RedTech Recruitment Privacy Policy

Last updated: October 2026

What has changed in this version

We updated this policy in October 2026. The main changes are:

UK law: the policy now refers to the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
Privacy contact: Robert Bull, Director, is now our named privacy contact (section 2).
How we use your data: we now set out the lawful basis for each use (section 4).
Sharing with clients: we explain that we share candidate details with clients, and that we ask you first (section 5).
US roles and Paraform: a new section explains how we handle data for roles in the United States (section 6).
Where your data goes: we have corrected and expanded the section on storage and international transfers (section 7).
Complaints: we have added a data protection complaints procedure (section 10).
AI and automated tools: we explain how we use them and the role of our recruiters (section 11).
Cookies: we now list the cookies and similar technologies we use and explain how to switch off analytics (section 12).

1. About this policy

This is the privacy notice and cookies policy of RedTech Recruitment Ltd (“we”, “us” or “our”). It explains what personal data we collect, why we use it, who we share it with and what rights you have.

It applies to personal data we collect:

through our website at https://redtech-recruit.com (the “Site”), including when you contact us about a problem with the Site;
when you respond to an advertisement we have posted on a job board or social media platform, such as CV-Library, LinkedIn, Indeed, Monster or Milkround;
when we find your CV or professional profile on a job board, LinkedIn or a similar platform and think you may suit a vacancy we are working on for a client;
from your business card, a company website or a personal recommendation;
in the course of providing permanent or temporary recruitment and resourcing services (“Services”), whether you are a candidate, a potential candidate, a consultant, a client contact, or a contact at another organisation involved in introducing or supplying a candidate, such as a recruitment process outsourcing company, personal service company or umbrella company.

If we did not collect your personal data from you directly, we will direct you to this policy when we first contact you, and you can ask us where we obtained your details.

If you have any questions about this policy, please contact us using the details in section 2.

2. Who we are and how to contact us

RedTech Recruitment Ltd is a recruitment agency. We are the “controller” of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we decide how and why your personal data is used, and we are responsible for it.

Company name: RedTech Recruitment Ltd
Company number: 12344087, registered in England
Registered address: 14A High Street, Waterbeach, Cambridge, CB25 9JU
Website: https://redtech-recruit.com
Privacy contact: Robert Bull, Director
Email: robert@redtech-recruit.com
Telephone: +44 (0) 1223 782488

Our privacy contact handles all questions, requests and complaints about personal data. Please use these details to exercise any of your rights (section 9) or to make a complaint (section 10).

3. The personal data we collect

Depending on your relationship with us, we may collect and use:

Identity and contact details: name, address, telephone number, email address, date of birth and gender.
Professional details: business name, job title, profession, CV, career history, qualifications and skills, and your preferences such as the type of role, location, salary expectations and notice period.
Right to work and identity information, where we need it to place you in a role.
Bank details, where we need them to pay you.
Correspondence: a record of our emails, messages and calls with you, and our notes.
Information you give us through the Site, including anything you enter in forms or surveys.
Site usage and technical data: details of your visits to the Site and the resources you use, and information about your device such as IP address, browser and operating system.

We do not ask for sensitive information such as health data unless we need it for a specific reason, for example to arrange adjustments for an interview. If we do, we will explain why and ask for your explicit consent.

4. How we use your personal data and our lawful basis

UK data protection law requires us to have a lawful basis for each use of your personal data. The table shows what we use your data for and the basis we rely on.

What we use your data for	Our lawful basis
Finding and assessing candidates: collecting CVs and profiles from applications, job boards, LinkedIn and referrals, matching them to vacancies, and keeping our candidate database	Legitimate interests: running a recruitment business that helps candidates find suitable work and clients fill vacancies
Contacting you about roles that may suit you and keeping in touch about your job search	Legitimate interests, as above
Putting you forward to a client for a specific role: sharing your CV and details, arranging interviews, passing on feedback and handling offers	Legitimate interests, as above. We ask you first before putting you forward for any specific role
Submitting you for a role in the United States through Paraform (section 6)	Legitimate interests, as above. We only submit you with your agreement
Placing and paying temporary or contract workers, including contracts and timesheets	Performance of a contract with you, and legal obligations such as tax and employment law
Providing our Services to clients: managing accounts, dealing with client contacts, telling clients our charges and invoicing	Performance of a contract, and legitimate interests in managing client relationships
Telling you about our services, news and other opportunities by email, phone, text or post	Legitimate interests in promoting our business, or your consent where the law requires it. You can opt out at any time
Meeting our legal and regulatory duties: keeping the records recruitment agencies must keep, right to work checks, tax, and responding to data protection requests and complaints	Legal obligation
Running, securing and improving the Site, and responding to enquiries or problems you report	Legitimate interests in operating a secure and useful website. Consent for cookies where the law requires it (section 12)
Establishing, exercising or defending legal claims, and keeping proper business records	Legitimate interests in protecting our business

Where we rely on legitimate interests, we have considered whether our interests are overridden by your rights and interests, and concluded they are not. You have the right to object to this at any time (section 9).

Where we rely on your consent, you can withdraw it at any time by contacting us. This will not affect anything we did before you withdrew it.

You can ask us to stop marketing to you at any time by contacting us or using the unsubscribe option in our emails. We comply with the Privacy and Electronic Communications Regulations 2003 (PECR) when we send electronic marketing.

In some cases we need personal data to meet a legal or contractual requirement. If you choose not to provide it, we may not be able to offer you some or all of our Services.

5. Who we share your personal data with

We share personal data only where there is a good reason to do so. We do not sell your personal data.

If you are a candidate, we share your CV, professional details and our assessment of your suitability with clients who are hiring. We ask you first before putting you forward for any specific role. Once a client receives your details, it is responsible for its own use of them under its own privacy notice.
Other organisations involved in a placement, such as a recruitment process outsourcing company, managed service provider, umbrella company or personal service company.
Paraform and US hiring companies, for roles in the United States only (section 6).
If you are a client contact, we share your name and business contact details with candidates where needed, for example to arrange an interview.
Referees and other people you ask us to contact.
Our suppliers. We use other companies and contractors to provide services such as our recruitment database, email, website hosting, IT support, AI-assisted software, back office administration, and accounting and payroll. They may only use your data to provide those services to us, and they are bound by contract to keep it secure and confidential.
Professional advisers and insurers, where needed to run our business or deal with a claim.
Regulators, courts and law enforcement, where we have a legal obligation, or where it is necessary to protect our rights or the rights, property or safety of others, including to prevent fraud.
A buyer of our business. If we sell or transfer all or part of our business, we may share personal data with the prospective buyer and its advisers under confidentiality terms.

6. Roles in the United States and Paraform

We work on some roles based in the United States through Paraform, an online recruitment marketplace operated by Paraform, Inc., a US company. We use Paraform only for US roles and US-based candidates.

If we think you may suit a role listed on Paraform:

We may save your professional profile (for example your LinkedIn profile or CV) and our notes in our Paraform workspace while we assess whether the role suits you.
We will contact you, tell you about the role and the hiring company, and ask for your agreement before we submit you. We will not submit you without it.
If you agree, we will share your name, contact details, CV or profile, and relevant details such as your experience, salary expectations and availability with Paraform and, through Paraform, with the hiring company.

What you should know:

Paraform is a controller in its own right. It uses your personal data under its own privacy policy, which you can read at https://www.paraform.com/privacy-policy. We do not control how Paraform or the hiring company use your data once they hold it.
Other recruiters. Paraform’s platform can allow other approved recruiters working on the same role to see candidates’ professional backgrounds. We switch on Paraform’s anonymisation setting so that our candidates are hidden from other recruiters.
Your data will be held in the United States. Section 7 explains how we protect transfers outside the UK.
UK law still applies to us. Our own handling of your personal data is governed by UK data protection law wherever you live. You have all the rights in section 9 and can use the complaints procedure in section 10.
You can change your mind. Tell us at any time and we will stop putting you forward and ask Paraform to withdraw your submission. We will also pass your request on to any hiring company that has already received your details.

7. Where we store your data, international transfers and security

We store personal data on systems run by our suppliers, including our recruitment database, email and website hosting. Some of our suppliers, and some of the recipients described in sections 5 and 6, are based outside the UK, including in the European Economic Area (EEA), the United States and South Africa.

When we transfer personal data outside the UK, we make sure it is protected in one of these ways:

UK adequacy regulations. The UK government has decided that the destination provides adequate protection. This covers the EEA, and US organisations certified under the UK Extension to the EU-US Data Privacy Framework.
Approved contract terms. We use the International Data Transfer Agreement or Addendum issued by the Information Commissioner’s Office (ICO).
A specific exception allowed by law. For example, where you have explicitly agreed to the transfer after we have explained the risks, or where the transfer is necessary to take steps you have asked us to take.

You can contact us to ask which of these applies to your data.

We take appropriate technical and organisational steps to keep your personal data secure. These include limiting access to the people who need it and using password-protected systems from established suppliers. No system can be guaranteed completely secure. If a data breach is likely to result in a high risk to you, we will tell you without undue delay.

8. How long we keep your data

We keep candidate CVs, contact details and related recruitment records for up to seven years from your latest application, meaningful contact with us or the date we last provided recruitment services to you, whichever is later.

Meaningful contact means a substantive interaction, such as a conversation about your career or recruitment needs, or a relevant reply to one of our messages. Unanswered messages, automated emails, email opens and requests to unsubscribe do not restart this period.

We have chosen this maximum period because:

Candidates may return to the job market after several years. Based on our experience recruiting in the technology sector, retaining relevant CVs and recruitment records helps us identify suitable opportunities when candidates are ready for their next move.
Recruitment relationships can develop over time. Candidates may become hiring managers, and client contacts may later seek a new role themselves.
Recruitment history helps us provide an effective service. Records of roles discussed and introductions made help us avoid duplicate submissions, respond to queries and deal with disputes.

Where there has been no further application, meaningful contact or recruitment service for seven years, we consider the information less likely to remain relevant.

We regularly review the information we hold and delete or anonymise it sooner where it is no longer needed. We update our records when you tell us that your circumstances have changed.

Sensitive information provided for a specific purpose, such as arranging interview adjustments, is kept only for as long as needed for that purpose, unless there is a specific legal reason to retain it.

You can ask us to delete your data at any time using the contact details in section 2. We will consider your request in accordance with your rights explained in section 9. We may retain minimal contact information to ensure we respect any request not to contact you again.

At the end of the retention period, we delete or anonymise your data unless specific records remain necessary to meet a legal obligation or establish, exercise or defend legal claims. In those circumstances, we retain only the information needed, for as long as that reason applies.

9. Your rights

Under UK data protection law you have the right to:

Be informed about how we collect and use your personal data. This policy is part of how we do that.
Access your personal data and receive a copy of it. This is known as a subject access request.
Have your data corrected if it is inaccurate or incomplete.
Have your data deleted in certain circumstances. We will delete it without undue delay unless we have a legal right or obligation to keep it.
Restrict how we use your data in certain circumstances.
Object to our use of your data where we rely on legitimate interests. You have an absolute right to object to direct marketing, and we will always stop if you ask.
Data portability: to receive data you gave us in a commonly used electronic format, where we use it on the basis of consent or a contract.
Withdraw consent at any time, where we rely on your consent.
Not be subject to significant decisions made solely by automated means without safeguards (section 11).

How to use your rights

Contact our privacy contact using the details in section 2. You can ask by email, phone or post. It helps us if you put your request in writing and tell us clearly what you are asking for.

We may need to confirm your identity before we act on a request.
There is normally no charge. If a request is manifestly unfounded or excessive, for example because it is repetitive, we may charge a reasonable fee or refuse it.
We aim to acknowledge your request within 5 working days. We will respond in full within one month. If your request is complex we can extend this by up to two further months, and we will tell you if we need to.

10. How to complain about our use of your personal data

If you think we have not handled your personal data properly, you have the right to complain to us. We take every complaint seriously and will try to put things right.

Tell us. Contact our privacy contact, Robert Bull, by email at robert@redtech-recruit.com, by phone on +44 (0) 1223 782488, or by post at 14A High Street, Waterbeach, Cambridge, CB25 9JU. You do not need to use a form. Please tell us your name, how to reach you, what has happened and what you would like us to do about it.
We acknowledge your complaint. We will confirm we have received it within 30 days, and usually much sooner.
We investigate. We will look into your complaint without undue delay and keep you informed of progress. We may need to ask you for more information.
We tell you the outcome. We will write to you without undue delay to explain what we found and what, if anything, we will do as a result.

If someone is complaining on your behalf, we will need to check that they have your authority to do so.

We keep a record of the complaints we receive and their outcomes. Using this procedure does not affect any of your legal rights.

Complaining to the Information Commissioner’s Office

You also have the right to complain to the ICO, the UK’s data protection regulator. The ICO will normally expect you to have raised your complaint with us first.

Website: https://ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Artificial intelligence, profiling and automated decisions

We use recruitment software, including artificial intelligence (AI) and other automated tools, to support our work. These tools may help us:

find candidates through our database, job boards and professional networking platforms;
compare CVs and profiles with vacancy requirements, including suggesting, scoring or ranking potential matches;
summarise or reformat CVs and recruitment notes;
draft messages, job descriptions and other documents.

Some of these activities involve profiling, which means using personal data to assess aspects of your professional background, such as how your skills and experience match a role.

Recruiter assessment

Our recruiters use these tools alongside their own judgement. Screening answers and automated recommendations help us organise and prioritise applications, but a recruiter considers the relevant application information before deciding whether to progress or decline an application. Recruiters can disagree with a tool’s recommendations and change the outcome.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. If this changes, we will explain the processing and applicable safeguards before introducing it.

The tools we use

We may change the tools we use over time. Where external providers process personal data, the sharing and international-transfer arrangements described in sections 5 and 7 apply.

Other organisations

Platforms such as LinkedIn, job boards and Paraform may use their own AI and automated tools to recommend candidates or support recruitment. Clients may also use these tools when assessing applications. Their own processing is explained in their privacy notices.

We remain responsible for how we use personal data and recommendations in our recruitment activities.

Your rights

Your data protection rights, including your right to object to processing based on legitimate interests, are explained in section 9. Please use the contact details in section 2 to exercise those rights.

We do not routinely provide individual feedback at the CV assessment stage. This does not affect your statutory data protection rights.

12. Cookies and similar technologies

We use a small number of cookies and similar technologies on the Site. We do not use advertising cookies or social media tracking pixels, and we do not track you across other websites. This section is based on a review of the Site carried out in October 2026.

Cookies are small text files that your browser stores on your device. Similar technologies include scripts and browser storage that do a comparable job. We use them in line with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK data protection law.

What we use

Cookie banner cookies. Our cookie banner sets four cookies: cookielawinfo-checkbox-necessary, cookielawinfo-checkbox-non-necessary, viewed_cookie_policy and CookieLawInfoConsent. They remember that you have responded to the banner and what you chose, so we do not ask you on every page. Each lasts 1 year.
Emoji display setting. WordPress, the software that runs the Site, stores an item called wpEmojiSettingsSupports in your browser’s session storage. It records whether your browser can display emoji, so pages display correctly. It is deleted when you close the tab.
Cloudflare Web Analytics. We use this service from Cloudflare, Inc. to count visits and measure page speed so that we can improve the Site. It does not use cookies or browser storage and does not identify you. We only see aggregated statistics. Nothing is stored on your device.
Google reCAPTCHA. This service from Google protects our forms from spam and automated abuse. Google receives your IP address and information about your browser, and may set a cookie called _GRECAPTCHA that lasts up to 6 months.
Fonts and code libraries. Our fonts are loaded from Google Fonts, and some page features, such as our CV builder, load code libraries from cdnjs (run by Cloudflare) and unpkg. These providers receive your IP address when your browser requests the files. They do not set cookies on the Site and nothing is stored on your device.

When we need your consent

UK law does not require consent for technologies that are strictly necessary to provide or secure the Site, or for analytics used only to produce aggregate statistics that help us improve the Site. For analytics, we must tell you what we use and give you a simple, free way to object, which we explain below.

We do not currently use any technologies that need your consent, such as advertising cookies. If that changes, we will ask you first and update this section.

Your choices

Cloudflare Web Analytics is switched on by default. You can switch it off at any time, free of charge. Select “Reject” on the cookie banner, or open “Cookie settings”, turn off “Analytics” and save. To change your choice later, select the “Privacy & Cookies Policy” tab at the bottom of any page.
Your browser. You can block or delete cookies in your browser settings. If you block the cookie banner’s own cookies, we cannot remember your choices and the banner will appear again.
Our careers site. Our job listings and application forms are hosted for us by Zoho Recruit at redtech-recruit.zohorecruit.eu. That site uses its own cookies, including a security cookie that protects the application forms.

13. Links to other sites

This policy does not apply to other websites that you reach through a link from our Site. We have no control over how your data is collected, stored or used by other websites, and we advise you to check their privacy policies before giving them any data.

14. Changes to this policy

We may change this policy from time to time. We will publish the updated version on this page with the date it was last updated and a summary of what has changed. If a change significantly affects how we use your personal data, we will also tell you directly where we can.