Privacy Policy

RSA Talent Ltd
Effective Date: 15/09/2025

1. Introduction

RSA Talent Ltd (“RSA Talent”, “we”, “our”, “us”) respects your privacy and is committed to protecting the personal data of all candidates, clients, suppliers, and website visitors.
This policy explains how we collect, use, and protect your information and your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following personal data:

Candidates

  • Name, address, email, phone number

  • CV/resumé, career history, qualifications, skills

  • References, right-to-work documentation

  • Interview notes and assessment results

Clients & Suppliers

  • Name, job title, business contact details

  • Information relating to recruitment requirements or services supplied

Website Visitors

  • IP address, browser type, pages visited (via cookies/analytics)

3. How We Collect Your Data

  • When you submit your CV or apply for a role

  • Through email, phone calls, meetings or our website forms

  • From publicly available sources such as LinkedIn or job boards (where permitted)

  • From referees you provide to us

4. Why We Use Your Data

We process personal data only where we have a lawful basis, including:

  • Contractual necessity – to match candidates with client vacancies and manage placements

  • Legitimate interests – to operate and grow our recruitment business

  • Legal obligations – to comply with employment and tax laws

  • Consent – where we rely on your explicit permission (e.g. for marketing emails)

5. How We Share Your Data

We may share your data with:

  • Clients who have roles that may be suitable for you

  • Referees or former employers (with your permission)

  • Our trusted service providers (e.g. cloud hosting, payroll companies)

  • Regulators or law enforcement when required by law

We do not sell your personal data.

6. International Transfers

If we transfer personal data outside the UK, we will ensure appropriate safeguards (such as UK-approved Standard Contractual Clauses) are in place.

7. Data Retention

  • Candidate data: normally retained for 6 years after our last contact unless you ask us to delete it sooner.

  • Client and supplier data: retained for as long as necessary to maintain our business relationship or comply with legal obligations.

8. Your Rights

You have rights under data protection law to:

  • Access a copy of your data

  • Correct inaccuracies

  • Request deletion or restriction of processing

  • Object to processing based on legitimate interests

  • Withdraw consent (where applicable)

  • Data portability

To exercise these rights, contact us using the details below.

9. Cookies

Our website uses cookies to enhance your experience and to analyse traffic.
You can manage cookie preferences in your browser settings.
For details, see our Cookie Policy.

10. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.

11. Contact Us

If you have questions or wish to exercise your rights, please contact:

Data Protection Officer
RSA Talent Ltd
Email: info@rsatalent.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

12. Updates

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date shown at the top.