Jobs Surrey Privacy Policy

Last updated: 6 August 2026

Jobs Surrey Limited (“Jobs Surrey”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal data openly, lawfully and securely. This policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy alongside our Cookie Policy and our Website Terms & Conditions. If you do not understand any part of this policy, please contact us using the details in section 14.

1. Who we are and how to contact us

Jobs Surrey Limited is the data controller responsible for your personal data. We are a commercial recruitment agency based in and serving Surrey.

• Company: Jobs Surrey Limited, registered in England & Wales, company number to be confirmed.
• Registered office: to be confirmed.
• ICO registration number: pending ICO registration.
• Data protection contact: info@jobssurrey.co.uk, or by post to the address above marked “Data Protection”.

2. The personal data we collect

The information we collect depends on your relationship with us. We may collect and process the following:

2.1 Candidates and job seekers

• Identity and contact details — name, address, email, telephone number and date of birth.
• Career information — your CV, work history, qualifications, skills, references, salary details and expectations, and details of your current or previous employment.
• Right-to-work and eligibility information — nationality, passport or visa details, and evidence of your entitlement to work in the United Kingdom.
• Assessment information — interview notes, feedback from you or from prospective employers, and the outcome of any placement.
• Where relevant and provided by you or with your consent, special category data (such as information about your health, disability or diversity monitoring) and information about unspent criminal convictions where a role requires it.

2.2 Clients and prospective employers

• Business contact details of your staff — name, job title, work email, work telephone number and business address.
• Vacancy, engagement and commercial information necessary to provide our recruitment services and manage our relationship with you.

2.3 Website visitors

• Technical data — IP address, browser type and version, device information, and pages viewed.
• Usage and analytics data, and information collected through cookies (see our Cookie Policy).
• Any information you submit through our enquiry, contact or application forms.

3. How we collect your personal data

• Directly from you — when you register with us, submit a CV or application, complete a form, email or telephone us, or otherwise interact with our services.
• From third parties — such as job boards, professional networking sites, your named referees, and publicly available sources, where you have made your details available for recruitment purposes.
• Automatically — through cookies and similar technologies when you use our website.

4. How we use your personal data and our lawful bases

Under the UK GDPR we must always have a lawful basis for processing your personal data. We rely on the following bases:

• To provide recruitment services, match candidates to roles, submit candidates to clients and manage placements — Legitimate interests (to operate our recruitment business); performance of a contract
• To respond to enquiries and provide the information or service you request — Legitimate interests; steps taken at your request prior to entering a contract
• To verify your identity and right to work — Legal obligation; legitimate interests
• To send you relevant job alerts or marketing where you have asked to receive them — Consent (which you may withdraw at any time)
• To process special category data (e.g. health or diversity information) — Explicit consent, or another condition under Article 9 UK GDPR and Schedule 1 of the Data Protection Act 2018
• To keep records, meet legal and regulatory duties and defend legal claims — Legal obligation; legitimate interests

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms, and we will always tell you what those interests are on request.

5. Sharing your personal data

We do not sell your personal data. We share it only where necessary and only with:

• Prospective employers (clients) — we will only submit your details to a client with your prior agreement to that specific application, unless we have another lawful basis to do so.
• Service providers and processors — such as our IT, hosting, email, applicant-tracking and customer-relationship-management (CRM) providers, who act on our instructions under a written contract.
• Professional advisers and authorities — where required to comply with the law, a court order, or a request from a regulatory or law-enforcement body.
• A buyer or successor — if we sell or reorganise our business.

6. International transfers

We aim to store and process your personal data within the United Kingdom. Where any provider processes data outside the UK, we will ensure an adequate level of protection is in place, such as a UK adequacy regulation or the International Data Transfer Agreement (or equivalent safeguards approved under the UK GDPR).

7. How long we keep your personal data

We keep your personal data only for as long as is necessary for the purposes set out in this policy, after which it is securely deleted or anonymised. For candidates, we typically retain records for 24 months from our last meaningful contact, unless a longer period is required by law or you ask us to remove your data sooner. Our full retention schedule is available on request.

8. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include access controls, encryption of data in transit and at rest where appropriate, secure storage of CVs and application data, staff training, and procedures to deal with any suspected personal data breach, including notifying you and the Information Commissioner’s Office (ICO) where we are legally required to do so.

9. Marketing communications

We will only send you marketing or job alerts where you have consented to receive them. You can opt out at any time by using the unsubscribe link in any message or by contacting us. Opting out of marketing will not stop service communications relating to an active application or placement.

10. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Any decision about your suitability for a role involves a human review.

11. Your rights

Under the UK GDPR you have the right to:

• be informed about how your data is used;
• access a copy of the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data erased in certain circumstances (the “right to be forgotten”);
• restrict or object to our processing of your data;
• data portability — to receive your data in a structured, commonly used format; and
• withdraw consent at any time where we rely on it.

To exercise any of these rights, contact us using the details in section 14. We will respond within one month. There is normally no charge, although we may refuse or charge for requests that are manifestly unfounded or excessive.

12. Children

Our services are intended for people aged 16 and over. We do not knowingly collect personal data from children under this age. If you believe we hold data about a child, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, and the “last updated” date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.

14. How to contact us or make a complaint

If you have any questions about this policy or wish to exercise your rights, please contact our data protection contact at info@jobssurrey.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would, however, appreciate the chance to address your concerns before you approach the ICO.