Privacy Policy

Goldbridge Group Limited – Privacy Notice

Last updated:  November 2025

1. Introduction

Welcome to Goldbridge Group Limited’s Privacy Notice.

Goldbridge Group Limited (“Goldbridge Group”, “we”, “us”, “our”) is a recruitment business. In the course of our activities we collect, use and are responsible for certain personal data about candidates, clients, suppliers and visitors to our website.

We take your privacy seriously. This Privacy Notice explains:

• what personal data we collect
• how and why we use it
• who we share it with
• how long we keep it for
• your rights in relation to your personal data

Please read this notice carefully. If you have any questions, our contact details are in Section 13.

2. Who we are

Goldbridge Group Limited is incorporated and registered in England and Wales (company number 379664239).

Registered office:
Goldbridge Group Limited
Victory House
Chobham Street
Luton
LU1 3BS

For the purposes of UK data protection laws (including the UK GDPR), we are a data controller. This means we decide how and why your personal data is used when you interact with us.

3. What personal data we collect

The personal data we collect will depend on your relationship with us (for example, candidate, client, supplier, or website visitor). We may collect and process the following:

3.1 Candidates

When you register with us, apply for a role, or are put forward for a vacancy, we may collect:

• Contact details – name, address, email, telephone number
• CV and work history – employment history, skills, qualifications, training
• Education details – schools, colleges, universities, courses and results
• Right to work information – passport, visa, national insurance number, and other identity documents as required by law
• References – from previous employers or other referees
• Role preferences – desired roles, locations, salary, notice period
• Interview notes – notes taken during interviews or calls with you
• Compliance information – results of background or other checks where required by clients or by law (for example, DBS checks, where applicable)

3.2 Clients and prospective clients

For contacts at client organisations (such as hiring managers), we may collect:

• Name, job title and role
• Business contact details (email, telephone number, business address)
• Information regarding your organisation, vacancies and recruitment needs
• Communications with you (emails, meeting notes, call notes)

3.3 Suppliers and business partners

For suppliers and other business partners, we may collect:

• Name and role
• Contact details
• Bank/payment information
• Contract and communication history

3.4 Website visitors and online interactions

When you visit our website or interact with us online, we may collect:

• Technical data (IP address, browser type, operating system)
• Information about how you use our website (pages visited, links clicked)
• Information submitted through online forms (e.g. CV uploads, contact forms)

3.5 Special category data

In some cases, we may process more sensitive information (“special category data”), such as:

• Health information (for example, information provided for workplace adjustments, fitness to work or health questionnaires where required)
• Diversity monitoring data (for example, ethnicity, disability) – this is usually collected only on a voluntary basis and anonymised where possible

We will only collect and process special category data where necessary, and where we have a lawful basis to do so (for example, your explicit consent or to meet legal/employment law obligations).

3.6 Children

Our services are aimed at adults. We do not knowingly collect personal data relating to children in the context of our recruitment services.

4. How we use your personal data

We use your personal data only when we have a lawful reason to do so. Typical purposes include:

4.1 For candidates

• To register you as a candidate
• To assess your skills, experience and suitability for roles
• To match you with vacancies and introduce you to clients
• To send your CV and other relevant information to clients (with your knowledge/consent)
• To arrange interviews and manage the recruitment process
• To administer temporary, contract or permanent placements
• To carry out right-to-work, identity and other legal checks
• To communicate with you about current or future opportunities
• To keep our records up to date

4.2 For clients

• To provide recruitment and staffing services
• To understand your hiring requirements and business needs
• To manage our relationship with you
• To send information about candidates who may be suitable for your vacancies
• To administer contracts, billing and payments

4.3 For suppliers and other business contacts

• To manage our business relationship with you
• To place and pay for services
• To keep accurate financial and contractual records

4.4 General business purposes

• To respond to enquiries and communications
• To manage and improve our website, systems and processes
• For internal administration, reporting and record-keeping
• For training and quality purposes
• To comply with legal and regulatory obligations

4.5 Marketing

We may use your contact details to send you information about:

• Our services
• Relevant roles (for candidates)
• Recruitment market updates (for clients and candidates)

You can opt out of marketing communications at any time (see Section 11).

5. Our lawful bases for processing

We only process your personal data where at least one of the following legal bases applies:

• Contract – where processing is necessary to enter into or perform a contract with you (for example, placing you in a role, or providing recruitment services to a client).
• Legal obligation – where we must process your data to comply with the law (for example, right-to-work checks, tax and accounting obligations).
• Legitimate interests – where processing is necessary for our legitimate business interests or those of a third party, and your rights do not override those interests. Our legitimate interests include:
  • Running and developing our recruitment business
  • Matching candidates with suitable roles
  • Providing services to clients
  • Keeping our records up to date
  • Managing relationships with candidates, clients, suppliers and partners
• Consent – in limited circumstances, we may rely on your consent (for example, for certain types of marketing or, where necessary, for processing special category data). Where we rely on consent, you may withdraw it at any time.

If we process special category data, we will rely on an additional lawful basis (such as your explicit consent or obligations in employment and social security law).

6. Cookies and website data

Our website uses cookies and similar technologies to:

• Make the site work properly
• Remember your preferences
• Analyse how the website is used so we can improve it

For more information on the cookies we use and how to manage them, please see our Cookies Policy (available on our website).

7. Who we share your personal data with

We may share your personal data with:

• Clients / hiring organisations – so they can consider you for vacancies and manage the recruitment process
• Third-party service providers – such as:
  • IT, hosting and system providers
  • Payroll and umbrella companies (for temporary or contract roles)
  • Background check or screening providers (where required)
  • Professional advisers (e.g. accountants)
• Regulatory and public authorities – where we are required to do so by law

Where we use third-party service providers, we only allow them to process your personal data for specified purposes and in accordance with our instructions, and we require them to keep your data secure.

We do not sell your personal data to third parties.

8. International transfers

We generally store and process your personal data within the UK and the European Economic Area (EEA).

If we need to transfer your personal data outside the UK/EEA (for example, where a client or service provider is based outside these areas), we will ensure that appropriate safeguards are in place, such as:

• An adequacy decision by the UK government or European Commission; or
• Standard contractual clauses or equivalent approved mechanisms.

You can contact us for more information about transfers and the safeguards we use (see Section 13).

9. How long we keep your personal data

We will keep your personal data only for as long as necessary for the purposes for which it was collected, including any legal or reporting requirements.

Typical retention periods (which you can adjust to your practice):

• Candidates:
  • Core record and CV – up to 3 years from the last meaningful contact (e.g. applying for a role, updating your details, communication with us)
  • Right-to-work and compliance documents – up to 2 years after the end of a placement, where applicable
• Clients and suppliers:
  • Contact and contractual information – up to 6 years after the end of the business relationship (to meet tax, accounting and contractual obligations)

We may retain certain information for longer where required by law or to establish, exercise or defend legal claims.

When personal data is no longer needed, we will delete it or anonymise it so that it can no longer identify you.

10. Keeping your data secure

We take appropriate technical and organisational measures to protect your personal data, including:

• Limiting access to personal data to authorised staff and service providers
• Using secure systems and passwords
• Regularly reviewing our security measures and procedures

While we do our best to protect your personal data, please be aware that transmission of information over the internet can never be completely secure. Any transmission is at your own risk.

11. Your rights

Under data protection laws, you have a number of rights in relation to your personal data. These include:

• Right of access – to request a copy of the personal data we hold about you and information about how we process it.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure – to request deletion of your personal data in certain circumstances (for example, where it is no longer needed for the purpose we collected it for, or where you withdraw consent and there is no other lawful basis to continue processing).
• Right to restrict processing – to ask us to suspend certain processing, for example if you want us to check its accuracy or the reason for processing.
• Right to data portability – to request that we provide certain personal data to you or to a third party in a structured, commonly used and machine-readable format.
• Right to object – to object to processing based on our legitimate interests, and to object at any time to processing for direct marketing purposes.
• Right to withdraw consent – where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you wish to exercise any of these rights, please contact us using the details in Section 13.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is to keep your data safe and ensure that it is not disclosed to anyone who has no right to receive it.

You will not normally have to pay a fee to exercise your rights, but we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive or excessive.

12. Complaints

We hope that we can resolve any questions or concerns you may have about how we use your personal data.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. When we do, we will update the “Last updated” date at the top of this page. The current version will always be available on our website.

We encourage you to review this Privacy Notice periodically so that you remain informed about how we use your personal data.

14. How to contact us

If you have any questions about this Privacy Notice or about how we handle your personal data, please contact us:

Post:
Goldbridge Group Limited
Victory House Chobham Street Luton LU1 3BS

Email: [email protected]