Privacy Policy
Recruitment Direct UK Ltd
Last updated: 10 February 2026
Recruitment Direct UK Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website, apply for work, engage our recruitment services, or otherwise interact with us.
Recruitment Direct UK Ltd acts as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Recruitment Direct UK Ltd
Herkimer House
Mill Road Industrial Estate
Linlithgow
EH49 7SF
United Kingdom
Email: steven@rd1.co.uk
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data (name, date of birth)
- Contact data (address, email address, telephone number)
- Employment and recruitment data (CVs, work history, qualifications, references)
- Right-to-work documentation
- Payroll and payment details
- Communications (emails, messages, call recordings)
- Website usage data (via cookies – see Cookie Policy)
- Special category data where required (e.g. health information, equal opportunities data)
We only collect personal data that is relevant and necessary for recruitment and related services.
3. How We Use Your Personal Data
We process personal data for the purposes of:
- Providing recruitment and work-finding services
- Assessing suitability for job opportunities
- Communicating with candidates and clients
- Managing placements, payroll, and compliance
- Maintaining accurate records
- Improving our services
- Complying with legal and regulatory obligations
AI-Assisted Processing
We use automated and AI-assisted systems to support activities such as call handling, communications, record-keeping, compliance checks, and administrative processing. These systems operate under human oversight and do not make recruitment or employment decisions independently.
You have the right to request human review of any processing involving automated systems.
4. Lawful Basis for Processing
We process personal data under one or more of the following lawful bases:
- Consent – where you have given clear permission
- Contractual necessity – to fulfil recruitment or employment obligations
- Legal obligation – to comply with laws and regulations
- Legitimate interests – where processing is necessary for our business operations and does not override your rights
5. Legitimate Interests
Our legitimate interests include:
- Efficient recruitment and workforce management
- Client relationship management
- Business development
- Fraud prevention and security
- Quality assurance and compliance
- Communicating relevant opportunities and updates
We balance our legitimate interests against your rights and expectations.
6. Who We Share Data With
We may share personal data with:
- Clients / potential employers for recruitment purposes
- Payroll and compliance providers
- IT and communications service providers
- Regulatory and legal authorities where required by law
All third parties are required to process data securely and in accordance with data protection legislation.
7. Data Retention
Personal data is retained only for as long as necessary and in line with our Data Retention Policy.
- Candidate data: typically up to 2 years
- Work-seeker records: minimum 1 year (Conduct Regulations)
- Payroll and financial records: 6 years
- Call recordings and AI-assisted system data: automatically deleted in line with configured retention rules unless legal retention is required
Further details are available in our Data Retention Policy.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data, including access controls, secure storage, and monitored systems. Access to data is limited to authorised personnel only.
9. Your Rights
Under UK GDPR, you have the right to:
- Be informed about how your data is used
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure in certain circumstances
- Restrict processing
- Object to processing based on legitimate interests
- Request data portability where applicable
- Not be subject to decisions based solely on automated processing
- Withdraw consent at any time
Requests can be made by contacting us using the details below.
10. Cookies
Our website uses cookies to ensure functionality and analyse usage. For full details, please see our Cookie Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be available on our website.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Steven Peddie
Director
📧 steven@rd1.co.uk
