1. Introduction
BridgeLink Recruitment (‘we’, ‘us’, ‘our’) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website or engage our recruitment services.
We operate in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable data protection legislation. We are registered with the ICO (Information Commissioner’s Office) and we are the data controller for the personal information we process.
2. What Personal Data We Collect
2.1 Candidates
When you register with us or apply for roles through us, we may collect:
- Full name, contact details (email address, phone number, address).
- CV, employment history, qualifications, and references.
- Right-to-work documentation and identity verification documents.
- Skills, competencies, salary expectations, and career preferences.
- Information shared during interviews or assessments.
- Any sensitive information you voluntarily provide (e.g. disability adjustments needed).
2.2 Clients
When you engage our services as an employer, we may collect:
- Business name, address, and contact details.
- Names and contact information of hiring managers and key contacts.
- Details of vacancies, job requirements, and salary information.
- Billing and invoicing information.
2.3 Website Visitors
When you browse our website, we may automatically collect:
- IP address, browser type, and device information.
- Pages visited, time spent on the site, and referring URLs.
- Cookie and tracking data (see our Cookie section below).
3. How We Use Your Personal Data
3.1 For Candidates
We use your personal data to:
- Assess your suitability for current and future vacancies.
- Submit your profile to clients with your prior consent.
- Communicate with you about relevant opportunities.
- Carry out right-to-work and compliance checks where required.
- Maintain records of our recruitment activities.
3.2 For Clients
We use your data to:
- Manage your account and deliver our recruitment services.
- Invoice and process payments for services rendered.
- Communicate updates regarding candidate submissions and placements.
- Comply with our legal and regulatory obligations.
4. Lawful Basis for Processing
We rely on the following lawful bases for processing your personal data:
- Legitimate Interests: Processing candidate and client data in connection with our core recruitment activities.
- Contractual Necessity: Processing required to fulfil a service agreement with clients or candidates.
- Legal Obligation: Processing necessary to comply with employment law, tax obligations, or regulatory requirements.
- Consent: Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.
5. How We Share Your Data
We do not sell your personal data. We may share your information with:
- Prospective employers (clients) — only with your explicit consent as a candidate.
- Background check and vetting agencies — where required and with your knowledge.
- IT and software service providers who support our business operations.
- Regulatory bodies or law enforcement — where we are legally required to do so.
All third parties with whom we share data are required to handle it in accordance with UK GDPR and are bound by data processing agreements where applicable.
6. Data Retention
We retain personal data only for as long as necessary for the purpose it was collected:
- Candidate data: retained for up to 2 years from the date of last contact, after which it is securely deleted unless you consent to a longer retention period.
- Client data: retained for up to 6 years in line with UK accounting and contractual obligations.
- Website usage data: typically retained for up to 12 months.
You may request deletion of your data at any time, subject to any overriding legal obligations we have to retain it.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data (‘right to be forgotten’), subject to legal limitations.
- Right to Restrict Processing: Ask us to pause processing your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to our processing of your data based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, please contact us using the details provided in Section 11. We will respond to all requests within one calendar month.
8. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, accidental loss, disclosure, or destruction. These measures include secure storage systems, access controls, and staff training on data protection practices.
Whilst we take every precaution, no method of electronic transmission or storage is entirely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with our legal obligations.
9. International Data Transfers
BridgeLink Recruitment primarily operates within the United Kingdom. In the event that we transfer personal data to countries outside the UK, we will ensure that appropriate safeguards are in place, in accordance with UK GDPR requirements.
10. Cookies
Our website uses cookies to improve your browsing experience and analyse site usage. Cookies are small text files stored on your device. We use:
- Essential Cookies: Necessary for the website to function correctly.
- Analytical Cookies: Help us understand how visitors interact with our site (e.g. Google Analytics).
- Preference Cookies: Remember your settings and preferences.
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised effective date. We encourage you to review this policy periodically.
12. Contact & Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your data, please contact us:
BridgeLink Recruitment: Data Controller
Website: www.bridgelinkrecruitment.co.uk
Email: Hello@bridgelinkrecruitment.co.uk
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
ICO Website: www.ico.org.uk | Helpline: 0303 123 1113