GDPR/Data Protection Policy

Last updated: [DATE]

Ignite Talent Group (“we”, “our”, “us”) is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Purpose

This policy explains how we collect, process, store, and protect personal data in the course of providing recruitment services. It applies to clients, candidates, suppliers, and visitors to our website.

2. Data we collect

We may process the following categories of data:

  • Identity details (name, date of birth, contact information)
  • Employment information (CV, qualifications, career history)
  • Compliance data (right-to-work, DBS checks, ID verification)
  • Business details (where applicable)
  • Technical data (IP address, cookies, browsing information)

3. Legal bases

We process data lawfully under the UK GDPR on the following grounds:

  • Contract – to provide recruitment services.
  • Legal obligation – to comply with employment and immigration law.
  • Legitimate interests – to operate and improve our services.
  • Consent – where required, for example in direct marketing.

4. How we use data

Personal data is used to match candidates with roles, carry out compliance checks, manage relationships with clients and suppliers, and meet our legal and regulatory obligations.

5. Sharing data

We may share data with employers, clients, third-party service providers, and regulatory authorities where necessary. We will never sell personal data to third parties.

6. International transfers

If data is transferred outside the UK/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses.

7. Data retention

We retain data only as long as necessary: candidate records [X YEARS], client records [X YEARS], compliance documentation [X YEARS]. Once expired, data will be securely deleted or anonymised.

8. Data security

We take appropriate technical and organisational measures to safeguard personal data from loss, misuse, or unauthorised access.

9. Rights of individuals

Under UK GDPR, individuals have rights to access, rectify, erase, restrict, or object to processing of their personal data. They can also request portability and withdraw consent for marketing at any time.

10. Contact

For any questions about this policy or to exercise your rights, please contact:

Data Protection Contact: [NAME / ROLE]
Email: [CONTACT EMAIL]
Address: [COMPANY ADDRESS]
Telephone: [PHONE NUMBER]