Privacy Policy
How we collect, use, and protect your personal data — your privacy rights under UK law.
Last updated: June 13, 2026
Cyrus Recruitment Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://cyrusrecruitment.co.uk (the “Site”) or use our recruitment services. It also tells you about your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it. By using our Site or providing us with your personal information, you agree to the terms of this Privacy Policy.
1. Who we are
Cyrus Recruitment Ltd is a recruitment agency specialising in warehousing, logistics, and supply chain staffing. For the purposes of data protection law, we are the “data controller” of the personal information you provide to us (unless otherwise stated).
Registered address: 1st Floor, The Grange, 100 High Street, Leeds, LS1 4BX, United Kingdom
Company number: 15366624 (England & Wales)
Data Protection Officer: Elena Marchetti – dpo@cyrusrecruitment.co.uk
2. Information we may collect from you
We may collect and process the following categories of personal data:
- Identity Data: Full name, date of birth, gender, national insurance number, passport or driving licence details.
- Contact Data: Email address, telephone numbers, postal address.
- Employment & Professional Data: CV, work history, qualifications, skills, references, right to work status, salary expectations, and any other information you provide in job applications.
- Compliance Data: DBS check results, drug & alcohol test results (where permitted by law), MHE licence verification, health & safety certifications.
- Technical Data: IP address, browser type and version, time zone setting, operating system, and platform – collected via cookies when you use our Site.
- Usage Data: Information about how you use our website, including pages visited, time spent, and referral sources.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication choices.
3. How we collect your personal data
We use different methods to collect data from and about you:
- Direct interactions: You may give us your identity, contact, and employment data by filling in forms on our Site, submitting your CV, corresponding with us by phone, email, or otherwise.
- Third parties or publicly available sources: We may receive personal data about you from job boards, social media (e.g., LinkedIn), referees, background check providers, or former employers (with your consent where required).
- Automated technologies: As you interact with our Site, we may automatically collect technical data about your equipment and browsing actions through cookies and similar technologies.
4. How we use your personal data & legal basis
We will only use your personal data when the law allows us to. Most commonly, we rely on the following lawful bases:
- Contractual necessity: To perform a contract with you (e.g., providing recruitment services, processing your job application, or placing you in a role).
- Legal obligation: To comply with legal requirements (e.g., right to work checks, health & safety reporting).
- Legitimate interests: For our legitimate business interests, such as improving our services, preventing fraud, and network security – provided your interests and fundamental rights do not override those interests.
- Consent: Where you have given explicit consent for a specific purpose (e.g., receiving marketing emails or storing your CV for future roles). You may withdraw consent at any time.
Special category data: We may process sensitive data (e.g., health information, DBS checks, criminal records) only where necessary for compliance with employment law or with your explicit consent. You will always be informed when such data is required.
5. Purposes for which we use your data
We use your personal data for the following purposes:
- To match your skills and experience with suitable job opportunities and refer you to potential employers.
- To manage our recruitment and placement process, including verifying your right to work, conducting compliance checks, and obtaining references.
- To communicate with you regarding job placements, applications, and service updates.
- To improve our website, services, and customer experience.
- To comply with legal and regulatory obligations (e.g., HMRC, employment tribunals, industry audits).
- To send you marketing communications about our services or relevant opportunities, only where you have opted in.
6. Disclosure of your personal data
We may share your personal data with the following categories of recipients, only as necessary for the purposes described above:
- Clients (potential employers): We will share your CV and relevant information with prospective employers only when we have your consent or where it is necessary to progress your application.
- Service providers: Third parties who provide IT services, background check providers, DBS processing, or compliance verification – under strict confidentiality agreements.
- Professional advisors: Including lawyers, auditors, and insurers where necessary to protect our legal rights.
- Regulatory authorities: Such as HMRC, the Information Commissioner’s Office (ICO), or law enforcement agencies if required by law.
We do not sell, rent, or trade your personal data with third parties for marketing purposes.
7. International transfers
We generally store and process your personal data within the United Kingdom and European Economic Area (EEA). Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner, to protect your data.
8. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Our retention periods:
- Candidate data: We keep your CV and application data for up to 3 years after your last active interaction, unless you ask us to delete it earlier. We may retain limited data for longer to comply with legal obligations (e.g., right to work records for 2 years after employment ends).
- Client data: Business contact details and contract records are retained for 7 years after the end of our relationship for legal compliance.
- Website usage data: Up to 26 months for analytical purposes (via anonymised Google Analytics).
9. Your data protection rights
Under UK data protection law, you have the following rights:
- Right to access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”): You can ask us to delete your personal data where there is no compelling reason for us to keep it.
- Right to restrict processing: You can ask us to suspend the processing of your data in certain circumstances.
- Right to data portability: You can request a copy of your data in a structured, machine-readable format.
- Right to object: You can object to processing based on legitimate interests (including direct marketing).
- Rights related to automated decision-making: We do not use automated decision-making or profiling that has legal or significant effects on you.
To exercise any of these rights, please contact our Data Protection Officer at dpo@cyrusrecruitment.co.uk. You will not have to pay a fee to exercise your rights, but we may charge a reasonable fee if your request is clearly unfounded or excessive. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your data: https://ico.org.uk (0303 123 1113).
10. Cookies and tracking technologies
Our website uses essential cookies for functionality and analytical cookies (e.g., Google Analytics) to understand how visitors use our Site. You can manage your cookie preferences through your browser settings. For more detailed information, see our Cookie Policy (available on request).
11. Security of your data
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include encryption of data in transit (SSL), restricted access to databases, and regular security reviews. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.
12. Third-party links
Our Site may contain links to third-party websites (e.g., job boards, social media). Please note that once you leave our Site, we have no control over that other website’s privacy practices. This Privacy Policy does not apply to those external sites, and we encourage you to read their privacy policies.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated “last updated” date. Where changes are material, we will notify you by email or via a prominent notice on our Site. Your continued use of the Site after such changes constitutes acceptance of the revised policy.
14. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Cyrus Recruitment Ltd
Data Protection Officer: Elena Marchetti
Email: dpo@cyrusrecruitment.co.uk
General enquiries: info@cyrusrecruitment.co.uk
Postal address: 1st Floor, The Grange, 100 High Street, Leeds, LS1 4BX, United Kingdom
We aim to respond to any privacy-related concerns within 5 business days.
Back to previous page