Privacy Policy

1.  Introduction

​

At Chalk Hill Group Limited, we are committed to protecting the privacy and personal data of our candidates, clients, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

 

2.  Information We Collect

​

We may collect and process the following types of personal data:

 

From Candidates:

• Full name (including title)

• Contact details (phone number, email address, address)

• Date of birth

• Employment history

• Education and qualifications

• Skills and certifications

• References and referees

• Right to work documentation (passport, visa, etc.)

• Criminal record (where legally required)

• Salary expectations

• Interview notes

• Other information included in your CV or shared during interviews

 

From Clients:

• Company name and address

• Contact person details (name, email, phone number)

• Job role specifications and descriptions

• Hiring preferences and feedback

 

Automatically via Website:

• IP address and location

• Browser and device information

• Cookies and usage data (see section 7)

• Pages visited and interaction on the website

• Subscription preferences for newsletters or job alerts

​

3.  How We Use Your Information

​

We use personal data for the following purposes:

• Matching candidates to job opportunities

• Communicating with you about job vacancies and applications

• Managing client relationships and service delivery

• Conducting background and reference checks (where required)

• Complying with legal and regulatory obligations

• Improving our services, website, and user experience

• Sending marketing communications (with your consent)

• Maintaining business records and for internal administration

​

4.  Sharing & Processing Your Information

 

We may share your data with:

• Prospective employers or clients (with your consent)

• Third-party service providers (e.g., payroll, IT support)

• Legal or regulatory authorities when required

• Background check or reference agencies

 

We ensure all third parties comply with data protection laws and use your data only for specified purposes.

 

We process your data under the following legal grounds, where applicable:

• Consent: You have given clear consent for us to process your personal data.

• Contractual necessity: Processing is necessary for a contract with you or to take steps before entering into a contract.

• Legal obligation: Processing is necessary for compliance with a legal obligation.

• Legitimate interests: Processing is necessary for our legitimate business interests, unless your rights override those interests.

 

5.  International Data Transfers

​

If we transfer your data outside the UK or EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

 

6.  Data Retention

​

We retain personal data only as long as necessary:

• Candidates: up to 6 years after last contact (unless consent is renewed)

• Clients: for the duration of the business relationship and up to 6 years thereafter for legal compliance

 

You may request deletion of your data at any time (see Section 8).

​

7.  Cookies and Website Tracking

​

We use appropriate technical and organisational measures to protect your personal data, including:

• Encrypted storage and secure servers

• Firewalls and antivirus protection

• Access controls and staff training

• Regular audits and data security reviews

 

8.  Your Rights

​

You have the right to:

• Access your personal data

• Correct inaccuracies

• Request deletion

• Object to processing

• Withdraw consent

• Lodge a complaint with the ICO (Information Commissioner’s Office)

 

To exercise your rights, contact us at [Insert Contact Email].

 

9.  Data Security

​

We use appropriate technical and organizational measures to protect your personal data, including:

• Encrypted storage and secure servers

• Firewalls and antivirus protection

• Access controls and staff training

• Regular audits and data security reviews

 

10.  Changes to This Policy

​

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and significant changes will be communicated directly.