Send us your CV

    1. Who we are
      1. Cavendish (Recruitment) Professionals Ltd, a company incorporated and registered in England and Wales with company number 08978942 whose registered office address is at 1 Royal Exchange, Royal Exchange, London EC3V 3DG (Cavendish).
      2. Within this notice Cavendish will also be referred to as “we”, “our”, “us”.
      3. We are a data controller. This means that we are responsible for deciding how we hold and use personal information about you, and for explaining this clearly to you.
    2. What is the purpose of a privacy notice?
      1. Our privacy notice describes how we collect and process the information you provide to Cavendish as part of our recruitment services, including when you use our website at https://www.cavendishprofessionals.com (our Service).
      2. This notice applies to potential candidates, candidates, contractors and clients (“you“).
      3. We are committed to ensuring that your privacy is protected. If you are asked to provide certain information when using our Service, it will only be used in the ways described in this privacy notice.
    3. What is personal data and what is our lawful basis for processing it?
      1. Personal data, or personal information, means any information relating to an individual from which that person can be identified. It does not include data where the information has been removed (anonymous data). There are special categories of more sensitive personal information which require a higher level of protection (see further at section 4.2, below).
      2. We will only use your personal data when the law allows us to. Our principle lawful basis for processing is set out in the table below. However, some of our grounds for processing will overlap and there may be several grounds which justify our use of your personal information.
      3. We may only rely on our legitimate interests (or those of a third party) to process your personal information, if your interests and fundamental rights do not override those interests. Where we rely on legitimate interests for our processing, we have set out the relevant interest, below.
      4. Generally, we do not rely on consent as a legal basis for processing your personal data although, if you are a private individual, we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
      5. We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
      6. Please note that we may process your personal information without your knowledge or consent where this is required or permitted by law.
      7. Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
    4. What sort of data do we collect about you and how?
      1. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
        Identity Data includes first name, , last name, other names, username (or similar identifier), title, date of birth and gender.
        Contact Data includes your address, email address and telephone numbers, and any other information you provide to us for the purpose of making contact with you.
        Candidate Data includes your CV, work experience, salary expectations and other information relating to your work history and qualifications.
        Financial Data includes bank account and payment card details.
        Location Data includes any Technical Data which identifies your location.
        Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
        Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, geo-tagging, and other technology on the devices you use to access this website.
        Usage Data includes information about how you use our Service.
      2. As part of our usual course of business, we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
      3. However, we may process Special Category Data:
        1. relating to a health condition or disability in order to meet our legal obligation to make reasonable adjustments in the provision of our services;
        2. to ensure meaningful equal opportunity and diversity and inclusion monitoring and reporting;
        3. where it is needed to protect your vital interests (or someone else’s interests) and you are not capable of giving your consent;
        4. where it is necessary to establish, exercise or defend a legal claim;
        5. where you have manifestly made the information public (including where you have voluntarily provided it to us); or
        6. otherwise with your explicit consent.
    5. How is your personal data collected?
      1. We use different methods to collect data from and about you including through:
      2. Direct interactions. You may give us your Identity, Contact, and Candidate by registering with us, or corresponding with us by post, phone, email or otherwise.
      3. Automated technologies or interactions. As you interact with our website, we will automatically collect Usage and Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.
      4. Third parties or publicly available sources. We collect personal data about you from various third parties and public sources as set out below:
        1. Technical Data from analytics providers (such as Google);
        2. Candidate Data from publicly available sources including social media sites such as LinkedIn.
        3. Identity and Contact Data from publicly available sources such as Companies House and the Electoral Register.
        4. We may link information available from publicly available sources to information we hold about you to create your profile.
      5. Failure to provide personal information
        If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as introducing you to clients).
    6. Why do we collect and process your data?
      1. The purposes for which we will use your personal data are as set out in the table below.
        Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
        To register you as a candidate and provide you with information relating to recruitment opportunities (a) Identity Data (b) Contact Data (c) Candidate Data Necessary for our legitimate interests (to provide our Services to you).
        To register you as a client and provide you with information relating to candidates. (a) Identity Data (b) Contact Data Performance of a contract with you.
        To introduce you to candidates or clients. (a) Identity Data (b) Contact Data (c) Candidate Data (d) Profile Data (e) Location Data (a) Performance of a contract with you; and (b) necessary for our legitimate interests (to provide our Services to you).
        To manage our relationship with you which will include: (a) notifying you about changes to our terms or privacy notice. (b) asking you to provide feedback on our services. (a) Identity Data (b) Contact Data (c) Candidate Data (d) Marketing and Communications Data (e) Profile Data (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to manage our services).
        If you voluntarily provide Special Category Data to us in communications we will process such information solely for the purpose of responding to your communications and retaining our internal records of such correspondence. Special Category Data We treat information that you provide to us voluntarily as information that you have manifestly made public.
        To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). (a) Identity Data (b) Contact Data (c) Technical Data (d) Usage Data Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
        To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you. (a) Identity Data (b) Contact Data (c) Marketing and Communications Data (d) Technical Data (f) Location Data Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy). And, where applicable, with your consent.
        To use data analytics to improve our website, products/services, marketing, customer relationships and experiences. (a) Technical Data (b) Usage Data Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).
        To make suggestions on additional services opportunities and offers you may want or need, or which may be of interest to you. (a) Identity Data (b) Contact Data (c) Technical Data (d) Candidate Data (e) Marketing and Communications Data Necessary for our legitimate interests (to develop our products/services and grow our business). And, where applicable, with your consent.
    7. Marketing
      1. You will receive marketing communications from us about similar services opportunities and offers if you have registered with us and you have not opted out of receiving that marketing.
      2. We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
      3. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
    8. Do we pass data to third parties?
      1. We share your personal information with third parties to the extent necessary to provide our Service.
        1. information about candidates is shared with recruiters as part of our Service;
        2. clients’ information is shared with candidates who may be suitable to fill a vacancy;
      2. We share your information with other third parties as follows:
        1. our professional advisors, insurance provider and auditors;
        2. HMRC or other government or law enforcement agencies;
        3. if we sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets; and
        4. if we have a legal obligation to do so.
      3. The categories of third parties listed above use your personal data for their own purposes and are responsible for their own compliance with data protection legislation.
      4. We also share your data with third-party service providers who provide services to our business, such as our CRM host server, IT support and maintenance service, cloud storage provider and email exchange server, and other businesses that provide certain services on our behalf. All of our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes.
    9. How is your data safeguarded?
      1. Protecting your data is extremely important to us. Access to your personal information is only provided to our staff and third parties who help us to process data and to recruiters or candidates in order to facilitate the recruitment process.
      2. We have put in place:
        1. appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
        2. procedures to deal with any suspected data security breach, and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
      3. Any personal information that you submit to us will be held on secure servers based within the UK or the European Economic Area (EEA). If we are required to transfer your information outside the EEA, we have put in place appropriate measures to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the EU and UK laws on data protection.
      4. If you are based outside the EEA we may transfer personal information to the correspondence address you provide to us to the extent necessary to provide you with our Services. We will take all reasonable steps to ensure that such transfers are secure. By instructing us from outside the EEA you agree that such transfer is necessary for us to provide you with our Services.
    10. How long will we keep your personal information for?
      1. Personal information is retained in accordance with the UK GDPR, which requires us to only retain data for as long as it is necessary. Once the purpose for which we hold your data has been achieved, and we do not have a legal, regulatory or business need for it, we will securely delete your data.
    11. What are your rights?
      1. You have the following rights:
        1. to be told what we are doing with your personal information, which we do by providing you with this privacy notice;
        2. to correct or update the personal information we hold about you.
        3. to object to the processing of your personal information;
        4. to request a copy of the personal information we hold about you;
        5. to ask us to delete the information that we hold about you where there is no good reason for us continuing to process it;
        6. to ask us to stop processing your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground and where there is no good reason for us continuing to process it;
        7. to ask us to restrict how we use your personal information for a period of time if you claim that it is inaccurate and we want to verify the position or in some limited other circumstances;
        8. to ask us to send your personal information to another organisation in a computer-readable format; and
        9. to complain to the Information Commissioner’s office if you are unhappy with our use of your personal data: you can do this at https://ico.org.uk/concerns/. Do contact us straight away if you consider that we are not handling your personal information properly so we can try and sort the problem out.
      2. If we delete your personal information or restrict our use of it, we will not be able to provide our Services to you.
      3. If you want to exercise any of your rights, please contact us at the address set out above. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).
    12. How do we let you know if our privacy notice changes?
      1. Cavendish may change this notice from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. If substantial changes are made, this may be promoted on our Service or through an e-mail notification.
      2. Our privacy notice was last updated in September 2021.