliance officer at . If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details provided.

    Should you wish to raise a complaint separately, you also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.