At Saragossa Limited (“Saragossa ”) we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR) (where applicable), and other relevant data protection laws.

For the purposes of data protection legislation, the Data Controller is:

Saragossa Limited
48-52 Baldwin Street
Bristol
BS1 1QB

Our Data Protection Officer (DPO) is: Jimmy Lloyd – dpo@Saragossa .co.uk

Who are we and what do we do?

Saragossa connects buy-side organizations with the technology and talent to accelerate change – from precision hiring to full project delivery and IT managed services.

What information do we collect?

We collect the personal data of the various types of individuals to allow us to conduct our business. To see how our Privacy Policy relates to you and your data please review the appropriate policy below.

1. Candidates;
2. Contractors;
3. Clients;
4. Suppliers;
5. Potential Saragossa Employees;
6. Visitors to our Website

Legal Basis for Processing

We will only process your personal data where we have a lawful basis under the GDPR/UK GDPR. This may include:

• Consent: where you have given clear consent for us to process your data.
• Contract: where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: where processing is necessary for us to comply with the law.
• Legitimate interests: where processing is necessary for our legitimate business interests, except where your rights override those interests.

International Data Transfers

Your personal data may sometimes be transferred outside the UK or the European Economic Area (EEA). Where this occurs, we will ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) and, where relevant, the UK Addendum, to ensure that your personal data remains adequately protected.

Data Retention

We will only retain your personal data for as long as is necessary for the purposes set out in this Privacy Policy, and in accordance with applicable legal, tax, and regulatory requirements. We retain personal data where we have a legitimate business interest in doing so, for example to maintain ongoing relationships with candidates, contractors, clients, or suppliers, and to ensure we can provide our services effectively. Where we no longer have a legitimate business interest or legal obligation to retain your personal data, it will be securely deleted or anonymised.

Your Rights

You have a number of rights under the GDPR/UK GDPR. These include the right to:

1. Be informed about how we use your data.
2. Access the personal data we hold about you.
3. Request correction of inaccurate or incomplete data.
4. Request erasure of your personal data (where there is no overriding lawful basis).
5. Restrict our processing of your data in certain circumstances.
6. Data portability – request that we provide your data in a structured, commonly used format
7. Object to our processing, particularly for direct marketing.
8. Withdraw consent at any time, where consent is the basis for processing.
9. Not to be subject to automated decision-making, including profiling.

We aim to respond to all valid requests within one month, in accordance with the law.

How Does Our Site Use Cookies?

Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.

By using Our Site, you may also receive certain third party Cookies on your computer or device. Third party Cookies are those placed by websites, services, and/or parties other than Us. Third party Cookies are used on Our Site for Google Analytics.

For more details of the personal data that we collect and use, the measures we have in place to protect personal data, your legal rights, and our legal obligations please refer to our Privacy Policy. For more specific details of the Cookies that we use, please refer to the table below.

What Cookies Does Our Site Use?

The following first-party Cookies may be placed on your computer or device:
laravel_session
Site requirement to identify site visitor throughout their visit Expiration Time: 12 hours
_ga
Used to distinguish users
Provider: Google Analytics Expiration Time: 2 years
_gid
Used to distinguish users Provider: Google Analytics Expiration Time: 24 hours
_gat
Used to throttle request rate Provider: Google Analytics Expiration Time: 1 minute
_atuvc
Helps to ensure share counter you see on the website properly updates after you’ve shared something
Provider: AddThis
Expiration Time: 1 year
Google Analytics helps website owners measure how users interact with website content. As a user navigates between web pages, Google Analytics records information about the page a user has seen, for example the URL of the page. Google Analytics uses HTTP Cookies to “remember” what a user has done on previous pages/interactions with the website.

You can find more information about how Google Analytics uses cookies

You can find more information about the AddThis Social Sharing Platform

Consent and Control

In addition to the controls that We provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third party Cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

The links below provide instructions on how to control Cookies in all mainstream browsers:

Children’s Privacy

We do not knowingly collect or process data from children under the age of 16. Our services are not directed to children.

Security and Data Storage

We use appropriate technical and organisational measures to protect your data and ensure it is kept secure.

Cookies and Similar Technologies

Our website uses cookies in line with UK PECR and GDPR. Non-essential cookies are only used with your consent.

Changes to this Privacy & Cookie Policy

If there are updates to this Privacy & Cookie Policy, we will post those changes and update the revision date in this document, so you will always know what information we collect, how we use it, and what choices you have. For material changes to this Privacy & Cookie Policy, Saragossa will actively notify affected individuals.

This policy was last amended on 02 October 2025. 

How you can contact us

If you have any comments or questions about our Privacy Policy or our use of your personal data or you wish to exercise any of your rights under this Privacy Policy please contact our Data Protection Officer: [email protected]

Saragossa Limited
48-52 Baldwin Street
BS1 1QB