Privacy Notice – Candidate Data (Individuals)
Last updated: 9th Feb 2026
Overview
- We only collect and process the personal data necessary for specific purposes.
- Your personal data is used only for clearly defined purposes.
- We have identified the lawful basis for processing your personal data.
- Our service requires sharing your personal data with other organisations.
- We take appropriate steps to keep your personal data safe and secure.
- Your personal data may be transferred outside of the UK and EU.
- Your personal data is retained for a defined period only.
- You retain control of your personal data through your legal rights.
- We are happy to explain how your personal data is processed.
Changes to This Privacy Notice
We may update this Privacy Notice at any time to reflect changes in data protection legislation or Irving Knight’s data processing practices. Updates take effect when published on this page.
Personal Data Collected
To provide a tailored recruitment service and identify suitable job opportunities, we may collect some or all of the following personal data:
- Full name
- Email address
- Postal address
- Telephone number(s)
- Nationality
- Employment history
- Salary details and future employment preferences
- Skills and experience
- Education and qualifications
- Number of dependents
- Any other information you choose to provide
Personal data may be provided directly by you, obtained from third parties, or collected automatically through our website. When you use our website or email us, we may collect your IP address.
Sensitive personal data may be provided by you or collected where permitted by law to assess job suitability. This may include information relating to health, criminal records, or trade union membership.
Collecting Personal Data Directly From You
- Applying for a job advertised on our website
- Submitting your CV via the candidate services area of our website
- Emailing your CV directly to a consultant
- Telephone conversations with our consultants
- Providing details at recruitment or graduation events
Collecting Personal Data From Other Sources
- Professional networking sites such as LinkedIn
- Job boards
- Referrals from existing candidates
Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
- Recruitment – matching you with suitable vacancies
- Marketing – informing you of relevant future opportunities
Recruitment Purposes
We collect and assess information to understand your career goals and match you with relevant roles. A consultant specialising in your sector may discuss your career, lifestyle, and preferences before creating a confidential candidate profile.
This profile is shared anonymously with potential employers. Your identity and personal data are only shared once you have provided explicit consent.
If you submit a CV and are not contacted within six (6) months, your application has not been successful and your CV will be permanently deleted.
Legal Basis – Consent
By applying for roles, submitting your CV, or engaging with our consultants, you consent to the processing of your personal data for recruitment purposes. We always obtain your explicit consent before sharing your data with clients.
Legal Basis – Legitimate Interests
We may contact individuals whose professional details are publicly available on platforms such as LinkedIn where we believe there is a genuine career opportunity. We document this processing through Legitimate Interest Assessments.
You have the right to object to processing based on legitimate interests.
Marketing Purposes
We aim to support your career progression by keeping you informed of suitable opportunities. You can control marketing communications at any time.
Marketing Preferences
- Unsubscribe: Permanently stop all marketing emails
- Mute: Pause marketing emails for three (3) months
Preferences are processed promptly and stored securely. These options apply only to marketing communications and do not affect essential service messages.
Who We Share Your Personal Data With
- Existing clients with suitable vacancies
- Prospective clients offering relevant opportunities
- Legal authorities where required by law
We always obtain your explicit consent before sharing your personal data with clients.
How We Keep Your Personal Data Safe
- Encryption of devices and servers where appropriate
- Password-protected systems
- Secure premises
- Restricted staff access
- Internal data protection policies
- Staff training
- Data breach response procedures
All systems and data storage are hosted on servers located in the UK and EU.
International Data Transfers
Where vacancies are located outside the UK or EU, your personal data may be transferred internationally with your explicit consent.
Data Retention
- Active candidates: retained while communication remains active, then for 10 years
- Unsuccessful applicants: CV deleted after 6 months
- Internal employees: retained during employment and for 6 years after leaving
- Unsuccessful internal applicants: retained for 6 months
Your Rights
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
We do not undertake automated decision-making or profiling.
Contact Details
Data Protection Manager
- Telephone: 0113 233 9520
- Post: Irving Knight Group Ltd, P/t 2nd Floor, 6 Wellington Place, Leeds, LS1 4AP
- Email: data.protection@irvingknight.com
FAQs
We’re here to make Executive Search easy to understand. Find answers to the most common questions below.
Let's talk