Privacy Policy

Last updated: April 2026

1. Who we are

Scout is operated by LS Equipe Ltd, a company registered in England and Wales. We provide the SCOUT AI back-office platform to UK recruitment agencies.

For questions about this policy or your data, contact us at: hello@luxxstack.co.uk

2. Data we collect

When you use our website:

  • Name and email address if you submit an enquiry or book a call
  • Basic analytics data (page views, referral source) via privacy-respecting tools
  • No cookies beyond what is strictly necessary

When your agency uses SCOUT:

  • We process candidate and client data on your behalf as a data processor
  • Your agency remains the data controller for all candidate and client data
  • We only process data as instructed by you and as necessary to deliver the SCOUT service
  • We do not use your agency data to train AI models or share it with third parties

3. How we use your data

  • To respond to enquiries and book onboarding calls
  • To deliver and maintain the SCOUT platform for your agency
  • To send service-related communications (not marketing, unless you opt in)
  • To comply with our legal obligations

Our lawful basis for processing is legitimate interests (responding to enquiries) and contract performance (delivering the SCOUT service).

4. Data processor obligations

Where Scout acts as a data processor on behalf of your agency, we commit to:

  • Processing data only on your documented instructions
  • Ensuring all staff with access to your data are bound by confidentiality
  • Implementing appropriate technical and organisational security measures
  • Assisting you in responding to data subject rights requests
  • Deleting or returning all personal data at the end of the service relationship
  • Providing all information necessary to demonstrate compliance with Article 28 GDPR

A Data Processing Agreement (DPA) is available on request and is included as part of our standard service agreement.

5. Data storage and security

All data is stored on UK or EU-based servers. We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.

Each agency deployment is isolated. Your data is never accessible to other agencies or used for any purpose outside your deployment.

We implement appropriate technical measures including encryption at rest and in transit, access controls, and regular security reviews.

6. Data retention

Website enquiry data is retained for 12 months or until you request deletion, whichever comes first.

Agency deployment data is retained for the duration of the service agreement and deleted within 30 days of termination, unless a longer retention period is required by law.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at hello@luxxstack.co.uk. We will respond within 30 days.

8. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active clients by email. The latest version is always available at luxxstack.com/privacy.