Privacy Policy
1. Introduction
Jones Taylor (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to all individuals whose data we process, including candidates, clients, suppliers, and website visitors.
2. Who We Are
Jones Taylor is a based recruitment agency providing permanent, contract, and interim staffing solutions across multiple industries.
Data Controller: Scott Taylor
Email: gdpr@jtsearch.com
We act as a data controller when collecting and processing personal information directly from you and as a data processor when handling data on behalf of our clients.
3. What Information We Collect
We may collect, store, and process the following types of personal data:
For Candidates:
-
Contact details (name, address, email, phone number)
-
Employment history, education, and qualifications
-
CVs, cover letters, and references
-
National Insurance number and right-to-work documentation
-
Interview notes, feedback, and assessment results
-
Salary expectations and employment preferences
-
Sensitive data (e.g., health or disability information, only with explicit consent)
For Clients and Suppliers:
-
Contact names, job titles, and business contact details
-
Billing, payment, and contractual information
-
Communications and meeting notes
For Website Visitors:
-
IP address, browser type, and usage data (via cookies – see section 11)
4. How We Collect Your Data
We collect personal data in a variety of ways, including:
-
Directly from you (e.g., CV submissions, applications, or communication)
-
From publicly available sources such as LinkedIn, job boards, or social media
-
From clients, referrals, or professional contacts
-
Through recruitment software, online forms, or email
-
From background and reference checks (with your consent)
5. Why We Process Your Data
We process your personal data for purposes including:
-
Matching your profile with job opportunities
-
Communicating about roles and recruitment updates
-
Providing recruitment and talent services to clients
-
Maintaining accurate business records
-
Complying with legal and regulatory requirements
-
Improving our services and candidate experience
6. Lawful Basis for Processing
Our processing of your personal data is based on one or more lawful grounds under UK GDPR:
-
Consent: You have given explicit consent (e.g., for us to store and share your CV).
-
Contract: Processing is necessary to perform or prepare to enter into a contract.
-
Legal Obligation: Required to meet statutory or regulatory obligations.
-
Legitimate Interests: Necessary for our business operations, such as maintaining candidate records and communicating about roles.
7. How We Share Your Data
We may share your data with:
-
Clients seeking to hire staff
-
Service providers (e.g., IT systems, payroll, compliance, or background checks)
-
Legal, regulatory, or professional advisers
-
Auditors, insurers, and relevant authorities where legally required
We ensure all third parties handle your data securely and in accordance with the law.
8. International Transfers
In some cases, data may be transferred outside the UK (for example, to international clients). When this occurs, we ensure adequate protections are in place, such as UK-approved standard contractual clauses or equivalent safeguards.
9. Data Retention
We retain your personal data only as long as necessary for recruitment and legal purposes.
As a general guide:
-
Candidate data: retained for up to 2 years after last contact (unless you request deletion).
-
Client and supplier data: retained for 6 years for contractual and accounting compliance.
After this period, your data is securely deleted or anonymised.
10. Your Rights
Under UK data protection law, you have the right to:
-
Access: Request a copy of the data we hold about you.
-
Rectification: Correct inaccurate or incomplete data.
-
Erasure: Request that we delete your data.
-
Restriction: Ask us to limit how we use your data.
-
Portability: Request a copy of your data in a portable format.
-
Objection: Object to processing based on legitimate interests.
-
Withdraw Consent: Withdraw consent at any time.
To exercise your rights, please contact us using the details in Section 2.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
11. Cookies and Website Tracking
Our website uses cookies to improve functionality and analyse visitor behaviour. Cookies help us understand how people use our site and enhance your browsing experience.
You can adjust or disable cookies in your browser settings. For further information, please see our Cookie Policy.
12. Data Security
We use appropriate technical and organisational measures to safeguard your personal data, including encryption, secure storage, password protection, and restricted access.
All employees and contractors are trained in data protection and confidentiality obligations.
13. Updates to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on our website and marked with the current revision date.
14. Contact Us
For any questions or concerns about this Privacy Policy or how we handle your personal data, please contact:
Scott Taylor