Privacy Policy

Effective Date: November 9, 2026

 

1. Introduction

Penrocs ("we", "our", or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR). For the purposes of data protection legislation, Penrocs is the data controller responsible for safeguarding your personal data .

 

2. Information We Collect

To help match you with suitable employment opportunities, we collect standard personal data. This typically includes:

 

• Your name, email address, phone number, and residential information.

• Your CV, employment history, qualifications, and salary expectations.

   

Note: We do not actively collect "special category data" (such as health information, racial or ethnic origin, or religious beliefs) unless explicitly required and with your direct consent.

 

3. How We Collect Your Data

We gather your personal information from the following sources:

 

• Directly from you: When you submit your information through the data-capture form on Penrocs.com.

• Indirectly via third parties: When we source candidate profiles from third-party job boards and professional networking sites.

   

4. Lawful Basis and Purpose for Processing

We use your data strictly for recruitment purposes. Under the UK GDPR, our primary lawful basis for processing your candidate data is our legitimate interest in finding candidates for our clients and matching you to relevant jobs. We require a specific, clear, and lawful reason to acquire your data, which means we strictly collect data that is related to the position.

 

5. Who We Share Your Data With

 

To facilitate the recruitment process, we share your personal data with carefully selected third parties, including:

 

• Prospective Employers: Clients who have job openings relevant to your skills.

• Background Check Agencies: For vetting purposes, where applicable and requested by the employer.

• Payroll and Umbrella Companies: To facilitate payment structures if you are placed in a contract or temporary role.

• Cloud Software Platforms: Third-party IT, CRM, and database providers that securely host our recruitment systems.

   

6. Data Retention

 

We retain candidate data for 12 months from the date of our last meaningful contact with you. "Meaningful contact" includes activities such as applying for a role, having a direct conversation with our team, or being submitted to a client. After 12 months, your personal data will be securely deleted or anonymised unless we obtain fresh consent from you to keep it in our talent pool.

 

7. Website Tracking and Cookies

 

Penrocs.com does not currently use cookies, analytics trackers, or retargeting pixels. If this changes in the future, we will update this policy and request your consent where legally required.

 

8. Your Data Protection Rights

 

Under UK GDPR, candidates (as data subjects) have continuous control over how their data is used. You have the following rights:

 

• Right of Access: You can ask to see the personal data we process about you.

   

• Right to Rectification: You can ask us to update or amend inaccurate or out-of-date information.

   

• Right to Erasure: You can request that we delete your data without delay. Once requested, you will be removed from all active searches and campaigns immediately.

   

• Right to Restriction / Objection: You can request that your data be processed in a specific way or object to processing entirely.

   

• Right to Data Portability: You can request your data in a commonly used format (like a CSV or PDF) to take elsewhere.

   

We will respond to all data rights requests within 30 days.

 

9. Contact Us

 

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or want to withdraw consent for specific communications, please contact us at contact@penrocs.com.