Privacy Policy
Privacy Notice (GDPR)
Introduction
Last updated: 01/02/2026
Acqusition People (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect personal data in accordance with the UK/EU General Data Protection Regulation (GDPR).
This Privacy Notice applies to candidates, clients, website visitors, and other individuals whose personal data we process as part of our recruitment activities.
2. Who We Are
Company name: Acquisition People
Registered address: 6 The Kilns, Reed, Royston, SG8 8EW
Email: gbloxham@acquisition-people.com
For GDPR purposes, we are the Data Controller.
3. Personal Data We Collect
We may collect and process the following types of personal data:
Candidates
Name, address, email address, phone number
CVs, cover letters, employment history, education, qualifications
Salary expectations, availability, right-to-work information
Interview notes, references, assessment results
Diversity data (where provided voluntarily and lawfully)
Clients / Contacts
Name, job title, company name
Business contact details
Communication records
Website Users
IP address
Browser type and usage data
Cookies (see Section 10)
4. How We Collect Your Data
We collect personal data when:
You submit your CV or apply for a role
You contact us by email, phone, or via our website
You engage with us as a client or supplier
We receive your details from third parties (e.g. job boards, referrals)
5. Lawful Basis for Processing
We process personal data under the following lawful bases:
Consent – where you have given clear permission
Contract – to take steps prior to entering a contract
Legitimate interests – to operate our recruitment business
Legal obligation – where required by law
Special category data is processed only where permitted by law and with appropriate safeguards.
6. How We Use Your Data
We use personal data to:
Match candidates with suitable job opportunities
Communicate about roles, interviews, and opportunities
Share candidate profiles with clients (with appropriate consent)
Manage client relationships
Comply with legal and regulatory obligations
7. Data Sharing
We may share personal data with:
Clients and prospective employers
Service providers (e.g. IT systems, CRM platforms)
Regulatory or legal authorities when required
We do not sell personal data.
8. International Transfers
If personal data is transferred outside the UK/EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.
9. Data Retention
We retain personal data only for as long as necessary:
Candidate data: typically up to [e.g. 24 months] after last contact
Client data: for the duration of the business relationship and as required by law
You may request deletion at any time (see Section 11).
10. Cookies
Our website uses cookies to improve user experience and analyse website traffic. You can manage cookie preferences via your browser settings or our cookie banner.
11. Your Rights
Under GDPR, you have the right to:
Access your personal data
Rectify inaccurate data
Request erasure (“right to be forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
To exercise your rights, contact: gbloxham@acquisition-people.com
12. Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
13. Complaints
If you are unhappy with how we handle your data, you have the right to complain to the relevant supervisory authority:
UK: Information Commissioner’s Office (ICO)
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. The latest version will always be available on our website.