Privacy Notice
Last updated: February 2026
This privacy notice tells you what to expect us to do with your personal information.
Contact details
Email: elysha@radiatehiring.com
What information we collect, use, and why
| Type of Data | What it includes | Processing Purpose |
|---|---|---|
| Identity | Name, pronouns, gender, date of birth, age, title, nationality, right to work | To deliver our services to submit and place candidates to/with employers for job roles and to communicate with our clients and candidates. |
| Contact | Email, phone number, home address, notes from meetings and interviews | To deliver our services to submit and place candidates to/with employers for job roles and to communicate with our clients and candidates. For Business Development, we collect and process business contact information such as name, job title, email address and LinkedIn profile of prospective clients for the purposes of marketing our services, sending relevant outreach emails and identifying organisations that may benefit from our recruitment services. |
| Location | Home address and working address | To identify the most suitable candidates and employers for job roles in specific locations. |
| Financial | Salary and income | To match candidates and job roles based on salary/income expectations. |
| Employment | Employer, employment history, job title, salary, references, interview feedback and assessment notes | To deliver our services to employers and ensure candidates have the relevant experience and expectations for the job role. |
| Special Category | Health information, criminal record information (where legally required), diversity monitoring information To comply with legal obligations, safeguarding requirements, or where required for specific roles. Such data will only be processed where lawful and necessary. | For special category data, we rely on explicit consent or legal obligation where applicable. |
| Usage | How you use our service and website including: clicks, internal links, pages visited, scrolling, searches and timestamps | We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity. |
| Connection | Your browser, network, and device. Web pages you visited prior to coming to this website, pages you view while on this website. Your IP address | We share this information with Squarespace, our website analytics provider. There are necessary and required cookies which are always used, which allow Squarespace, securely, to serve this website to you. There are also optional cookies which we only use when you acknowledge our cookie banner. These cookies enable analytics and performance cookies to view site traffic, activity, and other data. Squarespace processes the data in its role as website host, and to protect and improve its platform and services. Squarespace processes this data in a de-personalised form. |
| Biometric | Audio and video recordings from meetings, when recorded | For sharing information with employers or colleagues or for the purposes of recalling the conversation. Recording will only ever take place with your consent. |
| Marketing & Communication Preferences | Communication preferences and marketing information received from third parties | To market our services to you and where consent is provided to share news, updates and industry insights. |
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. Those bases are:
Contractual
In most cases, the data we collect and how we use it are necessary for us to provide our services as per our contractual obligations.
Legitimate Interest
Personal data is used to help us meet our legitimate business interests, primarily in marketing and selling our recruitment services to potential new clients and in contacting professionals regarding job opportunities that may match their skills and expertise.
Where we rely on legitimate interest for business development outreach, we process only professional business contact information relevant to your role. Communications are relevant, proportionate and limited in frequency. We may send periodic professional emails sharing insight, sector updates or introducing our services. Every communication includes a clear opportunity to opt out, and we will always honour requests to stop contact without delay.
We will always inform you where we obtained your personal data when first contacting you.
Consent
In most cases we have one of the above legal bases for processing your personal data but as good practice we will often obtain consent as an additional measure. We will obtain your consent before adding you to our newsletter subscribers list or submitting your information to an employer about a job role. We will not submit your CV or personal details to any employer without your knowledge and agreement.
Your Rights
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our role in processing personal data
Radiate Hiring Limited acts as a Data Controller in relation to personal data processed for recruitment and business development purposes.
Where we use third-party service providers such as website hosting, email, project management and marketing platforms, they process personal data on our behalf in order to provide their services to us. In certain circumstances, these providers may also act as independent Data Controllers for their own operational, security or legal purposes. Further details can be found in their respective privacy policies.
Where we get personal information from
Directly from you
Publicly available sources
Recruiter databases we are subscribed to
Previous employment
If you have been listed as a referral contact, then from the person who the referral is for
Apollo.io - a sales intelligence platform
| Type of Data | Retention Period |
|---|---|
| Data we hold for the purposes of discussing or submitting you for a job role | 2 years |
| Data we hold for the purposes of marketing and delivering our services to you as an employer / client | 6 years |
| Data we hold about you to provide a referral for somebody else | 6 years |
| Data we hold about your use of our website (by Squarespace) | See Squarespace’s policy here: https://www.squarespace.com/privacy |
At the end of the applicable retention period, personal data is securely deleted or anonymised unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.
Who we share information with
In order to deliver our services, we need to share your information with third parties. These include:
Employers / clients who we are recruiting for.
Squarespace who hosts our website who use their own third-parties; To properly display our website to you, Google Fonts and Adobe Fonts may receive personal information about you including:
Information about your browser, network, or device.
Information about this site and the page you’re viewing on it.
Your IP address.
Google where we store the majority of our data.
Calendly in the event you have booked a meeting with us via Calendly (they act as a Data Processor and their policy can be found here).
Granola in the event you consent to a meeting being recorded or transcribed. Granola acts as a data processor on our behalf and converts audio or video recordings into written transcripts to support accurate note taking and follow up (you can view Granola’s privacy policy here: here).
Docusign in the event we enter into a contractual agreement together (you can see their policy here)
Trello - a project management platform provided by Atlassian, to manage recruitment workflows and internal task tracking. This may include candidate names, job titles, employer names, and limited recruitment-related notes necessary to manage recruitment processes. Trello acts as a Data Processor on our behalf and processes personal data in accordance with our instructions. (You can view Atlassian’s privacy policy here).
Attio – a customer relationship management (CRM) platform used to manage client and candidate relationships. Where integrated with our email and calendar systems, Attio may process contact details, communication history, email metadata and meeting information. Attio acts as a Data Processor on our behalf and processes personal data in accordance with our instructions. (You can view Attio’s privacy policy here).
GMass – an email outreach and sequencing tool that integrates with our Google Workspace account. GMass is used to send and manage professional communications with prospective clients, candidates and contacts. Where integrated with our Google Workspace account, GMass may process personal data including names, email addresses, job titles, communication history and related metadata in order to send emails, manage follow-ups and monitor engagement. GMass may also access limited data within our Gmail and Google Drive accounts strictly for the purposes of enabling email sending, mail merge functionality and tracking communication activity. GMass acts as a Data Processor on our behalf and processes personal data in accordance with our instructions and applicable data protection laws. (You can view GMass’s privacy policy here).
Mailchimp in the event you are subscribed to a newsletter or to receive marketing emails your data will be processed by Mailchimp (you can see their policy here). We use Mailchimp to send out newsletters and updates, and your personal information will be used for this purpose only. You can unsubscribe at any time by clicking the 'unsubscribe' link in any of our emails or by contacting us.
Apollo.io in the event we are marketing our services to you to source and verify professional contact details (such as business email addresses) for prospective clients. Apollo acts as a data processor on our behalf and processes only publicly available or business-related information in accordance with data protection laws (you can see their privacy policy here).
International Data Transfers
Some of our service providers may process personal data outside the UK or EEA. Where this occurs, transfers are subject to appropriate safeguards such as UK-approved Standard Contractual Clauses, the UK Extension to the EU-US Data Privacy Framework, adequacy regulations, or other recognised transfer mechanisms to ensure an equivalent level of data protection.
In most cases, personal data is processed and stored within the UK or the EEA. Where data is transferred or accessed outside these regions, we rely on our service providers’ contractual and regulatory safeguards in accordance with applicable data protection laws.
We also implement appropriate technical and organisational measures to protect personal data, including access controls, secure cloud-based systems, and multi-factor authentication where available.
How we keep your data safe
We use secure, cloud-based systems with password protection and multi-factor authentication where available. Access to personal data is restricted to authorised personnel only and limited to what is necessary for recruitment and business purposes. We regularly review our systems and processes to maintain appropriate technical and organisational security measures.
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113