GDPR Candidate Agreement

GDPR Candidate Agreement

HydeTech Recruitment Ltd
Effective Date: August 2025

1. Introduction

At HydeTech Recruitment Ltd, we take your privacy seriously. This agreement outlines how we collect, store, use, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

By signing this agreement, you give us consent to process your personal data for recruitment purposes.

2. What Data We Collect

We may collect and process the following types of personal data:

• Full name and contact details (email, phone number, address)

• CV and employment history

• Education and qualifications

• Right to work documentation (e.g. passport, visa)

• References

• National Insurance number

• Bank details (for temporary placements)

• Any additional information provided voluntarily

3. How We Use Your Data

We process your data to:

• Match you with suitable job opportunities

• Submit your CV and details to potential employers

• Contact you regarding vacancies, interviews, and updates

• Fulfil legal and contractual obligations (e.g. right to work checks)

• Conduct compliance and safeguarding procedures

• Pay you (if engaged on a temporary or contract assignment)

We will only share your information with employers we are working with for legitimate recruitment purposes.

4. Who We Share Your Data With

We may share your personal data with:

• Potential employers and clients

• Payroll providers (for temporary roles)

• Background check or reference providers

• IT and CRM system providers

• Government or regulatory bodies (where legally required)

We do not sell your data to third parties.

5. How Long We Keep Your Data

We will retain your personal data:

• For up to 2 years after our last contact with you, unless you request otherwise

• For longer if you are placed in a role and legal/financial compliance requires it

You can request deletion of your data at any time (see Section 7).

6. Legal Basis for Processing

Under the UK GDPR, our legal bases for processing your data include:

• Consent – You have given clear permission for us to process your data

• Contractual necessity – Processing is required for a job offer or placement

• Legal obligation – We are legally required to retain certain information

• Legitimate interest – We have a legitimate business interest to recruit and place candidates

7. Your Rights

You have the following rights under data protection law:

• Access – Request a copy of the personal data we hold

• Rectification – Ask us to correct incorrect or outdated data

• Erasure – Request your data to be deleted ("right to be forgotten")

• Restriction – Ask us to restrict processing of your data

• Objection – Object to your data being used for certain purposes

• Data Portability – Request your data be transferred to another service

To exercise these rights, contact us at:
📧 tommy@hydetech.co.uk
📞 07854 901616

Any changes we make to our privacy notice in future will be posted on this page and, where appropriate, you will be notified by e-mail. Please check back frequently to view any updates or changes to our privacy notice or for any further information please email tommy@hydetech.co.uk