Innovate ERP (“we”, “us”, “our”) is a UK-based recruitment company. We are committed to protecting your personal information and handling it in a transparent, secure and lawful manner. This Privacy Policy explains how we collect, use, store and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Innovate ERP

[Add company address]

Email: [Add email]

Phone: [Add phone number]

Innovate ERP is the Data Controller for the personal information you provide.

2. Personal Data We Collect

We may collect the following personal data:

Candidate Data:

Name, address, email, phone number

CV, cover letters and employment history

Education, skills and qualifications

Right-to-work information

LinkedIn profile or social media information

Notes from interviews or calls

Salary expectations

References

Special Category (Sensitive) Data:

Collected only when necessary and with your explicit consent:

Health or disability information (for workplace adjustments)

Diversity and equal opportunities information

Criminal record information (when required by clients)

Client and Supplier Data:

Contact names and job titles

Business addresses, phone numbers, emails

Billing and payment information

Website and Technical Data:

IP address

Browser and device details

Cookies and website analytics data
 

3. How We Collect Your Data

We may collect your information through:

CV and form submissions on our website

Direct email or phone correspondence

Job board applications

LinkedIn and professional networking platforms

Referrals

Cookies and analytics

4. How We Use Your Personal Data

For Candidates:

Assessing and matching you to job opportunities

Communicating with you about vacancies

Presenting your profile to employers

Conducting compliance and right-to-work checks

For Clients:

Providing recruitment and staffing services

Managing interviews, placements and contracts

Processing invoices and payments

General Purposes:

Operating and improving our website and internal systems

Meeting legal and regulatory obligations

We do not sell your personal information.

5. Legal Bases for Processing

We process your personal data on the following lawful bases:

Legitimate Interests – providing recruitment services

Consent – particularly for processing special category data

Contractual Necessity – required to provide our services

Legal Obligation – including right-to-work checks and record-keeping

 6. Who We Share Your Data With

We may share your personal information with:

Potential employers

Background-check providers

Payroll or umbrella companies (if applicable)

CRM, IT and cloud service providers

Legal or regulatory authorities when required
We only share what is necessary to provide our services.
 

7. International Data Transfers

If your data is transferred outside the UK, we ensure appropriate safeguards are in place such as:

UK International Data Transfer Agreement (IDTA)

Standard Contractual Clauses (SCCs)

Approved adequacy decisions

8. Data Retention
We retain personal data only for as long as necessary:

Candidate data: typically 24 months from the last interaction

Client data: for the duration of the relationship plus required legal retention

Financial and transactional data: 6 years

Data is securely deleted or anonymised when no longer required.

9. Your Rights Under UK GDPR
You have the right to:

Access your personal data

Correct inaccurate information

Request deletion (“right to be forgotten”)

Restrict or object to processing

Withdraw consent at any time

Request data portability

Make a complaint to the Information Commissioner’s Office (ICO): https://ico.org.uk

To exercise these rights, contact us at: [Add email]
 

10. Cookies

We use cookies to improve website functionality, analyse traffic and enhance user experience.

You can manage cookies through your browser settings. A full Cookie Policy is provided separately or on request.

11. Data Security

We use appropriate technical and organisational measures to protect your data, including:

Secure servers and encrypted storage

Access controls

Staff training

Regular system and security reviews

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website.