Candidate Wallet: Privacy Notice & Terms

1. What the wallet is

When a company screens you through Yezda and your screening ends in a certificate, you can choose to save your details to your wallet. If another company later screens you through Yezda, using the same email address, you can fill in their forms from your wallet instead of typing everything again.

The wallet only saves typing. The new company still carries out every check itself, and you review each step before you submit it. Using the wallet is optional: you can always fill in the forms yourself.

2. Who is responsible

Yezda Solutions Group Ltd (company no. 17092752, ICO registration ZC147640) is the controller of your wallet. We keep it for you, separately from any company's records.

3. What we keep, and what we never keep

What your wallet holds

• Personal details: title, middle name, date of birth, gender, nationality, country of birth, National Insurance number, social media profile links, previous names, and your profile photo.
• SIA licences: licence numbers and the photos of your licence cards.
• Address history: your addresses and dates, and the proof-of-address documents you uploaded.
• Work history: jobs, self-employment, study, volunteering and gaps, with dates, explanations, referee contact details and the documents you uploaded.
• Education: qualifications, dates and the documents you uploaded.

These are the details as they stood on your completed screening, including any corrections the screening team made. Only files you uploaded yourself are kept; files a company added to your screening are not.

What your wallet never holds

• Consents and documents you signed for a company.
• Your criminal record and financial declarations.
• Identity, right to work, credit, DBS or social media check results.
• Answers to a company's own questions.
• What your referees said about you.

Every company asks for those again, fresh.

4. How your wallet is used

Your wallet is used for one thing only: filling in a screening when you choose to.

• You choose which sections to fill in. A section you have already filled in for that screening is left as it is.
• Everything is checked as if you had typed it in, for example your SIA licence against the public register.
• Referees: your referees are not contacted when your work history is filled in. When you submit your work history, we email each referee for a new reference for that company.

We do not use your wallet for marketing, profiling or anything else, and we never sell it.

5. Lawful basis

We keep your wallet because you asked us to: consent, under Article 6(1)(a) UK GDPR. You give it when you tap "Agree and save", and we record the date and the version of this page you agreed to. You can withdraw it at any time by deleting your wallet in the app; that doesn't affect any screening you have already filled in from it.

The wallet is not designed to hold special category data. Your profile photo is kept as a photo; it is not used to identify you inside the wallet. Any check a company runs with it after you fill in its screening is that company's processing, explained in its own privacy information.

6. Who can see it

• Only you. Companies cannot see your wallet, search for it, or read it. They only receive what you choose to copy into their screening.
• Our sub-processors, which store and send data on our behalf: Amazon Web Services (hosting in London) and our transactional email provider, which sends the reminder before your wallet is deleted. See the list in our DPA.
• Regulators, law enforcement or courts, only where the law requires us to disclose it.

7. How long we keep it

Deleted data can remain in our encrypted backups for up to 30 days before the backups themselves expire. It is not used during that time.

8. Security

Your wallet is stored in the UK (London) and encrypted twice: the details are sealed with AES-256-GCM before they are stored, and the storage itself is encrypted. It is only opened when you are signed in to the app with the email address it belongs to, which you prove with a one-time code sent to that address. Companies' access to Yezda cannot reach it.

9. Your rights

Under UK GDPR you have the right to:

• Access: see what's saved in the app (Settings → Wallet), or ask us for a copy.
• Rectification: correct details in the screening you fill in, and save again after your next completed screening.
• Erasure and withdrawing consent: delete your wallet in the app at any time, or ask us to.
• Data portability: ask us for a copy of your wallet in a structured format.
• Complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

Email info@yezda.co.uk to exercise any right. We will respond within one calendar month.

10. Terms of using the wallet

• You can save to a wallet once a screening carried out through Yezda has ended in a certificate. There is no charge.
• Only save and use your own details, and keep them accurate. When you fill in a screening from your wallet, you are responsible for checking the details before you submit them, as if you had typed them in.
• Each company decides how it screens you and makes its own decisions. The wallet doesn't mean a company will accept you, accept a document, or skip a check.
• Proof-of-address and other documents can go out of date. A company may ask you for newer ones.
• We may change, pause or withdraw the wallet. If we withdraw it, we will tell you in the app and delete saved wallets. Your screenings are not affected.
• These terms sit alongside our Terms of Service and Privacy Policy, and are governed by the law of England and Wales.

11. Changes

If we make a material change to this page, we will ask you to agree again the next time you save your details. The date at the top shows the current version.

12. Contact & complaints

Yezda Solutions Group Ltd · Zach Hewlett-Walker, Data Protection Officer · 12B George Street, Bath, England, BA1 2EH · info@yezda.co.uk