Candidate Privacy Policy

Last Updated: 08 May, 2026

Compliant Labs Recruitment Ltd ("Compliant Labs", "we", "us", or "our") is committed to protecting the privacy and security of personal information belonging to job applicants and candidates.

This Candidate Privacy Notice explains how we collect, use, store, and protect your personal data when you engage with us as part of our recruitment services.

This notice applies to all individuals who apply for roles through Compliant Labs or who we contact regarding potential employment opportunities.

1. Who We Are

Compliant Labs Recruitment Ltd is a recruitment consultancy specialising in roles within PayTech, FinTech, RegTech and other regulated technology sectors.

For the purposes of data protection legislation, Compliant Labs is the Data Controller of your personal data.

If you have any questions about this privacy notice or how your data is handled, please contact:

Abbey Studios 41-43 Liverpool Road, Manchester, M44 5BQ, United Kingdom
Email: contact@compliantlabs.com

2. The Personal Data We Collect

During the recruitment process we may collect and process the following types of personal data:

  • Identity Information
  • Full name
  • Title
  • Date of birth (where relevant)
  • Contact Information
  • Email address
  • Telephone number
  • Home address
  • LinkedIn profile or professional website
  • Professional Information
  • Curriculum vitae (CV)
  • Employment history
  • Education and qualifications
  • Skills and professional certifications
  • References and referee contact details
  • Recruitment Process Information
  • Interview notes
  • feedback from clients
  • salary expectations
  • job preferences and career interests
  • Publicly Available Information

In some cases we may collect information from publicly available sources such as:

  • LinkedIn
  • Professional networking platforms
  • Company websites

We do not intentionally collect sensitive personal data unless it is necessary for the recruitment process and legally permitted.

3. How We Collect Your Data

Your personal data may be collected in several ways including:

  • Directly from you when you submit a CV or application
  • When you contact us regarding job opportunities
  • When you interact with our website or recruitment platforms
  • From publicly available professional sources such as LinkedIn
  • From referrals or recommendations

4. How We Use Your Personal Data

We process candidate data in order to provide recruitment services.

This may include:

Recruitment Services

  • Assessing your suitability for roles
  • Matching you with relevant job opportunities
  • Submitting your profile to potential employers
  • Arranging interviews and managing the hiring process

Communication

  • Contacting you regarding job opportunities
  • Providing updates on recruitment processes
  • Sharing feedback from employers

Business Operations

  • Maintaining candidate records
  • Improving our recruitment services
  • Managing our internal recruitment systems

We will only submit your profile to an employer with your consent.

5. Legal Basis for Processing

Under UK GDPR we rely on the following lawful bases to process your personal data:

Legitimate Interests

To operate our recruitment services and connect candidates with employers.

Consent

Where required, such as when sharing your profile with clients or contacting you about specific opportunities.

Legal Obligations

Where we must process information to comply with legal requirements.

6. Sharing Your Data

Your personal data may be shared with:

  • Potential employers considering you for a role
  • Recruitment technology platforms used by Compliant Labs
  • Professional advisers such as legal or compliance partners
  • Regulatory authorities where required by law

We do not sell or rent candidate data to third parties.

7. Data Storage and Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

Candidate data may be stored in secure recruitment platforms, databases, and internal systems used by Compliant Labs.

Access to candidate data is restricted to authorised personnel involved in recruitment activities.

8. Data Retention

We retain candidate data for as long as it is reasonably necessary to provide recruitment services.

Typically, candidate information will be stored for up to 24 months from the date of last contact unless you request earlier deletion.

After this period, data may be securely deleted or anonymised.

9. Your Data Protection Rights

Under UK data protection law you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing activities
  • Request transfer of your data to another organisation where applicable

Requests can be made by contacting us using the details below.

10. International Data Transfers

Some of our service providers may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place to protect your personal data in accordance with UK data protection law.

11. Updates to This Notice

We may update this Candidate Privacy Notice from time to time to reflect legal or operational changes.

The latest version will always be available upon request or on our website.

12. Contact Us

If you have any questions about this notice or how we handle your personal data, please contact:

Compliant Labs Recruitment Ltd
Abbey Studios 41-43 Liverpool Road, Manchester, M44 5BQ, United Kingdom
Email: contact@compliantlabs.com