Thrive Work Recruitment Ltd — Privacy Policy

Last updated: 17th November 2025

Thrive Work Recruitment Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in a transparent, secure and lawful way.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, register as a candidate, hire talent through us, or engage with our services.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all relevant privacy legislation.

1. Who We Are

Thrive Work Recruitment Ltd
Registered in England and Wales
Company Number: 16852123
Registered Office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF
Email: enquiries@thriveworkagency.com

We act as a data controller when processing candidate and client information for recruitment purposes.

2. What Personal Data We Collect

A. From Candidates

We may collect:

  • Name, address, email address, phone number

  • CV, work history, skills and qualifications

  • Job preferences (salary, location, type of role, working pattern)

  • Interview notes and pre-screening information

  • Right to work documentation

  • Optional information related to workplace adjustments or flexible working needs

  • Any information voluntarily shared with us (e.g. during calls, emails, application forms)

Health & wellbeing information
We do not collect health information unless:

  • You choose to disclose it voluntarily, and

  • It is relevant to identifying suitable flexible or remote roles, or workplace adjustments.

Where we process information that relates to your health or wellbeing, we will always rely on an appropriate lawful basis and, where required, your explicit consent, and we will treat it as special category data with additional safeguards.

B. From Employers / Clients

We may collect:

  • Business name, address and contact details

  • Contact person’s name, job title and contact information

  • Hiring requirements and role specifications

  • Communications, meeting notes and contract details

  • Billing and payment information

C. From Website Visitors

We may collect:

  • IP address, device data and cookies

  • Form submissions (e.g. contact forms, registration forms)

  • Website usage analytics

(See our Cookie Policy for more detail.)

3. How We Use Your Personal Data

A. For Candidates

We process your data to:

  • Match you with suitable job opportunities

  • Share relevant roles and updates with you

  • Send your profile/CV to employers (with your consent)

  • Support you through the hiring process (applications, interviews, offers)

  • Verify your right to work where required

  • Maintain communication during and after placement

  • Provide optional wellbeing support as our services expand (e.g. signposting or access to benefits where available)

  • Keep internal records of placements and performance of our services

B. For Employers / Clients

We use client data to:

  • Provide recruitment and talent-matching services

  • Identify and present suitable candidates

  • Manage contracts, proposals and agreements

  • Manage invoicing, payments and accounting

  • Maintain ongoing business relationships and service records

C. For All Users

We may use your data to:

  • Respond to enquiries and provide customer support

  • Improve our services, processes and website

  • Monitor website performance and security

  • Comply with legal, regulatory and tax obligations

We never sell your data.

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Consent – when you register as a candidate or sign up to specific communications.

  • Legitimate interests – such as matching candidates to roles, supporting clients, and operating a recruitment business in a way that is reasonable and expected.

  • Contract – when we process data in order to deliver recruitment services you or your organisation have requested.

  • Legal obligation – for example verifying right to work or responding to regulators.

Where we rely on consent, you may withdraw it at any time by contacting us.

5. Who We Share Your Data With

We may share your data with:

  • Employers who are hiring and have engaged us to source candidates

  • Background checking or right-to-work verification services (where legally required)

  • Payroll or onboarding providers (for temporary or contract placements)

  • Professional advisers (e.g. accountants, legal advisers) where necessary

  • Our trusted software and IT service providers (e.g. email, CRM, document storage, scheduling tools)

We only share what is necessary, and only with secure service providers who comply with UK GDPR or equivalent protections.

We do not share your data with employers without your explicit permission to represent you for a specific role or opportunity.

6. International Transfers

Some of our software providers or service partners may store data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK GDPR adequacy decisions, and/or

  • Standard contractual clauses (SCCs) or equivalent protections for international transfers.

7. Data Retention

We retain data only for as long as necessary for the purposes set out in this policy or as required by law.

  • Candidate data – generally kept for up to 3 years from last meaningful contact (e.g. email, call, interview) so we can continue to support you with relevant opportunities.

  • Client/employer data – generally kept for up to 6 years for accounting, tax and contract purposes.

  • Website analytics data – typically retained for up to 2 years.

You may request deletion of your data at any time (unless we are required to retain certain information by law).

8. Your Data Rights (Including Candidate Rights)

Under UK GDPR and the Data Protection Act 2018, you have important rights over your personal data.

A. General Data Rights (All Users)

You have the right to:

  1. Access your data
    Request a copy of the personal information we hold about you.

  2. Correct inaccurate information
    Ask us to update or correct any incomplete, out-of-date or inaccurate details.

  3. Request deletion (“right to be forgotten”)
    Ask us to delete your data in certain circumstances — for example, if you no longer want to use our services and there is no lawful reason for us to keep your information.

  4. Restrict processing
    Ask us to limit how we use your data (for example, limiting data we process while a complaint is being investigated).

  5. Object to processing
    You may object to certain types of processing, including direct marketing, where we rely on legitimate interests.

  6. Data portability
    Request that your information is transferred to another organisation or directly to you in a structured, commonly used and machine-readable format, where technically possible and applicable.

  7. Withdraw consent
    If we are processing your data based on consent, you can withdraw that consent at any time.

  8. Complain to the ICO
    If you have concerns about how your data is being handled, you may complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.

B. Additional Clarifications for Candidates

As a candidate using our recruitment services, you also have the right to:

  • Ask us not to share your CV or profile with any employer unless you have explicitly agreed for that specific role.

  • Ask us to stop contacting you about roles or opportunities at any time.

  • Ask us to remove you from our talent pool if you no longer wish to be represented by us.

We are committed to handling your information lawfully, fairly, and transparently, and to supporting your control over how your personal data is used in the recruitment process.

How to Exercise Your Rights

To exercise any of your data rights, please contact us at:

Email: enquiries@thriveworkagency.com

Post:
Thrive Work Recruitment Ltd
167–169 Great Portland Street, 5th Floor
London, W1W 5PF

We aim to respond to all valid requests within one month. In some cases, we may request proof of identity to ensure we are communicating with the correct person.

9. Security

We take appropriate technical and organisational measures to protect your data, including but not limited to:

  • Encrypted storage and secure cloud systems

  • Access controls and role-based permissions

  • Secure password and authentication policies

  • Regular reviews of our security practices

  • Staff training on data protection and confidentiality

While no system is 100% secure, we follow industry best practices to safeguard your information as far as reasonably possible.

10. Cookies

We use cookies and similar technologies to:

  • Improve website performance and user experience

  • Analyse how visitors use our website

  • Remember your preferences where applicable

Details of the cookies we use and how to manage them can be found in our Cookie Policy, which forms part of this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or how we operate.

When we do, we will update the “Last updated” date at the top of this page. Where the changes are significant, we may also notify you by email or via a notice on our website.

12. Contact Us

If you have any questions, concerns, or requests regarding your privacy or this policy, please contact:

Email: enquiries@thriveworkagency.com

Post:
Thrive Work Recruitment Ltd
167–169 Great Portland Street, 5th Floor
London, W1W 5PF

We’re committed to working with you to resolve any concerns about privacy and data protection.