Home • GDPR/Data Protection Policy
GDPR/Data Protection Policy
Last updated: [DATE]
Ignite Talent Group (“we”, “our”, “us”) is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Purpose
This policy explains how we collect, process, store, and protect personal data in the course of providing recruitment services. It applies to clients, candidates, suppliers, and visitors to our website.
2. Data we collect
We may process the following categories of data:
- Identity details (name, date of birth, contact information)
- Employment information (CV, qualifications, career history)
- Compliance data (right-to-work, DBS checks, ID verification)
- Business details (where applicable)
- Technical data (IP address, cookies, browsing information)
3. Legal bases
We process data lawfully under the UK GDPR on the following grounds:
- Contract – to provide recruitment services.
- Legal obligation – to comply with employment and immigration law.
- Legitimate interests – to operate and improve our services.
- Consent – where required, for example in direct marketing.
4. How we use data
Personal data is used to match candidates with roles, carry out compliance checks, manage relationships with clients and suppliers, and meet our legal and regulatory obligations.
5. Sharing data
We may share data with employers, clients, third-party service providers, and regulatory authorities where necessary. We will never sell personal data to third parties.
6. International transfers
If data is transferred outside the UK/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses.
7. Data retention
We retain data only as long as necessary: candidate records [X YEARS], client records [X YEARS], compliance documentation [X YEARS]. Once expired, data will be securely deleted or anonymised.
8. Data security
We take appropriate technical and organisational measures to safeguard personal data from loss, misuse, or unauthorised access.
9. Rights of individuals
Under UK GDPR, individuals have rights to access, rectify, erase, restrict, or object to processing of their personal data. They can also request portability and withdraw consent for marketing at any time.
10. Contact
For any questions about this policy or to exercise your rights, please contact:
Data Protection Contact: [NAME / ROLE]
Email: [CONTACT EMAIL]
Address: [COMPANY ADDRESS]
Telephone: [PHONE NUMBER]