Last updated: 7 May 2026
Instant Check ("we", "us", or "our") operates the Instant Check mobile application and web platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service for BS7858:2019 pre-employment vetting.
We collect the following categories of personal data:
Identity Information: Full name, date of birth, National Insurance number, and photographic identification documents.
Contact Information: Email address, phone number, and residential address history.
Employment & Education History: Details of previous employers, job titles, dates of employment, and educational qualifications covering the past five years.
Document Images: Photographs of identity documents, SIA badges, proof of address, and other documents required for BS7858 vetting.
Biometric Data: Face ID or fingerprint data used solely for device-level authentication. This data is stored on your device and is never transmitted to our servers.
Device Information: Device type, operating system, and push notification tokens for delivering status updates.
We process your personal data for the following purposes:
To carry out BS7858:2019 pre-employment screening checks on behalf of your prospective employer or their appointed screening company; to verify your identity, right to work, employment history, and professional qualifications; to communicate with you about the status of your vetting checks; and to comply with our legal and regulatory obligations.
We process your data under the following lawful bases: performance of a contract (processing your vetting application), legitimate interests (ensuring the security and integrity of the vetting process), and compliance with legal obligations (BS7858:2019 requirements and applicable employment law).
Your personal data may be shared with: the employer or screening company that initiated your vetting; third-party verification services (such as SIA licence verification and right-to-work checks via gov.uk); our hosting and infrastructure providers (Supabase and Vercel) who process data on our behalf under appropriate data processing agreements. We do not sell your personal data to any third party.
We retain your personal data for the duration required to complete the vetting process and for up to six years afterwards to comply with BS7858:2019 record-keeping requirements. You may request earlier deletion of your data, subject to our legal obligations.
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, row-level security on our database, secure authentication with session management, and regular security reviews.
Under UK GDPR and the Data Protection Act 2018, you have the right to: access your personal data, rectify inaccurate data, request erasure of your data (subject to legal retention requirements), restrict processing, data portability, and object to processing. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
You can permanently delete your account and all associated data at any time by visiting our account deletion page. Deletion is permanent and cannot be undone.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date above.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@instantcheck.app.