Privacy Policy

Sylvacore Consultancy
Last updated: 04/02/2026

Sylvacore Consultancy (“we”, “us”, “our”) is a UK recruitment consultancy and recruitment business, as defined under the Employment Agencies Act 1973 and the Conduct of Employment Agencies and Employment Businesses Regulations 2003.

We act as a data controller in respect of the personal data we process.

2. What personal data we collect

We collect and process personal data relating to:

  • Prospective, current and placed candidates (permanent and contract)

  • Prospective and current client contacts

  • Suppliers and professional advisers

  • Employees, consultants and contractors

The types of personal data we may collect include:

  • Name, address, email address and telephone number

  • Employment history, qualifications, skills and experience

  • Curriculum vitae and covering information

  • Right to work documentation (where legally required)

  • References and background information

  • Compensation, rate and payment details (where relevant)

  • Links to publicly available professional profiles (e.g. LinkedIn)

  • Technical data such as IP address, browser type and usage data when you visit our website

3. How we collect your personal data

We collect personal data directly from you when you:

  • Submit your CV or personal details via our website [www.sylvacore.co.uk]

  • Contact us by email, telephone or other means

  • Apply for or express interest in a role

  • Attend events or engage with us in a professional context

We may also collect personal data from third-party sources, including:

  • Job boards and CV databases

  • Professional networking platforms such as LinkedIn

  • Referees and former employers

  • Clients and professional contacts

4. How we use your personal data

We use personal data for the purposes of:

  • Providing recruitment and work-finding services

  • Assessing suitability for roles and opportunities

  • Introducing candidates to clients

  • Managing client relationships and resourcing requirements

  • Communicating with you about roles, services or business enquiries

  • Complying with legal and regulatory obligations

  • Maintaining and improving our website, systems and services

5. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases to process personal data:

Legitimate interests
Where processing is necessary for our legitimate interests as a recruitment consultancy, including maintaining candidate and client records, introducing candidates to clients, and developing our business. We have carried out a Legitimate Interest Assessment (LIA) to ensure that these interests do not override your rights and freedoms.

Contract
Where processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract with you or your organisation.

Legal obligation
Where processing is required to comply with UK law, including employment, tax and immigration legislation, and the Conduct of Employment Agencies and Employment Businesses Regulations 2003.

Consent
In limited circumstances, such as where consent is required to introduce a candidate to a client, or for certain marketing communications. You may withdraw your consent at any time.

6. Who we share your personal data with

We may share personal data with:

  • Clients for the purpose of recruitment introductions

  • Candidates for interview, placement and engagement arrangements

  • Payroll providers and payment intermediaries

  • IT, CRM and software service providers

  • Professional advisers (including accountants, legal advisers and insurers)

  • Compliance, screening and background-checking providers

All third parties are required to respect the security of your personal data and to process it in accordance with applicable data protection laws.

7. International data transfers

We do not routinely transfer personal data outside the UK.

Where it becomes necessary to transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations

  • The UK International Data Transfer Agreement (IDTA)

  • The UK Addendum to the EU Standard Contractual Clauses

8. Data security

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse.

Access to personal data is restricted to individuals who have a legitimate business need to access it.

9. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal and regulatory requirements.

In particular:

  • Candidate records are retained in line with the Conduct of Employment Agencies and Employment Businesses Regulations 2003 (a minimum of one year) and typically no longer than [12–24] months after the last meaningful contact, unless otherwise required.

  • Client and supplier contact details are retained for the duration of the business relationship and a reasonable period thereafter.

  • Payroll and financial records are retained in accordance with HMRC requirements (typically between three and six years).

10. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request erasure of your personal data (in certain circumstances)

  • Object to processing based on legitimate interests

  • Request restriction of processing

  • Request data portability

  • Withdraw consent at any time

  • Object to direct marketing (this right is absolute)

To exercise any of these rights, please contact us.

We will respond within one month and may request proof of identity where appropriate.

11. Cookies

Our website uses cookies to improve functionality and performance.
Please refer to our Cookie Policy for further information.

12. Complaints

If you have any concerns about how we handle your personal data, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns/

13. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.