Privacy Policy

Last Updated: October 29, 2025

1. Who We Are

Company Name: Retrofit Talent

Data Controller: Retrofit Talent is the data controller responsible for your personal information.

We specialize in retrofit recruitment, connecting skilled professionals with ECO4, SHDF, GBIS, and PAS 2035 projects across the UK.

2. Information We Collect

We collect and process the following types of personal information:

2.1 Information You Provide to Us

• Contact Information: Name, email address, phone number, postal address
• Professional Information: CV/resume, work history, qualifications, certifications (e.g., PAS 2035, Elmhurst, Stroma)
• Employment Details: Current employment status, salary expectations, availability
• Company Information: For employers - company name, position, recruitment needs
• Communication Records: Emails, phone calls, messages, and other correspondence

2.2 Information We Collect Automatically

• Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages
• Cookies and Tracking Technologies: See our Cookie Policy below for details
• Analytics Data: How you interact with our website and services

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Recruitment Services

• Matching job seekers with suitable retrofit positions
• Presenting candidate profiles to potential employers
• Facilitating interviews and employment arrangements
• Verifying qualifications and work history

3.2 Communication

• Responding to your inquiries and requests
• Sending job alerts and opportunities
• Providing updates about our services
• Marketing communications (with your consent)

3.3 Website Improvement

• Analyzing website performance and user behavior
• Improving our services and user experience
• Troubleshooting technical issues

3.4 Legal Compliance

• Complying with legal obligations
• Preventing fraud and ensuring security
• Protecting our legal rights

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To fulfill our recruitment services and contractual obligations
• Legitimate Interests: For business operations, improving services, and marketing (where not overridden by your rights)
• Legal Obligation: To comply with UK employment and data protection laws

5. How We Share Your Information

We may share your personal information with:

5.1 Employers and Clients

With your consent, we share your CV and professional information with potential employers seeking to fill retrofit positions.

5.2 Service Providers

We work with trusted third-party service providers who assist us with:

• Website hosting and maintenance
• Email communication services
• Analytics and performance monitoring
• Payment processing (if applicable)

5.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our legal rights.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Active Candidates: While you are actively seeking employment through our services
• Inactive Candidates: Up to 2 years after your last interaction with us
• Employer Records: For the duration of our business relationship plus 6 years for legal compliance
• Website Analytics: Up to 26 months

You can request deletion of your data at any time by contacting us.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

1. Right to Access: Request a copy of the personal data we hold about you
2. Right to Rectification: Request correction of inaccurate or incomplete data
3. Right to Erasure: Request deletion of your personal data ("right to be forgotten")
4. Right to Restrict Processing: Request limitation of how we use your data
5. Right to Data Portability: Receive your data in a structured, commonly used format
6. Right to Object: Object to processing based on legitimate interests or direct marketing
7. Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
8. Right to Lodge a Complaint: Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

8. Cookie Policy

Our website uses cookies to enhance your browsing experience and analyze website performance.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., cookie consent preferences)
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity to deliver relevant advertisements (only with your consent)

8.3 Managing Cookies

You can control and manage cookies through our cookie consent banner and your browser settings. Disabling certain cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

• Unauthorized access or disclosure
• Accidental loss or destruction
• Malicious attacks and cyber threats

Security measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure
• Regular security audits and updates
• Access controls and authentication
• Staff training on data protection

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification (for material changes)

We encourage you to review this policy periodically.

14. Contact Us

15. Complaints to the ICO

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:

---

Thank you for trusting Retrofit Talent with your personal information.
We are committed to protecting your privacy and handling your data responsibly.