GDPR & Data Protection.
How we comply with UK GDPR and protect your data. Athlete data is held on The People System and is never shared with any third party, including employers, without the athlete’s consent. Athletes To Industry is a trading name of Andrews Recruitment Group Ltd.
Last updated: 8 May 2026
01. Our commitment
Andrews Recruitment Group Ltd is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Athletes To Industry and The People System are trading names of Andrews Recruitment Group Ltd, a company registered in England and Wales (company number 15629454), registered office Second Floor South, The Fitted Rigging House, Anchor Wharf, The Historic Dockyard, Chatham, Kent, ME4 4TZ.
Andrews Recruitment Group Ltd is the data controller for the personal data described here and is registered with the Information Commissioner’s Office (ICO) under registration number ZB852660. This page should be read alongside our Privacy Policy.
02. How athlete data reaches us
Athlete data only ever reaches Andrews Recruitment Group in one of two ways:
- It is submitted to Andrews Recruitment Group by the athlete’s club, where the club is referring the athlete into the programme; or
- It is provided directly to Andrews Recruitment Group by the athlete themselves.
In both cases the data is held securely on The People System, the talent and development portal operated by Andrews Recruitment Group Ltd.
03. Where athlete data is held
Athlete data is held on The People System portal, which is operated by Andrews Recruitment Group Ltd. The People System is the single place where an athlete’s profile, history, qualifications, preferences, and development plan are stored and managed throughout the programme.
04. No third-party sharing without consent
We do not share athlete data with any third party, including employers, without the explicit consent of the athlete. An athlete’s profile is only put in front of an employer, training provider, or any other third party once the athlete has agreed to it.
We do not sell athlete data, and we do not pass it to third parties for marketing. The only routine processors who may handle the data are the service providers that host and run The People System on our behalf, who act under our instructions and are bound to keep the data secure.
05. Lawful bases for processing
Under UK GDPR we rely on the following lawful bases:
- Consent: in particular before sharing an athlete’s data with an employer or other third party.
- Contract: where processing is necessary to take steps at the athlete’s request or to deliver the programme.
- Legitimate interests: to operate the programme and match athletes with suitable opportunities, where this does not override the athlete’s rights.
- Legal obligation: where we are required by law to process the data.
06. Your rights under UK GDPR
You have the right to:
- be informed about how your data is used;
- access the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing in certain circumstances;
- data portability — to receive your data in a portable format;
- withdraw consent at any time, where we rely on consent;
- not be subject to a decision based solely on automated processing.
07. Making a request
To exercise any of your rights, including a subject access request, email us at tom@andrews-recruitment.com. We will respond within one month, as required by law. There is normally no charge for making a request.
08. Withdrawing consent
Where we rely on your consent, you can withdraw it at any time by contacting us. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdrew it. If an athlete withdraws consent to be put forward to employers, we will stop sharing their data for that purpose.
09. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet any legal or regulatory requirements. When data is no longer needed it is securely deleted or anonymised.
10. Data security
We use appropriate technical and organisational measures to protect personal data held on The People System and elsewhere against unauthorised access, loss, or misuse.
11. Complaints
If you have a concern about how we handle your data, please contact us first at tom@andrews-recruitment.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
12. Contact
For any data protection question, contact Andrews Recruitment Group Ltd at tom@andrews-recruitment.com.
