Purpose and minimisation

We collect information for clear recruitment, relationship, legal and security purposes. We aim to request only what is relevant at each stage and avoid collecting sensitive material before it is needed.

Candidate control and fair processing

We explain how information will be used, keep candidate interests central when making introductions and provide routes to correct, access or remove information where the law permits. We do not sell candidate databases.

Security and access

Access is limited to people and suppliers who need information for an authorised purpose. We use account controls, secure connections, restricted administration areas, supplier review and proportionate technical and organisational safeguards.

Quality and retention

Recruitment information is kept as accurate and current as reasonably possible. Records are reviewed and deleted or anonymised when they are no longer needed, subject to legal, contractual and regulatory requirements.

Suppliers and international processing

Suppliers handling personal information are selected for an appropriate service need and are required to protect it. International processing is assessed and protected using legally recognised transfer mechanisms where required.

Incidents and accountability

We investigate suspected personal-data incidents promptly, take steps to limit harm, preserve appropriate records and notify affected people or regulators where the law requires it. We periodically review our privacy information and operating practices.

Make a data protection request

Use the Start a conversation form and select “Data protection request”. Tell us the right you wish to exercise and enough information for us to locate the relevant records. We may ask for proportionate identity verification before disclosing or changing personal information.