Privacy Policy

1. Introduction

Elite Vision Recruitment Ltd (“the Company”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data in accordance with the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the European Union General Data Protection Regulation (EU GDPR), and any other applicable data protection laws and regulations.

By engaging with our services, visiting our website at www.elitevisionrecruitment.com, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of the applicable data protection laws, the data controller is:

Elite Vision Recruitment Ltd

 86-90 Paul Street, London, EC2A 4NE, United Kingdom

Email: office@elitevisionrecruitment.com.

We operate within the United Kingdom and the European Union and comply with all applicable data protection laws governing these territories. If you have a data protection concern, please contact our designated Data Protection Lead at yankova.mira@elitevisionrecruitment.com.

3. Scope

This Privacy Policy applies to the processing of personal data relating to candidates, clients, suppliers and business partners, employees and contractors, website users, event attendees, survey participants, marketing recipients, and affiliate users. We do not knowingly collect or process personal data relating to children (under 18 years old). If you are under 18, please do not provide your personal data to us. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data promptly.

4. Categories of Personal Data Collected

We may collect and process various categories of personal data. In relation to candidates, this may include name, contact details, date of birth, employment history, educational qualifications, professional experience, references, CV, job preferences, right to work documentation, salary expectations, and any other information provided within the recruitment process. For health-related data, we will obtain explicit consent under GDPR Article 9(2)(a). For clients, this may include name, job title, business contact details, company information, and recruitment requirements. For suppliers and business partners, this may include name, contact information, company details, and payment information. For employees and contractors, this may include human resources, payroll, contractual, and compliance data, including emergency contacts and references. For website users, this may include technical information such as IP address, browser type, geographical location, and data collected through cookies and analytics. For marketing, events, surveys, and affiliate programs, this may include name, contact details, marketing preferences, feedback, and engagement data. We do not sell your personal data to third parties.

5. Sources of Personal Data

We collect personal data directly from you when you apply for a role, engage our services, complete forms on our website, participate in surveys, register for events, or communicate with us. Additionally, we may collect personal data from third-party sources, including job boards, social media platforms such as LinkedIn, business partners, suppliers, referees, and affiliates. If we obtain your data from third parties, we will notify you via email within 30 days, as required under GDPR Article 14. We may also collect data automatically through the use of cookies and analytics tools when you visit our website.

6. Purposes of Processing

Your personal data is processed for the purpose of providing recruitment and employment services and fulfilling contractual obligations, assessing suitability for employment opportunities, communicating regarding job vacancies, applications, and recruitment services, managing client, supplier, and partner relationships, complying with legal and regulatory obligations including employment and tax laws, organising and managing events, training, surveys, and partnerships, conducting business analysis, service improvement, and market research, managing website functionality, analytics, and security, delivering marketing communications where lawful, and maintaining business records and for internal administrative purposes. Candidate CV processing for job matching is based on legitimate interests under GDPR Article 6(1)(f).

7. Legal Basis for Processing

The Company relies on the following legal bases to process personal data. Processing may be necessary for the performance of a contract or to take steps prior to entering into a contract. Processing may be necessary to comply with a legal obligation. Processing may be necessary for the purposes of the Company’s legitimate interests, including but not limited to business operations, service delivery, business development, marketing, and recruitment activities. Where applicable, processing may be based on the data subject’s consent. For health-related data, we will obtain explicit consent under GDPR Article 9(2)(a).

8. Data Sharing

We may disclose personal data to third parties. Such third parties may include clients and prospective employers, subject to candidate consent, third-party service providers including IT service providers, website hosting providers, email platforms, analytics service providers, and payment processors, business partners, affiliates, and suppliers assisting in the provision of services, event and training partners, and regulatory authorities, law enforcement bodies, and public authorities where required by law. All third parties are required to process personal data in accordance with UK GDPR and EU GDPR and under contractual obligations ensuring data protection and confidentiality. If a candidate is introduced to a third party by a client and is subsequently engaged, the client remains responsible for ensuring that the candidate’s personal data is handled in compliance with this policy.

9. International Data Transfers

Personal data may be transferred to and processed in countries outside the United Kingdom and the European Union. Where such transfers occur, the Company ensures that appropriate safeguards are in place to protect the data, including Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO) or the European Commission, UK International Data Transfer Agreements (IDTAs), or adequacy decisions issued by relevant authorities. If we regularly transfer data to specific countries or use particular third-party providers (such as cloud hosting services), we will name these in our Cookie Policy or on our website for transparency.

10. Data Retention

The Company retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, contractual, and regulatory requirements. Candidate data is retained for up to two years from the date of last contact, unless otherwise required by law or consent is withdrawn earlier. Client and supplier data is retained for up to six years following the end of the business relationship. Employee and contractor data is retained for up to six years after termination of employment or contract. Website data and analytics information are retained for up to two years. Marketing, event, and survey data are retained until consent is withdrawn or up to two years. You may request the erasure of your personal data at any time, subject to any legal obligations preventing deletion. There may be circumstances where we are unable to comply with a request for erasure, restriction, or objection, for example, where we are required to retain your data for legal, regulatory, or contractual reasons, or for the establishment, exercise, or defence of legal claims.

11. Your Rights

Under the UK GDPR, EU GDPR, and applicable data protection laws, you have the right to access and obtain a copy of your personal data, the right to rectify inaccurate or incomplete personal data, the right to request erasure of your personal data (the “right to be forgotten”), the right to restrict processing of your personal data, the right to object to processing based on legitimate interests, the right to data portability in certain circumstances, the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom or an EU supervisory authority. To exercise these rights, you may contact us at office@elitevisionrecruitment.com. We will respond to all data rights requests within 30 calendar days. Please note: In certain cases, we may refuse your request if permitted by law, and we will explain the reasons for any refusal.

12. Marketing Communications

Where you have provided consent or where we have a legitimate interest, we may send you information regarding our services, events, surveys, or other marketing communications. You may opt out of receiving such communications at any time by following the unsubscribe link in our emails or by contacting us at office@elitevisionrecruitment.com. To withdraw marketing consent, click ‘Unsubscribe’ in emails or email office@elitevisionrecruitment.com.

13. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance website functionality, analyse website traffic, and provide personalised content. We may utilise third-party analytics services, including Google Analytics and affiliate tracking platforms.

Further information regarding the use of cookies is available in our Cookie Policy, accessible on our website. You may manage or disable cookies through your browser settings.

When you visit our website, you will be presented with a cookie banner or pop-up that allows you to accept or reject analytics and marketing cookies. Only strictly necessary cookies are set by default; analytics and marketing cookies require your prior opt-in consent.

You may manage or disable cookies through your browser settings.

14. Automated Decision-Making

The Company does not engage in automated decision-making without human involvement in relation to recruitment, employment, or service provision.

15. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include secure servers, encryption protocols, access controls, and staff training on data protection obligations. Where our processing is likely to result in a high risk to individuals’ rights and freedoms, we will conduct a Data Protection Impact Assessment (DPIA) as required by law. We will report eligible data breaches to the Information Commissioner’s Office within 72 hours of discovery.

16. Complaints Handling

If you have a concern or complaint regarding the processing of your personal data, please contact us first at office@elitevisionrecruitment.com. We will investigate and respond to your complaint within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or your local supervisory authority.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact Elite Vision Recruitment Ltd at 86-90 Paul Street, London, EC2A 4NE, United Kingdom, or by email at office@elitevisionrecruitment.com.

18. Changes to this Privacy Policy

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in applicable laws, regulations, or business practices. Any updates will be published on our website with the effective date clearly stated.