Privacy Policy

1. Information We Collect

From website visitors:

• Technical information (IP address, browser type, device type)
• Usage data (pages visited, time on site) via analytics tools (e.g., Google Analytics)
• Data for security and rate limiting (e.g., Cloudflare Turnstile)
• Cookies and similar technologies

From candidates:

• CVs and supporting documents
• Employment history
• Contact details (name, email, phone, address)
• Qualifications and education history
• Any information you choose to include in your CV or profile
• Potentially sensitive data where relevant to recruitment, such as:
  • Criminal record information
  • Diversity data (e.g., ethnicity, gender)
  • Health information for reasonable adjustments

From clients:

• Company details
• Job role specifications
• Contact details for relevant employees

2. How We Collect Your Data

We collect data via:

• Forms and file uploads on our website or app
• Telephone calls and email correspondence
• Cookies and analytics tracking
• Third-party integrations (e.g., Cloudflare, Google Analytics)

3. How We Use Your Data

We use your data to:

• Operate and maintain our website and app
• Provide recruitment and job-matching services
• Contact you about opportunities or applications
• Share candidate information with clients to facilitate recruitment
• Verify identity and prevent fraud or abuse
• Improve our services and user experience
• Comply with legal obligations

4. Legal Bases for Processing

We rely on a combination of:

• Consent (e.g., when you submit a CV)
• Contract necessity (e.g., processing data to fulfil a recruitment request)
• Legitimate interest (e.g., contacting potential candidates or clients, preventing fraud)

5. Sharing Your Data

We may share your data with:

• Clients, to facilitate recruitment processes
• Service providers such as:
  • Cloud storage providers
  • Email service providers
  • Analytics providers
  • CAPTCHA/anti-abuse tools

6. Data Retention

We keep personal data for as long as necessary to provide our services, or until you request deletion. Where no deletion request is made, we may retain data indefinitely, provided it remains relevant to our services and lawful to do so.

7. International Transfers

We do not transfer your personal data outside the UK/EU without your consent. Where we work with international clients, we ensure appropriate safeguards are in place.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccuracies in your data
• Request deletion of your data
• Object to processing based on legitimate interests
• Withdraw consent where applicable

We will respond to all requests in accordance with UK GDPR timelines. To exercise your rights, email [email protected].

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential site functionality
• Security and rate limiting (e.g., CAPTCHA)
• Analytics and performance monitoring

You can manage your cookie preferences via your browser settings or our cookie banner.

10. Children

Our services are intended for individuals aged 18 or over. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at rookmere.com/privacy.