Privacy Policy – Recruitment (GDPR Compliant)

Last updated: [28.10.2025]

Byron Hill Recruitment (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information during our recruitment activities, in accordance with the EU General Data Protection Regulation (GDPR) (EU) 2016/679.

⸻

1. Data Controller

The data controller responsible for your personal data is:

Byron Hill Recruitment
📍 Staines, TW18 4XH, United Kingdom
📧 info@byronhillrecruit.co.uk
🌐 www.byronhillrecruit.co.uk
📞 07872 049004

If we use third-party recruitment platforms or agencies, they may act as data processors on our behalf.

⸻

2. What Personal Data We Collect

We may collect and process the following types of personal data as part of our recruitment activities:
    •    Full name, address, email, and phone number
    •    CV, cover letter, and other job application details
    •    Employment history and qualifications
    •    Education, skills, and certifications
    •    References and referee contact details
    •    Work eligibility and right-to-work documentation
    •    Interview notes and assessment results
    •    Any additional information you voluntarily provide during the hiring process

We may also obtain information about you from:
    •    Recruitment agencies or job boards
    •    Professional networking sites (e.g., LinkedIn)
    •    Background check providers (with your consent)

⸻

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes, based on lawful grounds under the GDPR: 

 4. Data Retention

We will keep your data only for as long as necessary:
    •    Unsuccessful candidates: Data will be retained for up to 12 months after the recruitment process ends, unless you give consent for us to retain it longer for future opportunities.
    •    Successful candidates: Your personal data will be transferred to your employee file and managed according to our internal employee privacy policy.

⸻

5. Data Sharing and International Transfers

Your information may be shared with:
    •    Our HR team and hiring managers
    •    External recruitment platforms or background-screening providers
    •    Legal or regulatory bodies when required by law

We do not sell or rent personal data to third parties.

If personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent protection mechanisms are in place.

⸻

6. Data Security

Byron Hill Recruitment takes data protection seriously. We implement appropriate technical and organizational security measures, including:
    •    Secure servers and restricted system access
    •    Data encryption where applicable
    •    Regular data-security reviews

However, please note that no system or transmission over the internet is completely secure.

⸻

7. Your Rights Under GDPR

You have the following rights under the GDPR:
    •    Access – Request a copy of your personal data.
    •    Rectification – Request correction of inaccurate or incomplete information.
    •    Erasure (“right to be forgotten”) – Request deletion of your data in certain cases.
    •    Restriction of processing – Ask us to limit how we use your data.
    •    Data portability – Receive your data in a structured, commonly used format.
    •    Objection – Object to our processing based on legitimate interests.
    •    Withdraw consent – Withdraw consent at any time (where applicable).

To exercise these rights, please contact us at info@byronhillrecruit.co.uk.
We will respond within one month, as required under GDPR.

⸻

8. Cookies and Tracking

Our recruitment website may use cookies or analytics tools to:
    •    Improve website functionality and performance
    •    Understand visitor and applicant behaviour

You can manage or disable cookies through your browser settings at any time.

⸻

9. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal, technical, or operational changes.
The latest version will always be available on our website with the updated “Last updated” date.

⸻

10. Contact Us

If you have any questions or wish to exercise your privacy rights, please contact:

Byron Hill Recruitment
📍 Staines, TW18 4XH, United Kingdom
📧 info@byronhillrecruit.co.uk
🌐 www.byronhillrecruit.co.uk
📞 07872 049040

Excellent ✅ — here’s a GDPR-compliant Candidate Consent Statement you can include on your job application forms, CV upload pages, or email sign-ups for candidates who want to be considered for roles through Byron Hill Recruitment.

You can place it just above the “Submit” button with a required tick box.

Candidate Consent Statement (GDPR)

☐ I consent to Byron Hill Recruitment collecting, storing, and processing my personal data for recruitment purposes in accordance with the Privacy Policy.
I understand that my information may be retained for up to 12 months and that I can withdraw my consent or request deletion of my data at any time by contacting info@byronhillrecruit.co.uk.

✅ Optional variant for ongoing candidate pool (if you want to retain CVs for future roles):

☐ I consent to Byron Hill Recruitment retaining my personal data for up to 12 months after this application, so that I may be considered for future job opportunities.
I understand that I can withdraw my consent at any time by contacting info@byronhillrecruit.co.uk.