Data Processing Notice

Controller and product roles

Ayotte Recruitment and Training Academy is the data controller for ARTA-HUB. ARTA-HUB is used to manage recruitment, candidate profiles, job applications, training records, organisation relationships, and operational administration.

Veritium Support Services Limited developed ARTA-HUB and may act as a service provider or processor if it supports, maintains, hosts, or otherwise processes personal data for the platform under Ayotte Recruitment and Training Academy's instructions.

We maintain a Record of Processing Activities (Article 30 UK GDPR) covering all processing described in this notice and the Privacy Policy.

Processing activities

Processing includes account creation, authentication, candidate and tutor profile management, profile visibility controls, document upload and download, job posting and application handling, recruitment review, training enrolment and completion tracking, audit logging, policy acceptance recording, and support.

Categories of data subjects and data

Data subjects may include candidates, learners, tutors, company representatives, platform administrators, and invited users. Data may include identity, contact, employment, education, qualifications, training, application answers, uploaded documents, organisation membership, policy acceptance records, and technical security records.

Sub-processors

We use the following categories of sub-processors to deliver ARTA-HUB. All sub-processors are subject to written data processing agreements and must meet equivalent data protection standards:

• Infrastructure and hosting: cloud servers and compute infrastructure used to run the ARTA-HUB application and database.
• Object storage: secure file storage used for profile images and uploaded documents.
• Email delivery: transactional email providers used for verification, notification, and platform communications.
• In-memory data store: session and queue management infrastructure used to support secure login and background processing.

A current list of named sub-processors is available on request by contacting admin@ayotterecruitment.com.

Processor safeguards

Processors must process data only on documented instructions, keep it confidential, apply appropriate technical and organisational security measures, assist with data subject rights requests and incident handling where relevant, and delete or return data when processing ends unless retention is legally required.

International transfers

Where personal data is transferred outside the UK or European Economic Area, we ensure an appropriate safeguard is in place, such as an adequacy decision, UK International Data Transfer Agreement (IDTA), standard contractual clauses, or another lawful transfer mechanism recognised under UK GDPR. We do not transfer data to jurisdictions without an adequate level of protection unless a specific safeguard applies.

Requests and contact

Data rights, processor, or privacy questions should be sent to admin@ayotterecruitment.com or raised by phone on +44 020 3343 5266. You may also use the My Data & Privacy section of your account to download your data or request account deletion.