4.7 Based on 180 Reviews

Trusted by 100+ Recruitment Agencies

+44 20 3289 1373

Privacy Policies

Home /
Privacy Policies

UK GDPR, Data Protection Act 2018

1. Collection of Personal Information

We may collect personal information when you:

  • Contact us, trial, or use our services.

  • Provide details such as name, email, phone, address, CVs, or business details.

  • When we lawfully source publicly available data (e.g., LinkedIn, job boards, professional websites, employer networks).


2. Purpose of Collecting Information

  • For recruitment outsourcing services (CV sourcing, candidate screening, RPO solutions).

  • To connect candidates with vacancies provided by our clients.

  • For business operations, service improvement, and marketing communications.

  • To comply with legal and regulatory obligations.


3. How We Keep Your Information Safe

  • Data is securely stored on encrypted servers in the UK/EU.

  • Access controls, firewalls, and regular security audits are in place.

  • Information is retained only as long as necessary for business purposes or legal compliance.


4. Sharing of Data

We do not sell or trade personal data. However, we may share data with:

  • Recruitment agencies, employers, and candidates (where appropriate).

  • Trusted third-party service providers (IT, cloud storage, legal/financial advisors).

  • Regulatory or legal authorities where required by law.

  • In some cases, data may be transferred outside the EEA with GDPR-compliant safeguards (e.g., Standard Contractual Clauses).


5. Your Rights (Under GDPR)

You have the right to:

  • Access the data we hold about you.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of your data where applicable.

  • Object to processing or withdraw consent.

  • Request data portability.

To exercise these rights, email us at: info@onewayrecruit.co.uk.


6. Data Breach Policy

In case of a data breach likely to affect your rights, we will notify the ICO (Information Commissioner’s Office) within 72 hours and inform affected individuals promptly.