1. Introduction

This Privacy Policy explains how GDSM Recruitment (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website or engage with our recruitment services, in compliance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which may include:

• Identity Data: Name, title, marital status, gender.
• Contact Data: Billing address, email address, and telephone numbers.
• Employment Data: CV/Resume, work history, qualifications, pay/salary expectations, and right-to-work documents.
• Technical Data: Internet protocol (IP) address, browser type and version, and operating system.

We may also collect and process Special Category Data (e.g., health information) only where strictly necessary for specific roles or legal compliance, and only with your explicit consent.

3. How We Use Your Data (Legal Basis)

We will only use your personal data when the law allows us to, most commonly:

• To provide recruitment services: Processing your application, matching you with job vacancies, and submitting your details to clients (Legitimate Interests and/or Contractual Necessity).
• To communicate with you: Sending you job alerts, news, and updates (Consent or Legitimate Interests).
• Legal Compliance: Confirming your right to work or fulfilling tax obligations (Legal Obligation).

4. Sharing Your Personal Data

We may share your personal data with the following parties:

• Clients/Employers: To propose you for specific roles, with your prior permission.
• Third-Party Processors: Service providers who perform functions on our behalf (e.g., IT and system administration services).
• Regulatory Bodies: Where we are legally obliged to disclose your information.

5. Data Security and Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6. Your Legal Rights

Under UK GDPR, you have the right to:

• Request access to your personal data (commonly known as a “data subject access request”).
• Request correction of the data we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request the transfer of your personal data to another party.

If you wish to exercise any of these rights, please contact us using the details below.

7. Contact Details

If you have any questions about this Privacy Policy or our data handling practices, please contact us at:

• Email: hello@gdsmrecruitment.com

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.