Effective date: [Effective Date]
1. Who we are
[Company Ltd] ("we", "us") is a company registered in England and Wales (company number [Company Number]), with its registered office at [Registered Office Address]. We are the data controller for personal data collected through this website. Contact: email@yourdomain.com.
2. What we collect
- Details you give us through our contact form or by email: name, company, email, phone number and your message.
- For IT staffing: CVs and career details that candidates send us, such as work history, skills, qualifications and right-to-work information.
- Basic technical data when you visit the site, such as IP address, browser type and pages viewed, if analytics cookies are enabled.
3. How we use it and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Responding to enquiries | Legitimate interests |
| Providing services under a contract | Contract |
| Matching candidates to roles and sharing CVs with clients | Consent or legitimate interests (we ask before sending your CV to a client) |
| Website analytics | Consent |
| Meeting legal, tax and accounting obligations | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making.
4. Who we share it with
We share data only where needed: with clients (candidate CVs, with your agreement), with service providers who host our website, email and systems, and with professional advisers or authorities where the law requires.
5. International transfers
We operate in the UK, Europe and the Middle East. Where data is transferred outside the UK or EEA, we use appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
6. How long we keep it
Enquiry data: up to 2 years after our last contact. Candidate data: up to 2 years after our last contact, unless you ask us to delete it sooner. Client records: up to 6 years for legal and accounting purposes.
7. Your rights
You can ask to access, correct, delete or restrict your data, object to how we use it, withdraw consent at any time, or request a copy to transfer. Email email@yourdomain.com. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). If you are in the EU, you can contact your local data protection authority.
8. Security
We use appropriate technical and organisational measures to protect your data, including access controls and encrypted services.
9. Changes
We may update this policy. The latest version will always be on this page, with its effective date.