Data We Collect
We collect and process different types of personal data depending on whether you are a candidate, a client, a supplier, or a website visitor.
1. Candidate Data
If you apply for a role, register with us, or contact us about opportunities, we may collect:
- Identity details – name, title, date of birth, gender (if provided).
- Contact details – address, email, phone number, social media or professional profile links.
- Career and education information – CV, cover letters, employment history, qualifications, skills, references, salary details, notice period, right‑to‑work status.
- Recruitment process data – interview notes, assessment results, communications with you, suitability feedback from clients.
- Compliance information – copies of ID, proof of address, right‑to‑work documents, criminal record information where relevant and lawful.
- Preferences – job interests, preferred locations, working patterns, sectors, and seniority levels.
We usually collect this data directly from you, but we may also receive information from:
- Public job boards or CV databases
- Professional networking sites (e.g. LinkedIn)
- Referees you provide to us
- Our clients during the recruitment process
2. Client and Prospect Data
If you are a client or potential client, we may collect:
- Business contact details – name, job title, company name, business email, business phone number.
- Organisation information – company address, sector, team structure, hiring needs, role descriptions.
- Interaction data – records of meetings, calls, emails, proposals, and feedback on candidates.
We use this information to manage relationships, discuss and deliver recruitment services, and keep appropriate records of our work with you.
3. Supplier and Partner Data
For suppliers and partners (such as service providers or consultants) we may collect:
- Contact details – name, role, business email, phone number.
- Business and financial information – company details, payment information, agreements, and records of services provided.
This allows us to manage our contracts, payments, and ongoing relationships.
4. Website & Communication Data
When you visit our website or interact with our online services, we may collect:
- Technical data – IP address, browser type and version, device information, time zone setting, and how you navigate and use our site.
- Usage data – pages visited, links clicked, forms completed, and other actions on our website.
- Communication data – information you provide in contact forms, email enquiries, or messages sent via the website or social channels.
We may use cookies and similar technologies to help our site function properly and understand how visitors use our services. Basic analytics may be used for this purpose.
5. Special Category Data
In limited circumstances, and only where relevant and lawful, we may process more sensitive information, such as:
- Data relating to health (for example, reasonable adjustments for interviews or work)
- Information about criminal convictions or offences (e.g. where a specific role requires background checks)
Where we process this type of data, we do so under an appropriate legal basis and apply additional safeguards.
6. Data You Provide About Others
If you provide details of referees or emergency contacts, you confirm that you have informed them that you are sharing their information with us and, where appropriate, have obtained their consent.
Data Retention
At All Solutions Recruitment, our commitment to your privacy extends to the transparent management of how long we retain your personal data. We only keep your information for as long as is strictly necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, tax, accounting, or reporting requirements. This ensures your information is never kept longer than needed for your career support or our business operations.
Candidate Records
Candidate profiles and CVs are typically retained for a period of 2 years from our last point of meaningful contact. This allows us to offer proactive career guidance and keep you updated on suitable industry vacancies while maintaining record accuracy.
Business & Client Data
Information regarding our business partnerships and financial transactions is retained for the duration of our contractual relationship and for 7 years thereafter, ensuring compliance with UK financial legislation and statutory obligations.
We determine these detention periods by assessing the sensitivity of the data, potential risks of unauthorised disclosure, and the specific purposes for processing. Once the retention period has concluded, your personal information is securely deleted or fully anonymised.
We also use basic cookies and analytics tools to understand how visitors use our website and to help us improve it. You can adjust your browser settings if you do not want cookies to be stored on your device.
User Rights
Under UK data protection laws, you have a number of rights regarding your personal data, including:
Right to be informed
To be given clear information about how we use your data, which this Privacy Policy aims to provide.
Right of access
To request a copy of the personal data we hold about you.
Right to rectification
To ask us to correct or complete your personal data if it is inaccurate or incomplete.
Right to erasure (“right to be forgotten”)
To ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purpose we collected it or you withdraw consent (where consent is the basis of processing).
Right to restrict processing
To ask us to restrict how we use your data in certain situations (for example while an accuracy or legal challenge is being reviewed).
Right to data portability
To request that we provide certain information to you or another organisation in a structured, commonly used and machine‑readable format, where technically feasible.
Right to object
To object to our processing of your personal data where we rely on legitimate interests. You can also object to receiving direct marketing from us at any time.
Rights in relation to automated decision‑making and profiling
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Third Parties and Data Sharing
We only share personal data with third parties where it is necessary for our recruitment services, where required by law, or where we have another lawful basis to do so.
Employers and Hiring Organisations
For candidates, we may share your CV and relevant information with our clients to:
- Introduce you for specific roles
- Arrange interviews and assessments
- Progress applications, offers and assignments
We do this with your knowledge or consent and only share information that is relevant to the role.
Job Boards and Sourcing Platforms
We may use third-party job boards and professional networking platforms to advertise vacancies, receive applications, and search for suitable candidates. If you apply via a third-party platform, that provider will also process your data in line with its own privacy policy.
Service Providers
We share limited personal data with trusted service providers who help us run our business, including:
- Our recruitment CRM provider (JobAdder)
- Cloud storage providers (Dropbox)
- Our payroll and payment providers
- Our email and communication tools
These providers act on our instructions and must keep your data secure and confidential.
Professional and Legal Third Parties
Where necessary we may also share data with professional advisers (legal, financial or compliance) and regulatory, governmental or law-enforcement bodies, where required or permitted by law.
We do not sell your personal data to any third party.
Contact & Complaints
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise any of your data protection rights, please contact us using the details on our Contact Us page.
When you contact us, please:
- Tell us your name and how we can reach you
- Explain clearly what your question or concern is
- Let us know if you are a candidate, client or other contact
We will aim to respond to your request or complaint as soon as reasonably possible and within the timescales required by data protection law.
If you are not satisfied with our response, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Further information is available on the ICO website.