GDPR Policy

2fawcett Recruitment

Effective Date: January 2026

1. Purpose of This Policy

2fawcett Recruitment is committed to protecting the privacy and personal data of all individuals whose information we process. This GDPR Policy outlines how we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all personal data processed through the 2fawcett Recruitment website and associated recruitment activities.

2. Data Controller

2fawcett Recruitment acts as the Data Controller for all personal data collected and processed.

Organisation: 2fawcett Recruitment
Email: hello@2fawcett.com
Registered Address: 215 Valley Road, Nottingham

3. Scope of Personal Data

We may process personal data relating to:

1. Job candidates
2. Clients and hiring managers
3. Website visitors
4. Suppliers and business contacts

Personal data may include (but is not limited to):

1. Names, contact details, and CVs
2. Employment history, qualifications, and skills
3. Salary expectations and role preferences
4. Right-to-work information
5. Communications and correspondence
6. Website usage data and IP addresses

4. Lawful Basis for Processing

We process personal data only where there is a lawful basis, including:

1. Consent – where explicitly provided
2. Contractual necessity – to take steps prior to entering into a contract
3. Legitimate interests – for recruitment, business operations, and service delivery
4. Legal obligations – including employment and regulatory compliance

5. Data Collection Methods

Personal data is collected via:

1. Website forms and CV uploads
2. Email, telephone, and direct communication
3. Referrals and professional networking
4. Cookies and website analytics tools

6. Use of ITRIS CRM

2fawcett Recruitment uses ITRIS, a specialist recruitment CRM system, to store and manage personal data.

1. ITRIS acts as a Data Processor
2. Data is processed only on documented instructions from 2fawcett Recruitment
3. Access is restricted to authorised personnel
4. Appropriate technical and organisational security measures are in place

A data processing agreement is maintained with ITRIS in accordance with UK GDPR requirements.

7. Data Sharing

Personal data may be shared with:

1. Prospective employers or clients (with candidate knowledge or consent)
2. Third-party service providers supporting business operations (e.g. CRM, IT systems)
3. Regulatory or legal authorities where required by law

We do not sell personal data or share it for unrelated third-party marketing.

8. Data Retention

We retain personal data only for as long as necessary for recruitment and legal purposes.

Typical retention periods:

1. Candidate data: up to 24 months from last meaningful contact
2. Client data: for the duration of the business relationship and a reasonable period thereafter

Data is securely deleted or anonymised when no longer required.

9. Data Subject Rights

Under UK GDPR, individuals have the right to:

1. Access their personal data
2. Rectify inaccurate or incomplete data
3. Request erasure of personal data
4. Restrict or object to processing
5. Request data portability
6. Withdraw consent at any time
7. Lodge a complaint with the Information Commissioner’s Office (ICO)

Requests can be made by contacting: hello@2fawcett.com

10. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

1. Secure systems and encrypted storage
2. Restricted access controls
3. Regular review of data handling procedures
4. Staff awareness of data protection responsibilities

11. Data Breach Management

In the event of a personal data breach:

1. The breach will be assessed without undue delay
2. Where required, the ICO will be notified within 72 hours
3. Affected individuals will be informed where there is a high risk to their rights and freedoms

12. International Data Transfers

If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

13. Cookies and Website Data

Our website uses cookies to improve user experience and analyse site performance.
Users can manage cookie preferences through browser settings or any cookie consent tool in use.

14. Policy Review

This GDPR Policy is reviewed regularly and updated as necessary to ensure ongoing compliance.

The most current version will always be available on the 2fawcett Recruitment website.

15. Contact Information

For any GDPR-related queries or requests, please contact:

2fawcett Recruitment
Email: hello@2fawcett.com