This Recruitment Privacy Policy explains how we collect, use, store, and protect personal data during our hiring and recruitment processes. We are committed to handling your information responsibly, transparently, and in accordance with applicable data protection laws, including the UK GDPR and Data Protection Act 2018.

1. What personal data we collect

During the recruitment process, we may collect and process the following types of information:

• Contact details (name, email address, phone number, address)
• CV/resume, cover letter, portfolio, and application forms
• Employment history, education, skills, and qualifications
• Interview notes and assessment results
• References and background check information (where applicable and lawful)
• Right-to-work documentation
• Any other information you voluntarily provide as part of your application

2. How we collect your data

We may collect personal data from:

• Direct applications submitted through our website, email, or job platforms
• Third-party recruitment agencies
• Professional networking sites (e.g., LinkedIn), if relevant to your application
• Referees you provide
• Publicly available professional information

3. How we use your data

Your personal data is used solely for recruitment and hiring purposes, including:

• Assessing your skills, experience, and suitability for a role
• Managing the recruitment and interview process
• Communicating with you about your application
• Conducting right-to-work, reference, and background checks where necessary
• Keeping records required for compliance
• Considering you for future roles (only with your consent)

We do not use your personal data for automated decision-making without human involvement.

4. Legal basis for processing

We process your personal data under one or more of the following lawful bases:

• Legitimate interests – to manage our recruitment process effectively
• Contractual necessity – to take steps prior to entering an employment contract
• Legal obligations – such as verifying right-to-work status
• Consent – only where explicitly requested (e.g., keeping your CV on file for future opportunities)

5. How long we keep your data

• If your application is unsuccessful, we typically retain your data for up to 12 months, unless you request deletion sooner or consent to a longer period.
• If you become an employee, your data becomes part of your employment record and will be retained under our Employee Privacy Policy.

6. Who we share your data with

We may share your data with:

• Internal hiring managers and interviewers
• Third-party tools or platforms we use for recruitment management
• Background check or right-to-work verification providers (where required)

We do not sell your personal data.
When data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place.

7. How we protect your data

We use technical and organisational measures to keep your personal information secure, including:

• Restricted access controls
• Encrypted storage where applicable
• Secure transfer protocols
• Regular data protection reviews

8. Your rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent at any time
• Object to or restrict processing
• Request data portability

To exercise these rights, please contact: info@northell.com

9. Contact us

If you have any questions about this Recruitment Privacy Policy or how your data is handled, please contact:

Northell Partners Ltd
Email: info@northell.com
Address: 12th Floor Heron Tower, 110 Bishopsgate, London, EC2N 4AY