2020 Recruitment

Privacy Notice

1. About Us

2020 Recruitment Limited
Company Number: SC848620
Registered Address: The Tax Office, Pentland Park, Glenrothes, KY6 2AL
Trading Address: The Tax Office, Pentland Park, Glenrothes, KY6 2AL
VAT Number: 492711773
Representative: Robert Gilchrist
Email: [email protected]
Telephone: 01592 805600
We are registered with the Information Commissioner’s Office (ICO): https://ico.org.uk

2. Purpose of This Notice

This Privacy Notice explains how we collect, use, store, and share your personal data. It also outlines your legal rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

As a recruitment business, we must process personal data (including special category data) to provide work-finding and related services to clients and candidates. We act as a data controller in this process.

3. What is Personal Data?

Personal data means any information relating to an identifiable individual. This includes obvious identifiers (e.g., name, contact details), and less obvious ones (e.g., IP address, right to work status).

Special category (or “sensitive”) data includes health, criminal convictions, and biometric data.

4. How We Collect Data

We may collect your data directly or from third-party sources.

Type of Individual How Data Is Collected
Candidates Directly from you, CVs, job boards, LinkedIn, referrals, social media
Clients, Suppliers, Referees/Emergency Contacts, Website Users Directly, referrals, online research (e.g., LinkedIn, directories), during service provision, or automatically via cookies

5. Personal & Special Category Data We Process

Candidate Data

  • Name, contact details, address
  • National Insurance number, nationality
  • Employment history, education, references
  • Right-to-work documentation (passport/birth certificate)
  • Bank details (for payroll)
  • Criminal records (where required)
  • Health or disability information (where relevant)

Client and Supplier Data

  • Contact name and details
  • Company information
  • Bank/payment details (suppliers only)

Web Users

  • IP address, browsing activity, cookie preferences

6. Legal Bases for Processing

We process your data under the following lawful bases:

  • Consent – where you have given clear permission
  • Contract – to perform services (e.g., job matching, payroll)
  • Legal obligation – e.g. verifying right to work, HMRC compliance
  • Legitimate interest – e.g. to manage our database and improve service

Where we rely on legitimate interests, we always balance our interests with your rights and freedoms, and you have the right to object to this processing at any time.

7. Special Category Data

We only process special category data (e.g. criminal record or health info) when:

  • You have explicitly consented; or
  • It is necessary for legal claims, safeguarding, or employment law obligations

8. How We Use Your Data

  • Provide recruitment services
  • Match you with job opportunities
  • Process payroll and legal documentation
  • Maintain accurate records
  • Carry out compliance checks
  • Send job alerts or communications (with your consent)
  • Improve our website and services

9. Automated Decision-Making & Profiling

We may use limited automation for:

  • Pre-screening job criteria (e.g., full driving licence)
  • Psychometric and aptitude assessments (only with consent)

You have the right to request human review of automated decisions affecting you.

10. How Long We Keep Your Data

  • Candidate data: At least 1 year after last activity (per Conduct Regulations)
  • Payroll/tax data: 6+ years (as required by HMRC)
  • Client/supplier data: As long as the business relationship exists or as required by law

When data is no longer needed, it will be securely deleted or anonymised.

11. Data Sharing

Your data may be shared with:

  • Clients (for job placements)
  • HMRC and regulatory authorities
  • Payroll providers
  • Reference providers
  • Technology providers (e.g., CRM, assessments)
  • Legal or government bodies as required by law

We ensure all third parties comply with data protection law and have appropriate safeguards in place.

12. International Data Transfers

We may transfer data outside the UK/EEA if necessary (e.g., international clients or platforms), but will only do so with appropriate safeguards such as:

  • Adequacy decisions
  • Standard contractual clauses
  • Additional security measures

You will be informed if international transfers apply to your data.

13. Your Rights

You have the following rights under data protection law:

  • Access – to know what data we hold about you
  • Rectification – correct inaccurate or incomplete data
  • Erasure – ask us to delete your data (“right to be forgotten”)
  • Restriction – ask us to stop using your data in certain ways
  • Objection – to certain types of processing (e.g., marketing or profiling)
  • Data portability – to receive your data in a reusable format
  • Withdraw consent – where consent is the legal basis
  • Lodge a complaint – with the ICO if unhappy with our practices

14. How to Make a Subject Access Request (SAR)

To exercise any of your rights, including requesting access to your data, contact:

Robert Gilchrist
Email: [email protected]
Tel: 01592 805600
Postal: The Tax Office, Pentland Park, Glenrothes, KY6 2AL

There is no charge unless the request is excessive. We aim to respond within 1 month (or up to 3 months for complex requests).

15. Updates to This Notice

We may update this Privacy Notice to reflect changes in law or services. The latest version will always be available on our website.

Effective Date: May 2025
Next Review Due: May 2026