Privacy Policy

*Introduction and Purpose of this privacy notice

This Privacy Policy explains what we do with your personal data, whether we are in the process of helping you find a job, continuing our relationship with you once we have found you a role, providing you with a service, receiving a service from you, using your data to ask for your assistance in relation to one of our Candidates, or you are visiting our website.

*What information we hold about you

We collect personal information about you when you register or apply for a job through our website. The information you provide is treated in accordance with current UK data protection legislation. The information collected includes:

  • Identity Data e.g. name, username, , date of birth, gender
  • Contact Data e.g. address, email address, phone number(s)
  • Financial Data e.g. bank account
  • Technical Data e.g. IP address, log in details, browser type, operating system
  • Profile Data e.g. profession, grade, specialty, CV, compliance documents, RTW, qualifications, DBS
  • Marketing Preferences Data e.g. notification and communication preferences regarding our other products and services
*Why do we collect your Personal Information?

We collect and use your Personal Information because it is necessary to obtain certain details including Personal Information from you in the work-searching process and it is in our legitimate interests in the course of operating our business, including:

  • Responding to your queries.
  • Providing work-finding services and/or information to you.
  • Transmitting Personal Information between our offices or functions for internal administrative purposes.
  • Setting you up on a work assignment with a client.
  • Hosting and maintaining our websites.
  • Ensuring network and information security.
  • Carrying out direct marketing.
However we will only collect, use and handle your Personal Information when:
  • It is necessary for our legitimate interests in connection with carrying out our business, as long as, in each case, these interests are in line with applicable law and your legal rights.
  • Where you have agreed.
  • Where this is necessary for legal obligations which apply to us.
*How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you or with the potential company looking to employ you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data. Purposes for which we will use your personal data We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

*Disclosures of your personal data

We may have to share your personal data with the parties set out below for the purposes set out above. Internal Third Parties as mentioned above.

  • External Third Parties as mentioned above.
  • Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions

*International Transfers of your Personal Information

We may share your Personal Information with our third party service providers who we engage to help us to process the information that we collect from you as part of our business function, and/or to host and maintain our CRM systems, content or services, on our behalf and in accordance with this Privacy Policy. We will only transfer your Personal Information:

  • Where the transfer is to a place that is regarded by the European Commission as providing adequate protection for your Personal Information.
  • Where we have put in place appropriate safeguards, for example by using a contract for the transfer which contains specific data protection provisions that have been adopted by the European Commission or a relevant data protection authority. You can request a copy of these contracts by contacting us at:
  • Where you have consented to it, or there is another legal basis to allow us to make the transfer.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions

*How long do we store Personal Information for?

It is our policy to retain your Personal Information for the length of time required for the specific purpose or purposes for which it was collected, which are set out in this Privacy Policy. However, on occasion we may be obliged to store some data for a longer time, for example, where a longer time period is required by applicable laws. In this case, we will ensure that your Personal Data will continue to be treated in accordance with this Privacy Policy.

*Your Rights

You have a number of rights as outlined below. When exercising these rights we will need to validate your identity to ensure the request is from you. This is a security measure to ensure personal data is not disclosed to an unauthorised third party. You may exercise your rights by contacting us via the contact details below.

  1. You may request that your Personal Information be deleted, where it is no longer necessary for the purposes for which it is being processed and provided there is no other lawful basis for which we may continue to process such information.
  2. To the extent we are processing your Personal Information to meet our legitimate interests (as set out above), you may object to the processing of your Personal Information by us. If we are unable to demonstrate our legitimate grounds for that processing, we will no longer process your Personal Information for those purposes.
  3. You may object to our processing as set out above.
  4. You may withdraw any consent given to processing.
  5. Where we are processing your Personal Information automatically for the purposes of performing our contract with you, you may have the right to request that the Personal Information we hold about you be transferred to a third party data controller.
  6. Where we may undertake automated decision-making we will request your explicit consent if the decision-making is not authorised by law or necessity for the performance of a contract.
*Contact us

If you have any questions in relation to this Privacy Policy, or if you would like to contact us to exercise your rights as stated in this Privacy Policy, you may contact us at:


Should you have cause to make a complaint or express dissatisfaction with Vostek Consultancy , a member of its staff or processes, please email or telephone our Complaints Team at: A member of our Complaints team will address your concerns as appropriate.