Last updated: January 2026
RECwork Community Ltd (“RECwork”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website, engage with our recruitment services, or interact with us in any other way.
This policy applies to candidates, clients, contractors, website visitors, and other individuals whose personal data we process.
1. Who We Are
Data Controller:
RECwork Community Ltd
Website:https://www.recwork.co.uk
Email: hello@recwork.co.uk
We are a UK-based recruitment and consultancy business that operates as a platform for specialist recruitment brands and services across multiple sectors.
Where services are delivered through separate group companies or trading brands, personal data is processed in accordance with the relevant entity’s privacy policy and lawful basis.
RECwork Community Ltd is registered with the UK Information Commissioner’s Office (ICO) as a data controller.
2. What Personal Data We Collect
Depending on how you interact with us, we may collect and process the following information:
Candidates & Contractors
Name, address, email address, phone number
CVs, work history, qualifications, certifications
Right-to-work documentation
Salary / rate expectations
Availability and role preferences
References and interview feedback
Compliance documentation (where required)
Clients & Business Contacts
Name, job title, company details
Contact information
Contractual and billing information
Website Visitors
IP address
Browser type and operating system
Pages visited and usage data
Cookies and similar tracking technologies
3. How We Collect Your Data
We collect personal data when you:
Apply for a role
Upload a CV
Register on our website
Contact us by email, phone, or form
Are referred to us
Use our website
We may also receive information from third parties such as clients, referees, or publicly available professional sources (e.g. LinkedIn).
4. Lawful Basis for Processing
Under UK GDPR, we process your personal data on the following lawful bases:
Legitimate Interests – to operate as a recruitment business, match candidates to roles, communicate with clients and candidates, and manage our services.
Contract – where processing is necessary to perform or enter into a contract (e.g. placement, consultancy services).
Legal Obligation – to comply with employment, tax, right-to-work, or regulatory requirements.
Consent – for marketing communications where required. You can withdraw consent at any time.
5. How We Use Your Personal Data
We use personal data to:
Assess suitability for roles
Introduce candidates to potential employers
Communicate about opportunities and services
Manage compliance and onboarding
Improve our website and services
Meet legal and regulatory obligations
We do not sell personal data.
6. CVs and Recruitment Data
If you provide us with your CV:
It will be reviewed by RECwork consultants and authorised staff
It may be shared with prospective employers or clients where there is a legitimate interest and the role is relevant to your profile.
We will not submit your CV to a client without a lawful basis to do so
Some roles may link to external employer application systems. When you leave our website, the receiving organisation’s privacy policy will apply.
7. Data Sharing & Third Parties
We may share personal data with:
Clients and hiring organisations
Technology providers (including our ATS)
Payroll, compliance, and legal advisers
Regulators or authorities where legally required
All third parties are required to handle your data securely and lawfully.
8. Bullhorn ATS
Your data is stored and processed using Bullhorn, our recruitment CRM/ATS provider. Bullhorn acts as a data processor and processes data on our instructions under a data processing agreement.
9. International Data Transfers
Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:
UK adequacy regulations
Standard Contractual Clauses (SCCs) or UK IDTA
10. Data Retention
We retain personal data only for as long as necessary:
Candidate data: typically up to 24 months from last meaningful contact
Client data: for the duration of the relationship and as required for legal or contractual purposes
You may request deletion at any time, subject to legal obligations.
11. Your Rights
Under UK GDPR, you have the right to:
Access your data
Correct inaccurate data
Request deletion
Restrict or object to processing
Data portability (where applicable)
Withdraw consent at any time
To exercise your rights, email: hello@recwork.co.uk
Where we process your data based on legitimate interests, you have the right to object to that processing.
12. Automated decision-making
We do not make automated decisions about candidates without human involvement. Any screening or matching is reviewed by a consultant.
13. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk
14. Security
We use appropriate technical and organisational measures to protect personal data. Access is restricted to authorised personnel only.
Please note that email communication is not always secure. Avoid sending sensitive information by email where possible.
15. Cookies
Our website uses cookies to improve functionality and analyse usage. You can manage cookie preferences via your browser or our cookie settings.
16. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.