1. Who we are
This website is operated by TalentStack Recruitment Limited ("TalentStack", "we", "us", "our"), a company registered in England & Wales. Our registered office is at Iveco House, Station Road, Watford, England, WD17 1ET. You can reach us at [email protected].
For the purposes of UK GDPR and the Data Protection Act 2018, TalentStack is the data controller of the personal data we collect through this website and through our recruitment activities.
2. The personal data we collect
We collect personal data in three main ways:
2.1 If you contact us through the website
- Name and email address
- Company name and the role you're hiring for (if you're a hiring contact)
- Current role, target role, location and LinkedIn URL (if you're a candidate)
- The contents of any message you send us
2.2 If you register interest as a candidate
Candidate registrations submitted via our partner platform (Loxo) are processed in Loxo's applicant tracking system. Data typically includes your CV, employment history, contact details, current and target compensation, and any notes from our conversations with you.
2.3 If you're sourced for a role
We may collect your professional information from publicly accessible sources such as LinkedIn, professional networks, referrals or our own talent network in order to contact you about a role we believe you'd be interested in.
3. How we use your data
We use personal data to:
- Respond to enquiries and provide our recruitment services
- Match candidates to suitable roles and represent them to clients
- Manage relationships with hiring clients and run searches on their behalf
- Provide market intelligence and benchmarks (always in aggregated, non-identifying form)
- Comply with legal, regulatory and tax obligations
4. Lawful bases
We rely on the following lawful bases under UK GDPR:
- Legitimate interests — for sourcing candidates, contacting professionals about relevant roles, providing services to our clients, and running our business. We've assessed that these activities are within reasonable expectations of the people involved and don't override their rights.
- Contract — where we've engaged with you as a candidate we're representing, or as a client whose search we're running.
- Consent — where you've actively opted in to something specific, e.g. joining our talent network. You can withdraw consent at any time by emailing us.
- Legal obligation — where we're required by law to retain or disclose data.
5. Who we share your data with
We share personal data only where necessary, and only with:
- Hiring clients — for shortlisted candidates, with the candidate's explicit sign-off before any details are shared.
- Service providers we rely on, including:
- Loxo — applicant tracking and CRM
- Hinterview — structured candidate video interviews
- Netlify — website hosting and contact form processing
- Sanity — content management for blog and case studies
- Google Workspace — email and document storage
- Professional advisers — such as accountants and lawyers, where required.
- Authorities — where we are legally required to disclose.
We do not sell personal data, and we do not share it with third parties for marketing purposes without your consent.
6. International transfers
We work with clients and candidates in the UK, Europe and the US. Where personal data is transferred outside the UK or EEA, we rely on UK GDPR-compliant safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses or adequacy decisions where applicable.
7. How long we keep your data
- Candidates in our network — typically up to 2 years from your last interaction with us, unless you ask us to delete it sooner or we have a legitimate reason to retain it for longer (e.g. an active engagement).
- Engaged clients — for the duration of our engagement plus 7 years to meet UK statutory record-keeping requirements.
- Website enquiries — up to 24 months unless they progress to a recruitment relationship.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to how we process your data
- Request your data in a portable format
- Withdraw any consent you've given
- Lodge a complaint with the Information Commissioner's Office (ico.org.uk)
To exercise any of these rights, email [email protected]. We'll respond within one month.
9. Cookies and tracking
This website uses only the cookies strictly necessary to deliver the site (e.g. for our content delivery network and form submission). We don't use third-party advertising or cross-site tracking cookies. If we add analytics or marketing cookies in future, we'll update this policy and ask for your consent first where required.
10. Security
We use appropriate technical and organisational measures to protect personal data, including HTTPS encryption, access controls on our systems, vendor due diligence, and a strict need-to-know basis for staff access. No system is 100% secure, but we take our obligations seriously.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted on the website.
12. Contact
Questions, complaints or requests about this policy? Email [email protected] or write to us at:
TalentStack Recruitment Limited
Iveco House, Station Road
Watford, England, WD17 1ET
United Kingdom