Privacy Policy – Data Collection and Use (Recruitment Company, UK)
1. Introduction
This Privacy Policy explains how we collect, use, store, and protect personal data as part of our recruitment services. We are committed to handling all information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We act as a Data Controller when we receive and process personal data from candidates, clients, suppliers, and website users.
2. What Personal Data We Collect
We collect only the information necessary to deliver recruitment services effectively. This may include:
Candidate Data
• Name, address, email, phone number
• CVs, portfolios, employment history, qualifications
• Skills, experience, salary expectations
• Right‑to‑work documentation
• Interview notes and assessment outcomes
• References (with your consent)
• Any additional information you choose to share with us
Client & Supplier Data
• Contact names, job titles, and business contact details
• Billing and payment information
• Records of communication and service agreements
Website & Digital Data
• IP addresses and device information
• Cookies and usage analytics
• Contact form submissions
3. How We Collect Personal Data
We gather data through several lawful and transparent methods:
Directly from You
• When you submit your CV or apply for a role
• When you register on our website
• When you contact us by email, phone, or social media
• During interviews or screening calls
From Third Parties (with your consent or where legally permitted)
• Job boards and CV databases
• LinkedIn and other professional networking platforms
• Recruitment partners or referrers
• Former employers or referees
• Background‑checking providers (where applicable)
Automatically
• Through website analytics tools
• Via cookies and tracking technologies.
4. Why We Collect Your Data (Legal Basis)
We process personal data under the following lawful bases:
Legitimate Interests
To operate as a recruitment business, including:
• Matching candidates to job opportunities
• Communicating with candidates and clients
• Maintaining business records
Consent
For:
• Marketing communications
• Sharing your CV with a client
• Collecting references
Legal Obligation
For:
• Right‑to‑work checks
• Compliance with employment and tax laws
Contractual Necessity
When entering into agreements with clients or suppliers.
5. How We Use Your Data
We use personal data to:
• Assess your suitability for roles
• Share your profile with clients (with your consent)
• Manage recruitment processes and interviews
• Provide recruitment advice and career support
• Maintain accurate business and financial records
• Improve our website and services
• Comply with legal and regulatory requirements
We never sell your data.
6. Who We Share Your Data With
We may share your information with:
• Clients seeking candidates
• Background‑checking or testing providers
• IT, CRM, and cloud‑hosting providers
• Legal, financial, or compliance advisers
• Government bodies where required by law
All third parties must comply with UK GDPR and protect your data.
7. International Transfers
If data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
• UK GDPR‑approved adequacy decisions
• Standard Contractual Clauses (SCCs)
• Additional security measures where required.
8. Data Retention
We retain data only for as long as necessary:
• Candidate data: typically up to 6 years after last contact (industry standard), unless you request deletion sooner
• Client and supplier data: retained for legal and financial record‑keeping
• Website analytics: retained according to cookie settings
You may request deletion at any time.
9. Your Rights
Under UK GDPR, you have the right to:
• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the ICO (Information Commissioner’s Office)
We will respond to all requests within one month.
10. Data Security
We use technical and organisational measures to protect your data, including:
• Encrypted storage and secure servers
• Access controls and authentication
• Regular security monitoring
• Staff training on data protection
11. Contact Us
For questions or data requests, please email contact@apfresourcing.com
12. Contacting the Information Commissioner’s Office (ICO)
If you have concerns about how we handle your personal data, you may contact the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: www.ico.org.uk
Helpline: 0303 123 1113