Privacy notice

About this notice

Bennett & Fletcher Ltd is the data controller for personal information submitted through this website, by email or during a recruitment process. Our registered office is 2nd Floor, 34 Clerkenwell Road, London EC1M 5PQ. Our company number is 02644718.

This notice applies to candidates, clients, website visitors, suppliers and anyone who contacts us. It does not cover third-party websites we link to.

Information we collect

We may collect:

your name, contact details and location;
your CV, employment history, education, qualifications and references;
information about your skills, experience, availability, salary expectations and preferences;
correspondence with us, including emails and notes from calls and interviews;
assessment notes, interview scores and written calibration records;
right-to-work and compliance information where a role requires it;
client contact details and instructions;
technical information such as IP address, browser type and pages visited when you use our website;
any other information you choose to provide.

We do not ask for special category data unless it is necessary for a specific role or you choose to provide it. Where we collect diversity information, it is optional, aggregated and used for monitoring rather than selection.

How we collect information

We collect information:

directly from you when you apply, register, email or speak to us;
from public professional sources such as LinkedIn and company websites when we are researching a role;
from references and former employers, with your knowledge;
from clients and hiring managers during a recruitment process;
automatically through our website and email systems.

Why we use your information

We use personal data to:

respond to enquiries and provide our services;
assess your suitability for current and future roles;
introduce you to clients, only where you have agreed;
manage interviews, offers and placements;
meet our legal, regulatory and compliance obligations;
improve our services and maintain accurate records;
send you market updates where you have asked to receive them.

Lawful basis

We rely on one or more of the following lawful bases:

Legitimate interests — to run our recruitment business, respond to enquiries and assess candidates for roles.
Contract — where we need to process data to perform a contract with you or a client.
Legal obligation — where we must keep records for tax, compliance or right-to-work purposes.
Consent — where we ask for it, for example for marketing or optional diversity monitoring.

You can withdraw consent at any time. Withdrawing consent does not affect processing carried out before withdrawal.

We may share your information with:

prospective employers, only where you have agreed;
clients who have engaged us for a search or assessment;
service providers who support our operations, such as hosting, email, assessment and IT providers;
professional advisers, auditors and insurers;
regulators, law enforcement or other authorities where required by law.

We require service providers to protect personal data and to use it only for the services they provide to us. We do not sell personal data.

International transfers

We work across the UK, Europe and North America. Where personal data is transferred outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision. We review transfers annually.

Retention

We keep personal data only as long as we need it:

candidate records: up to 24 months after our last meaningful contact, unless you ask us to delete them sooner;
placement and contract records: up to six years after the end of the engagement, to meet legal and accounting obligations;
client contact records: up to three years after our last contact;
website and email logs: up to 12 months;
marketing preferences: until you unsubscribe or ask us to update them.

Where we receive a request to delete data, we will remove it unless we have a legal or contractual reason to keep it.

Your rights

Under UK data protection law, you have the right to:

access the personal data we hold about you;
correct inaccurate data;
ask us to delete data in certain circumstances;
object to processing based on legitimate interests;
restrict processing in certain circumstances;
receive your data in a portable format;
withdraw consent where processing is based on consent;
complain to the Information Commissioner’s Office.

To exercise a right, contact us at privacy@bennett-fletcher.com. We will respond within one month. We may ask for proof of identity before releasing personal data.

Marketing

We send occasional market updates to people who have asked for them. Every update includes an unsubscribe link. You can also ask us to stop sending marketing at any time by emailing hello@bennett-fletcher.com.

Cookies

Our public website does not use advertising or analytics cookies. The private administration area uses a strictly necessary session cookie to keep authorised users signed in. See our cookie statement for more information.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, secure storage, staff training and supplier reviews. No system is completely secure. If we become aware of a breach that affects your rights, we will notify you and the regulator where required.

Changes to this notice

We review this notice annually and update it when our processing changes. The date at the top of this page shows when it was last updated.

Contact and complaints

For privacy questions, contact privacy@bennett-fletcher.com or write to us at 2nd Floor, 34 Clerkenwell Road, London EC1M 5PQ.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.