Privacy Policy

We take privacy very seriously. We are committed to protecting the personal data of candidates, clients and users of our website. We collect only what we need, use it lawfully and keep it secure. We use appropriate technical and organisational measures, limit access to authorised people, and work with trusted providers who meet our standards.

Abingdon People is a recruitment agency based in the United Kingdom. We connect candidates with employers and provide related recruitment services. We follow UK GDPR and the Data Protection Act 2018.

Abingdon People is the data controller for the personal data described in this policy. Where we use trusted providers to process data for us, they act as our data processors.

What we collect

Candidates

Name and contact details including phone, email and address
CV and work history including education, skills and qualifications
Right to work evidence and results of verification checks
Interview notes, assessment feedback and references
Salary details, preferences, availability and job search status
Diversity information where provided with your consent

Clients and prospective clients

Name, role and business contact details
Organisation information and hiring needs
Records of communications and feedback on candidates

Suppliers and partners

Contact details and payment information
Contract and service information

Referees and emergency contacts

Name and contact details
Relationship to the candidate or staff member

Website users

Information sent through our forms
Technical data collected by cookies as described in our Cookie Notice

Where data comes from

You by email, phone, video call, in person and through website forms
Public and professional sources including LinkedIn and company websites
Job boards and application tools
Referees and previous employers where you have named them
Background and identity providers for right to work and compliance checks
Clients when they give feedback on an application or interview

How we use data and our legal bases

Recruitment services

To match candidates with roles and manage applications. Legal basis legitimate interests in delivering recruitment services
To share candidate details with clients for specific vacancies. We seek the candidate consent before sending details
To arrange interviews, collect feedback and manage offers. Legal basis legitimate interests and performance of a contract where relevant

Compliance and right to work

To verify identity and work entitlement including checks with Trust ID. Legal basis Legal obligation and legitimate interests. We will obtain consent where required by law

Communications and marketing

To send relevant roles, market updates and service information. Legal basis Legitimate interests for business-to-business contacts and consent where required. You can stop marketing at any time.

Business operations

To manage contracts, invoicing, payments, audits and legal claims. Legal basis Performance of a contract, legal obligation and legitimate interests

We only collect sensitive data such as health or diversity data when it is clearly needed, lawful and you choose to provide it. We use it with your explicit consent or as allowed by law. You can withdraw consent at any time.

Who we share data with

Clients who are considering a candidate for a role. We seek candidate consent before sending data
Trust ID for right to work verification
Technology and service providers including CRM, cloud storage, email, hosting, analytics and IT support
Professional advisers including legal and accounting
Public authorities where required by law
Referees and previous employers for reference checks where you have named them

International transfers

Some providers may store or access data outside the United Kingdom. Where this happens we use safeguards recognised by UK law such as UK approved standard contractual clauses or a valid adequacy decision.

Security

We use appropriate technical and organisational measures including access controls, encryption in transit where suitable, staff training, retention controls and incident response procedures.

How long we keep data

Placed candidates and client records. Six years from the end of the engagement
Registered active candidates with no placement. Up to three years from last meaningful contact
Unregistered candidates who sent a CV for a role. Up to one year
Financial records including invoices and payments. Six years
Website enquiry data. Up to one year unless a business relationship begins.

Meaningful contact includes emails, phone calls, interviews arranged, CV updates or clicks and responses to our communications. We will delete earlier where you ask, and we are not required to keep the data.

Your rights

You can contact us at any time to exercise your rights. These include the right of access, rectification, erasure, restriction, data portability, objection and the right to withdraw consent where consent is our legal basis.

Our website uses cookies and similar tools to improve your experience and to help us understand how the site is used. For details see our Cookie Notice including how to manage your preferences.

Complaints

You can contact us using the details below. You also have the right to complain to the Information Commissioner Office. Phone 0303 123 1113. Website ico.org.uk. Post Information Commissioner Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Changes to this policy

We may update this policy. The latest version will always be published on our website with the effective date shown at the top.

How to contact us

Email info@abingdonpeople.co.uk

Abingdon People Limited

Registered address: 71-75 Shelton Street Shelton Street, London, England, WC2H 9JQ