Privacy Notice
Last updated: 14 February 2026
Talent Hatch Global Limited (“Talent Hatch”, “we”, “us”) is committed to protecting your privacy and personal data.
This Privacy Notice explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Data controller: Talent Hatch Global Limited
Registered office: Burch House, Lincoln Road, HP12 3RE, United Kingdom
Operational address: Oxford House, 12–20 Oxford Street, Newbury, RG14 1JB, United Kingdom
Data protection contact: James Webb
Email: james@talenthatch.co.uk
2. Who this notice applies to
This notice applies to individuals whose personal data we process, including:
- Candidates: prospective, active and placed candidates for permanent, interim and contract roles
- Client contacts: individuals at organisations who may hire or engage candidates
- Suppliers and partners: individuals at organisations that provide services to us (for example CRM, email, website and event suppliers)
- Website visitors: people who visit our website
In this notice, “you” refers to any of the above.
3. The personal data we collect
We collect only the personal data we need to provide recruitment and related services and to operate our business and website.
3.1 Data you give us directly
This may include:
- Name, email address, phone number, location and other contact details
- CV and career information, including work history, education and qualifications
- Role preferences, salary or rate expectations, notice period and availability
- Interview feedback and notes, call notes and communications with us
- Right to work information where relevant to a role
- References and information you provide about your experience and suitability
3.2 Data we obtain from other sources
We may obtain personal data from:
- Public sources such as LinkedIn, company websites, portfolios or other professional platforms
- Job boards and online CV libraries where you have made information available
- Referrals and introductions (for example from colleagues or mutual contacts)
- Clients, where they share information relevant to a recruitment process
Where we obtain your data from a third party and UK GDPR requires it, we will provide you with privacy information within the required timeframe.
3.3 Data collected when you use our website
This may include:
- IP address and device information, browser type/version and operating system
- Usage data such as pages viewed, time on page, click behaviour and referral source
- Cookie and similar technology data (see section 10)
4. Special category data and criminal offence data
Recruitment can occasionally involve processing special category data (for example health information where you request reasonable adjustments, or diversity and inclusion information where it is provided).
We will only process special category data where we have a lawful basis under UK GDPR and a valid additional condition for processing under UK GDPR and the Data Protection Act 2018.
We do not routinely process criminal offence data. If a role requires checks (for example DBS), we will only process the minimum data required and where lawful.
5. How we use your personal data and our lawful basis
We use personal data to provide recruitment services, manage relationships, meet legal obligations, and operate and improve our website and business.
5.1 Purposes, data and lawful basis
| Purpose | Examples | Typical data | Lawful basis |
|---|---|---|---|
| Provide recruitment services | Sourcing, screening, shortlisting, interview coordination and candidate support | Candidate profile, communications, notes | Legitimate interests; Contract (where applicable) |
| Introduce candidates to clients | Sharing candidate information for a specific opportunity | CV/profile, interview notes, relevant career details | Legitimate interests; Consent where required by our process |
| Candidate relationship management | Keeping in touch about relevant opportunities and career discussions | Contact details, preferences, communications | Legitimate interests |
| Client relationship management | Responding to enquiries, managing assignments, service delivery | Client contact data, communications | Legitimate interests; Contract |
| Supplier management | Managing contracts and delivery with suppliers and partners | Supplier contact data, communications | Contract; Legitimate interests |
| Compliance and administration | Record keeping, invoicing, insurance, managing complaints | Contact details, financial admin | Legal obligation; Legitimate interests |
| Marketing (where applicable) | Sharing updates, insights, events and service communications | Contact details, marketing preferences | Legitimate interests and/or Consent (depending on circumstances) |
| Website performance and security | Analytics, troubleshooting, security monitoring | Website usage data, cookies | Legitimate interests; Consent for non-essential cookies |
5.2 Legitimate interests
Where we rely on legitimate interests, these include:
- Delivering recruitment services to candidates and clients
- Maintaining a relevant database of candidates and business contacts
- Running, improving and growing our business
- Protecting our business, systems and website
You can object to processing based on legitimate interests (see section 12).
6. Consent and candidate submissions
We may ask for consent in specific situations, for example:
- For certain marketing communications, depending on the context and channel
- For processing special category data where consent is the appropriate condition
- For non-essential cookies and similar technologies (see section 10)
Candidate submissions and applications
As part of our recruitment service:
- We will not submit your CV or profile to a client for a specific role without your agreement
- We will not apply for roles on your behalf without your agreement
- You can tell us at any time which organisations you do not want us to approach
7. Who we share your data with
We may share your personal data with:
- Clients and prospective clients for the purpose of recruitment services (for example introducing candidates for a specific role)
- Candidates where necessary to arrange interviews, confirm availability and manage engagement
- Service providers (processors) who support our operations (for example CRM systems, email providers, cloud storage, website hosting, analytics providers, and event tools)
- Professional advisers such as accountants, insurers and legal advisers
- Authorities and regulators where required by law or to protect legal rights
We do not sell personal data.
8. International transfers
Some suppliers or clients may be based outside the UK. Where personal data is transferred outside the UK, we use appropriate safeguards such as adequacy regulations where applicable and approved contractual protections (for example the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses), together with supplier due diligence and security controls.
9. How long we keep your data
We keep personal data only for as long as necessary for the purposes in this notice, taking into account legal obligations and potential legal claims.
9.1 Retention (headline)
| Category | Typical retention |
|---|---|
| Candidate records (active relationship or recent interaction) | Up to 7 years from last meaningful interaction, or 7 years from placement/end of contract (whichever is later) |
| Candidate data sourced from public sources where we have had no direct interaction | Up to 12 months from collection |
| Client and supplier contacts | Up to 3 years from last meaningful interaction |
| Records relevant for tax and financial compliance | Up to 6 years after the end of the financial year (or longer where required) |
| Call recordings | 90 days |
We may retain data longer where needed to establish, exercise or defend legal claims, or to comply with legal obligations.
10. Cookies and similar technologies
We use cookies and similar technologies on our website.
- Strictly necessary cookies help the website function and cannot be switched off in our systems
- Analytics and marketing cookies help us understand how our website is used and support marketing activity. We only set these where you have given consent via our cookie banner
You can change your cookie preferences at any time using the cookie settings on our website.
11. Security
We use appropriate technical and organisational measures to protect personal data, including access controls and secure systems, and encryption where appropriate.
No online service can be guaranteed to be completely secure. While we take steps to protect your personal data, any transmission over the internet is at your own risk.
12. Candidate rights and your data rights
Under the UK GDPR and the Data Protection Act 2018, you have rights over your personal data. These rights apply to candidates, client contacts, supplier contacts and website visitors, although some rights only apply in certain situations.
Your rights include
- Right to be informed about how your data is used
- Right of access to a copy of your personal data
- Right to rectification to correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) in certain circumstances
- Right to restrict processing in certain circumstances
- Right to data portability in certain circumstances
- Right to object where we rely on legitimate interests, and to object at any time to direct marketing
- Rights relating to automated decision-making and profiling. We do not use solely automated decision-making to make recruitment decisions
- Right to withdraw consent where consent is used as our lawful basis
How to exercise your rights
To make a request, email james@talenthatch.co.uk with enough information for us to identify you. If needed, we may ask for information to confirm your identity.
We will respond within one month of receiving your request. We can extend this by up to a further two months if your request is complex, but we will tell you if that applies.
A fee does not usually apply. We may charge a reasonable fee, or refuse to act, if a request is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your data, please contact us at james@talenthatch.co.uk and we will investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO).
13. Links to other websites
Our website may contain links to third party websites. If you follow a link, that third party’s privacy policy will apply.
14. Updates to this notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page and, where appropriate, we may notify you by email.
15. Contact
Questions, comments and requests regarding this Privacy Notice should be addressed to:
James Webb
Email: james@talenthatch.co.uk
Registered office: Burch House, Lincoln Road, HP12 3RE, United Kingdom.
Operational address: Oxford House, 12–20 Oxford Street, Newbury, RG14 1JB, United Kingdom.