Privacy Policy

Greenfield IT take the privacy of your data very seriously

Recruitment Privacy Notice (Updated 2026)

Greenfield Recruitment Ltd (“we”, “us” or “our”) is committed to protecting your personal data and being transparent about how we use it.

This privacy notice explains how we collect, use, store and share your personal data in line with UK data protection law, including the UK GDPR and Data Protection Act 2018.

Who we are

Greenfield Recruitment Ltd
Unit 4 Sweetlake Court, Shrewsbury, Shropshire, SY3 9GE

We act as both:

  • a recruitment agency (introducing candidates to clients), and
  • a recruitment business (supplying contractors)

For data protection purposes, we are the data controller.

Contact: [email protected]

What data we collect

We collect and process personal data about:

  • Candidates (prospective and placed)
  • Client contacts
  • Suppliers and business contacts

Candidate data may include:

  • Name, contact details (email, phone, address)
  • CV / employment history / qualifications
  • Salary expectations and availability
  • Right-to-work documentation
  • Interview notes and feedback
  • Links to professional profiles (e.g. LinkedIn)

How we collect your data

We collect data in the following ways:

  • Directly from you (applications, CVs, conversations)
  • From publicly available sources (e.g. LinkedIn, job boards)
  • From referrals or recommendations
  • From clients or third parties involved in recruitment

Where we obtain your data from a third-party source, we will contact you to explain how we obtained it and how we intend to use it.

How we use your data

We use your personal data to:

  • Match you to relevant job opportunities
  • Introduce you to clients
  • Arrange interviews and manage recruitment processes
  • Support your ongoing career opportunities
  • Maintain a talent pool of relevant candidates
  • Communicate with you about roles and market opportunities
  • Meet our legal and compliance obligations

We aim to only contact you about roles that are relevant to your experience and interests.

Our legal basis

We process your personal data under the following legal bases:

Legitimate interests (primary basis)

We rely on legitimate interests to:

  • source and identify candidates
  • match candidates to roles
  • maintain a candidate database / talent pool
  • support client hiring needs

We ensure our use of your data is proportionate and does not override your rights.

Contract

Where we are progressing you for a role or placing you in a position.

Legal obligations

For example, right-to-work checks or compliance requirements.

Consent (where required)

We may rely on consent for specific activities (e.g. certain marketing communications). You can withdraw this at any time.

How long we keep your data (important)

We retain personal data only as long as necessary for recruitment purposes.

For candidates:

  • We typically retain your data for up to 24 months from our last meaningful interaction with you
  • During this time, we may contact you periodically to:
    • check your details are up to date
    • confirm your interest in opportunities

If we have no engagement with you during this period, we may:

  • delete your personal data, or
  • anonymise it for reporting purposes

You can request deletion of your data at any time.

Keeping your data up to date

We take steps to ensure your data is accurate by:

  • checking details before submitting you to clients
  • periodically reviewing our database
  • giving you opportunities to update or correct your information

Who we share your data with

We may share your data with:

  • Clients (for the purpose of recruitment)
  • Service providers (e.g. CRM systems, IT providers)
  • Compliance partners (e.g. background check providers, where required)
  • Professional advisers

We only share relevant information necessary for the recruitment process.

We do not sell your personal data.

International transfers

Where necessary, your data may be processed outside the UK.
In such cases, we ensure appropriate safeguards are in place (e.g. standard contractual clauses).

Automated decision-making

We do not make decisions about you based solely on automated processing.
All recruitment decisions involve human review.

Your rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Request restriction of processing
  • Request transfer of your data
  • Withdraw consent (where applicable)

To exercise your rights, contact: [email protected]

If you are not satisfied, you can complain to the
Information Commissioner’s Office (ICO): www.ico.org.uk

How we contact you

We may contact you via:

  • email
  • phone
  • LinkedIn or other professional platforms

We aim to ensure all communications are relevant to your experience and interests.
You can opt out at any time.

Cookies and website tracking

Our website uses cookies and similar technologies to:

  • improve user experience
  • analyse website usage
  • support marketing activities

You can control cookie preferences via your browser or our cookie settings.

Changes to this notice

We may update this privacy notice from time to time.
The latest version will always be available on our website.