Privacy Policy

1. Controller and contact details

UK Sponsor List / Sponsorlist.co.uk is operated by Amsky Labs Ltd, a company registered in England and Wales. Amsky Labs Ltd is the data controller for the personal information described in this policy.

For privacy questions or to exercise a data-protection right, email privacy@sponsorlist.co.uk. You can also use our contact page.

2. Information we collect

2.1 Information you provide

2.2 Information collected when you use the site

Our servers and security services may record IP address, date and time, requested URL, browser or device information, referring page, response status and similar technical data. This information is used to deliver the site, diagnose faults, measure performance and prevent abuse.

If you consent to analytics, tools such as Google Analytics and Microsoft Clarity may process identifiers and information about page views, interactions, approximate location, device and referral source. Clarity can create interaction recordings or heatmaps designed to show how pages are used; form fields intended for sensitive information should not be captured. We configure analytics and consent settings to reduce unnecessary collection.

2.3 Consent and advertising information

Our consent platform records your privacy choices and may store a consent string, region, language, timestamp and related technical information so that participating advertising and measurement providers can respect and demonstrate those choices.

If advertising is enabled and you consent, Google AdSense and its approved partners may process cookies, device identifiers, IP address, browsing activity, ad interactions and inferred interests to select, deliver, limit, measure and protect advertising. If you reject personalised advertising, Google may still serve contextual or limited ads where permitted, using less information. Essential security and consent technologies may operate without advertising consent where legally allowed.

2.4 Public sponsor data

The directory is built primarily from public-sector information in the GOV.UK Register of Licensed Sponsors: Workers. It generally concerns organisations rather than individuals. A business name can occasionally identify a sole trader or another person. We process and republish relevant public register information to provide a searchable public-interest research service, subject to the source licence and the safeguards described in our data methodology.

3. Purposes and UK GDPR lawful bases

Where we rely on legitimate interests, we consider the purpose, necessity and impact on individuals. You can object to processing based on legitimate interests; see section 9.

4. Cookies, local storage and consent choices

Cookies are small text files stored by a website or provider. Similar technologies include local storage, pixels and device identifiers. We use the following categories:

• Strictly necessary: security, load balancing, preference storage and consent records needed to provide the service or remember your choices.
• Analytics: optional measurement of visits and interactions so we can improve performance and content.
• Advertising: ad delivery, frequency control, fraud detection and, with consent, personalised advertising and measurement.
• Functional: optional features that remember settings or support embedded third-party content.

For users in the UK, EEA and Switzerland, we use a Google-certified consent management platform that supports the IAB Europe Transparency & Consent Framework where applicable. Non-essential advertising and analytics consent signals default to denied until a choice is recorded. The message lets you accept, reject or manage purposes and vendors.

You can change or withdraw your decision at any time by selecting Privacy choices in the footer or on this page. Withdrawal does not make earlier lawful processing unlawful. You can also clear cookies in your browser, although doing so may cause the consent message to reappear.

5. Google AdSense and advertising partners

We may use Google AdSense to fund free access to the directory and editorial guides. Google and participating advertising vendors can use cookies or similar identifiers to provide, personalise and measure ads, prevent invalid activity and produce aggregated reports. The vendors and purposes available to you are listed in the consent interface.

Google acts as an independent controller for some advertising processing and as a processor for other services, depending on the feature and configuration. You can read how Google uses information from sites that use its services and Google’s privacy policy. An advert appearing on Sponsorlist does not mean that Amsky Labs Ltd endorses the advertiser, recruiter or offer.

6. Who receives personal information

We disclose information only where necessary for the purposes above. Recipients can include:

• website hosting, security, content-delivery and backup providers;
• email, contact-form and newsletter providers;
• Google services, including AdSense and analytics, subject to your choices;
• Microsoft Clarity or another configured analytics provider, subject to your choices;
• professional advisers, auditors and insurers where necessary;
• regulators, courts, law enforcement or public authorities where disclosure is legally required; and
• a buyer or successor if the business or service is reorganised, subject to appropriate safeguards.

We do not sell contact lists. Advertising providers may use consented data across services under their own notices; use the CMP vendor controls to review and limit that activity.

7. International transfers

Some providers, including Google and Microsoft, may process information outside the United Kingdom. Where a restricted international transfer occurs, we use an available safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism. Providers may also rely on their own approved frameworks where applicable.

You can contact us for more information about the safeguard relevant to a particular provider. Public internet services cannot eliminate every transfer risk, so we also minimise the information we send and use consent controls for non-essential processing.

8. Retention and security

We keep personal information only for as long as reasonably necessary for its purpose, including legal, accounting, security and dispute requirements. Typical periods are:

We use access controls, updates, backups, transport encryption and service-provider controls intended to protect information. No website or transmission method is completely secure; please avoid sending unnecessary sensitive data through a general contact form.

9. Your rights under the UK GDPR

Depending on the circumstances, you may have the right to:

• ask whether we process your personal data and receive a copy;
• correct incomplete or inaccurate personal data;
• request erasure where no lawful reason for retention applies;
• restrict processing in specified circumstances;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a portable, machine-readable format;
• withdraw consent at any time; and
• challenge a decision based solely on automated processing that has legal or similarly significant effects.

We do not use Sponsorlist browsing data to make solely automated decisions with legal or similarly significant effects about users. To exercise a right, email privacy@sponsorlist.co.uk. We may need proportionate information to verify your identity. We normally respond within one month, subject to lawful extensions for complex requests.

You can complain to the Information Commissioner’s Office, the UK supervisory authority. We would appreciate the opportunity to address your concern first, but contacting us is not a condition of complaining to the ICO.

10. Children, external links and changes

Sponsorlist is intended for adults researching employment and immigration information and is not directed to children under 16. We do not knowingly request personal information from children.

Our pages link to GOV.UK, employers, job services and other independent websites. Their operators determine their own privacy practices. Review their notices before sending information.

We may update this policy when our services, providers or legal obligations change. The date at the top identifies the current version. Material changes will be highlighted through an appropriate website notice or renewed consent where required.