Privacy policy.
Last updated: October 2025
Summary of this privacy policy
- N2 Talent Ltd is the data controller for all personal information we collect and process.
- We only collect information necessary to deliver our recruitment and search services - such as CVs, contact details, and work eligibility.
- We process personal data lawfully under the UK GDPR and Data Protection Act 2018, relying on consent, legitimate interest, or contractual necessity.
- Your data is stored securely within the UK/EEA and only shared with trusted service providers or clients where you have given explicit consent.
- You can request access, correction, or deletion of your data at any time by emailing dpo@n2talent.com.
- We never sell or rent your information to third parties and review all data held every 12-24 months.
Our commitment to your privacy
At N2 Talent Ltd (“N2 Talent”, “we”, “our”, or “us”), we are committed to protecting your privacy and maintaining the integrity of your personal data. It's our legal and ethical responsibility to keep your information safe, secure, and accessible to you.
This policy explains how we collect, use, store, and share your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also outlines your rights and how to exercise them.
We are not responsible for the content or privacy practices of external websites linked from N2 Talent.
About us
Data Controller: N2 Talent Ltd
Registered in England and Wales (No. 5204858)
Registered Office: BioCity, Pennyfoot Street, Nottingham, NG1 1GF
ICO Registration Reference: Z8960655
If you have questions about this policy or wish to exercise your data rights, please contact our Data Protection Officer: dpo@n2talent.com or +44 (0)7961 226719
What personal data we collect
Jobseekers
1. Sourcing candidates
As part of our recruitment activities, we use freely and lawfully available public information to identify potential candidates — such as professional profiles on LinkedIn, company websites, conference delegate lists, and other publicly accessible professional sources.
With your explicit permission, we may also store personal information such as CVs, contact details, and recruitment-related notes in our secure CRM/ATS database.
2. Applying online
When you apply for a job via N2 Talent, we collect:
- Your name
- Your email address
- Your work eligibility
- Your CV/résumé
- Your IP address
Applications are securely stored in our systems for 12 months. Before this period expires, we will contact you to confirm whether you wish us to retain your details for future opportunities, in line with UK GDPR guidance.
3. Direct submission
When you directly register your details with N2 Talent, we initially collect:
- Your name
- Your email address
- Your CV/résumé
- Your IP address
We retain your data while your account remains active. You may request to amend, export, or delete your data at any time and we will ensure this has been completed within 2 working days.
4. Job alerts
To send job alerts, we collect:
- Your email address
- Your IP address
You must confirm your subscription via email before alerts are activated. Unsubscribing or deleting your alerts will immediately stop all future notifications.
Please note: We never forward your personal details to any third party (e.g. a prospective employer) unless we have your specific consent. This does not apply if you contact or apply to an employer directly via our website.
Employers
When an employer creates an account, we collect:
- Your name
- Your company name
- Your work email address
- Your IP address
Our lawful basis for processing your data
- Contractual necessity: to deliver recruitment and related services.
- Legitimate interests: to operate and improve our platform and match candidates with employers, provided these interests do not override your rights.
- Consent: where you have opted into communications or provided permission for us to store personal information (e.g. CV, contact details, or recruiter notes).
- Legal obligation: where we must retain certain records for compliance or accounting purposes.
Where we collect publicly available professional information, we do so under our legitimate interest in identifying and contacting potential candidates for suitable roles, while respecting your privacy rights and professional expectations.
How we use your information
- Process job applications and match candidates with vacancies
- Identify and contact potential candidates from public professional sources
- Manage your online account and preferences
- Communicate with you about relevant opportunities or services
- Manage client and supplier relationships
- Improve our services through analytics and feedback
- Meet legal and accounting requirements
We do not sell or rent your data to third parties.
Third-party processors and systems we use
We work with trusted third-party service providers who process data on our behalf under strict contractual terms that comply with UK GDPR.
| Purpose | Provider | Data Location / Safeguard |
|---|---|---|
| Website hosting | SiteGround | EU data centres – GDPR compliant |
| Candidate and client data management (ATS/CRM) | Atlas | Hosted within the EEA – GDPR compliant |
| Email and document storage | Google Workspace | UK/EU data centres with Standard Contractual Clauses for global access |
| Meeting transcription (AI notetaker) | Quil AI | Data processed securely in compliance with UK GDPR; used only for authorised meetings |
| Website analytics | Google Analytics | Data pseudonymised; opt-out available |
| Accounting and invoicing | FreeAgent | Processed in accordance with UK data protection law |
We only share personal data with these processors as necessary to provide our services, and never for marketing by third parties.
International data transfers
Your data is primarily stored within the UK or EEA. If we transfer data outside these regions (for example, to Google or other processors), we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or EU Standard Contractual Clauses (SCCs).
Cookies
Like most websites, we use cookies — small text files stored in your browser — to improve your experience.
Types of cookies we use
- Essential cookies: required for site functionality (e.g. staying logged in).
- Analytics cookies: used to understand how visitors use our site (via Google Analytics).
- Personalisation cookies: help tailor content such as saved jobs or job alerts.
When you first visit our site, we will ask for your consent to use non-essential cookies. You can manage or withdraw your consent at any time via your browser settings or our cookie banner. Analytics data is retained for up to 14 months.
You can opt out of Google Analytics tracking at any time by visiting: https://tools.google.com/dlpage/gaoptout/.
Security
- SSL encryption (HTTPS) on all data transfers
- Passwords stored in a highly encrypted format
- Secure hosting via GDPR-compliant providers based within the EEA
- Access controls and user authentication for all systems
How long we keep your data
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. If you delete your account or request erasure, we remove your data promptly. Backup systems may retain deleted data for up to 30 days before secure overwrite.
| Type of data | Typical retention period | Why we keep it |
|---|---|---|
| Active candidates | While we're working with you | To manage ongoing applications |
| Unsuccessful applicants | 12-24 months | To consider you for future opportunities |
| Inactive candidates | Up to 24 months of inactivity | To keep data current and relevant |
| Placed candidates | Up to 6 years | To meet legal and contractual obligations |
| Clients and placements | 6 years after last transaction | Required by law and for record keeping |
| Prospective clients | 2 years from last contact | For legitimate business development |
| Job alerts / marketing subscribers | Until you unsubscribe or withdraw consent | Based on your consent |
Your rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Access – request a copy of your data
- Rectification – correct inaccurate information
- Erasure – request deletion of your data (“right to be forgotten”)
- Restriction – limit how we process your data
- Portability – request transfer of your data to another provider
- Objection – object to processing, including direct marketing
- Withdraw consent – where we rely on consent (e.g. job alerts or CV storage)
You are not required to pay any fee to exercise your rights. We aim to respond to all legitimate requests within one month (we usually respond within 2 working days).
To exercise any of these rights, contact dpo@n2talent.com. If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at: https://www.ico.org.uk.
Changes to this policy
We review this policy regularly and may update it in line with legal or business requirements. Any changes will be published on our website. Please check the "last updated" date at the top of this page for the latest version.
If you require further information, please contact us
What are your hiring challenges?
We'll listen, advise, and help you plan the next steps. No obligation.
Find your next opportunity
Tell us what you're looking for and we'll match you to relevant opportunities