Privacy Policy
NRL Group Ltd (“NRL”, “we”, “us”, “our”) is committed to protecting the privacy of visitors to nrlgroup.co.uk (“the Website”).
This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
This Privacy Policy applies to data collected through our service platforms, including nrlgroup.co.uk and other NRL-operated websites.
- Information We Collect
We may collect the following personal data when you interact with the Website:
1.1 Information you provide voluntarily
- Name, email address, telephone number, and other contact details submitted via enquiry or contact forms
- Information provided through direct communications (email, phone, or social media)
- Information relating to business enquiries across NRL’s services, including recruitment and workforce solutions, engineering, rail, NDT, and language services
1.2 Information collected automatically
- Website usage data (pages visited, time spent, interactions) via cookies or analytics tools
- Technical data such as IP address, browser type, device type, and operating system
- Traffic data, location data, and communication logs related to Website usage
We may also obtain limited personal data from publicly available sources where relevant to business enquiries.
- How We Use Your Personal Data
We process personal data for the following purposes:
- Service delivery: to respond to enquiries and provide information about NRL’s services across recruitment, workforce solutions, engineering, and specialist sectors
- Business administration: to manage enquiries, client relationships, and internal processes across the Group
- Compliance and legal obligations: to comply with applicable laws, regulations, and contractual requirements
- Website performance and analytics: to improve usability, functionality, and user experience
- Marketing and communications (where consent has been given): to provide relevant updates, insights, or service information across NRL Group
Personal data is used only for legitimate business purposes connected to NRL’s operations.
- Legal Basis for Processing
| Purpose | Legal Basis |
| Strictly necessary processing (e.g. enquiries, service delivery) | Performance of a contract / legitimate interest |
| Analytics, functional, and marketing cookies | Consent |
| Marketing communications (where opted in) | Consent |
| Compliance with legal obligations | Legal obligation |
- Sharing Your Data
We do not sell your personal data. We may share personal data:
- With relevant NRL Group companies or service areas where necessary to respond to enquiries or deliver services
- With clients or project partners where required for service delivery
- With third-party providers supporting Website functionality, analytics, or hosting
- Where required by law, regulation, or legal process
All third parties are required to protect personal data in accordance with applicable data protection laws.
- Data Retention
- Personal data related to enquiries is retained only as long as necessary to manage communications and business relationships
- Client and project-related data is retained in line with contractual and regulatory obligations
- Marketing data is retained until consent is withdrawn
- Aggregated or anonymised analytics data may be retained for internal reporting purposes
- Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure (the “Right to be Forgotten”)
- Restrict processing of your personal data
- Object to certain processing activities, including direct marketing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact: enquiries@nrl.co.uk
Note: Where you request deletion, we will remove your data unless retention is required for legal or regulatory purposes.
- Cookies and Tracking
We use cookies and similar technologies on the Website.
Cookies are used to:
- Ensure Website functionality
- Analyse Website usage
- Remember user preferences
- Support marketing and advertising (where consent has been given)
For more information, please refer to our Cookie Policy.
- Security of Your Data
We implement appropriate technical and organisational measures to protect your personal data against:
- Unauthorised access, disclosure, or loss
- Accidental or unlawful destruction
- Misuse or alteration
Access to internal systems and data is restricted to authorised personnel only and managed in line with our security controls.
Personal data is only accessed on a need-to-know basis.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal, technical, or business developments.
Updates will be published on the Website, and continued use constitutes acceptance of the updated policy.
- Contact Us
For questions or concerns regarding this Privacy Policy or your personal data, please contact:
NRL Group Ltd
Building 5, Glasshouse Business Park
Wigan, Lancashire, WN3 6GL
United Kingdom
Email: enquiries@nrl.co.uk