Privacy Policy | Bridge Path Recruit

1. Introduction

Bridge Path Recruit ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our recruitment services, or otherwise interact with us. It also describes your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Bridge Path Recruit is the data controller for the personal data we process. If you have any questions about this policy, please contact us at info@bridgepathrecruit.co.uk.

2. What Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identity and Contact Data: Full name, email address, telephone number, postal address, and any other contact details you provide when submitting forms, applying for jobs, or making enquiries.
Professional and Employment Data: Your CV, cover letter, employment history, qualifications, skills, professional memberships, references, salary expectations, right-to-work documentation, and any other information you provide as part of a job application or candidate registration.
Technical Data: Your IP address, browser type, device information, operating system, and browsing behaviour on our website collected through cookies and similar technologies.
Communication Data: Records of correspondence when you contact us via email, telephone, or through our website contact forms.
Marketing and Communications Data: Your preferences for receiving marketing communications and newsletters.

3. How We Collect Your Data

We collect personal data through the following methods:

Directly from you: When you complete forms on our website, apply for a job vacancy, upload your CV, submit an employer enquiry, contact us, or subscribe to our newsletter.
Automated technologies: When you interact with our website, we may automatically collect technical data using cookies, server logs, and analytics tools.
Third parties: We may receive data from job boards, professional networking platforms, or referral partners where you have consented to your data being shared.

4. How We Use Your Data

We will only use your personal data where we have a lawful basis to do so. Under UK GDPR, the lawful bases we rely on include:

Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., subscribing to our newsletter, submitting a job application).
Legitimate Interests: Where processing is necessary for our legitimate business interests, such as matching candidates with job vacancies, responding to enquiries, improving our services, and ensuring the security of our website. We always ensure our legitimate interests do not override your rights and freedoms.
Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., right-to-work checks, HMRC requirements).

Specifically, we use your data to:

Process and consider your job applications and match you with suitable vacancies.
Communicate with you about job opportunities, interviews, and recruitment-related matters.
Respond to your enquiries and provide the services you have requested.
Maintain our internal records and databases of candidates and employers.
Send you marketing communications where you have consented or where we have a legitimate interest (you may opt out at any time).
Improve our website, services, and user experience through analytics.
Comply with legal and regulatory obligations including right-to-work verification.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties for marketing purposes. We may share your data with:

Prospective employers: When you apply for a job vacancy, we share your CV and relevant information with the employer for recruitment purposes. We will only share your data with an employer with your prior consent.
Service providers: Third-party companies that provide services on our behalf, including website hosting, email delivery, data analytics, and IT support. These providers are contractually bound to protect your data and may only use it as instructed by us.
Legal and regulatory authorities: Where we are required to do so by law, regulation, or legal process, or to protect our rights, property, or safety.

6. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law. Candidate data is typically retained for up to 24 months after your last interaction with us, after which it is securely deleted unless you request earlier deletion. Contact enquiry data is retained for 12 months. Newsletter subscriber data is retained until you unsubscribe.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, secure servers, and regular security reviews. However, no method of electronic storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

Right to be informed: You have the right to be informed about how we collect and use your personal data (which this policy provides).
Right of access: You may request a copy of the personal data we hold about you (a "subject access request").
Right to rectification: You may ask us to correct any inaccurate or incomplete personal data.
Right to erasure: You may ask us to delete your personal data in certain circumstances (the "right to be forgotten").
Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
Right to data portability: You may request a copy of your data in a structured, machine-readable format.
Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
Rights relating to automated decision-making: You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at info@bridgepathrecruit.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. International Data Transfers

Your personal data is processed and stored within the United Kingdom. We do not transfer your data outside the UK or the European Economic Area. If this changes in the future, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Cookies

Our website uses cookies and similar tracking technologies. Please see our Cookie Policy for detailed information about the cookies we use and how you can manage your preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us:

Email: info@bridgepathrecruit.co.uk
Phone: +44 (0)20 1234 5678
Post: Bridge Path Recruit, United Kingdom