- 01782 703403 | [email protected]
1. Introduction
Recruitment Robin Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in compliance with the Data Protection Act 2018 and the UK General Protection Regulation (UK GDPR).
This policy explains how we collect, use, and safeguard personal data relating to candidates, employers and other stakeholders.
2. Data controller
Recruitment Robin Ltd is the data controller responsible for the personal data collected through our recruitment services and website.
3. What data we collect
We may collect the following types of personal data:
Candidates: Name, contact details, CV, employment history, education, references, and any additional information provided during the application process.
Employers: Contact names, job role details, company information, and communication records related to recruitment needs.
Website Visitors: IP addresses, cookies, and browsing behaviour (see our [Cookie Policy] for further details).
4. How we use your data
We process personal data for the following purposes:
To match candidates with suitable employment opportunities.
To share candidate profiles with employers (with consent).
To fulfil contractual obligations and comply with legal requirements.
To improve and personalise our recruitment services.
We rely on the following lawful bases to process personal data:
Consent: When you provide explicit consent, for example, to receive marketing communications or to retain your profile for future opportunities.
Legitimate Interests: For assessing suitability, maintaining a candidate database, and providing our recruitment services.
Contractual Necessity: For fulfilling our obligations under recruitment agreements with candidates and employers.
We may share personal data with:
Potential employers, for the purposes of recruitment (with your prior consent).
Third-party service providers (e.g. IT support, background check providers) who operate under strict confidentiality agreements.
Legal or regulatory authorities when required by law.
Under the UK GDPR, you have the following rights:
Access: Request access to your personal data.
Rectification: Request corrections to inaccurate or incomplete data.
Erasure: Request deletion of your personal data (“right to be forgotten”).
Restriction: Request restriction of processing in certain circumstances.
Objection: Object to processing based on legitimate interests.
Data Portability: Request transfer of your data to another service provider.
To exercise any of these rights, please contact us on 01782 703403 or email [email protected].
Encryption of data
Access controls
Regular security audits and staff training
