Privacy Policy

Last Updated: October 29, 2025

Retrofit Talent is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Company Name: Retrofit Talent

Data Controller: Retrofit Talent is the data controller responsible for your personal information.

We specialize in retrofit recruitment, connecting skilled professionals with ECO4, SHDF, GBIS, and PAS 2035 projects across the UK.

2. Information We Collect

We collect and process the following types of personal information:

2.1 Information You Provide to Us

Contact Information: Name, email address, phone number, postal address
Professional Information: CV/resume, work history, qualifications, certifications (e.g., PAS 2035, Elmhurst, Stroma)
Employment Details: Current employment status, salary expectations, availability
Company Information: For employers – company name, position, recruitment needs
Communication Records: Emails, phone calls, messages, and other correspondence

2.2 Information We Collect Automatically

Website Usage Data: IP address, browser type, device information, pages visited, time spent on pages
Cookies and Tracking Technologies: See our Cookie Policy below for details
Analytics Data: How you interact with our website and services

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Recruitment Services

Matching job seekers with suitable retrofit positions
Presenting candidate profiles to potential employers
Facilitating interviews and employment arrangements
Verifying qualifications and work history

3.2 Communication

Responding to your inquiries and requests
Sending job alerts and opportunities
Providing updates about our services
Marketing communications (with your consent)

3.3 Website Improvement

Analyzing website performance and user behavior
Improving our services and user experience
Troubleshooting technical issues

3.4 Legal Compliance

Complying with legal obligations
Preventing fraud and ensuring security
Protecting our legal rights

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: When you provide explicit consent for specific processing activities
Contract: To fulfill our recruitment services and contractual obligations
Legitimate Interests: For business operations, improving services, and marketing (where not overridden by your rights)
Legal Obligation: To comply with UK employment and data protection laws

5. How We Share Your Information

We may share your personal information with:

5.1 Employers and Clients

With your consent, we share your CV and professional information with potential employers seeking to fill retrofit positions.

5.2 Service Providers

We work with trusted third-party service providers who assist us with:

Website hosting and maintenance
Email communication services
Analytics and performance monitoring
Payment processing (if applicable)

5.3 Legal Requirements

We may disclose your information when required by law, court order, or to protect our legal rights.

We never sell your personal information to third parties.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

Active Candidates: While you are actively seeking employment through our services
Inactive Candidates: Up to 2 years after your last interaction with us
Employer Records: For the duration of our business relationship plus 6 years for legal compliance
Website Analytics: Up to 26 months

You can request deletion of your data at any time by contacting us.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
Right to Restrict Processing: Request limitation of how we use your data
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint: Complain to the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details below.

8. Cookie Policy

Our website uses cookies to enhance your browsing experience and analyze website performance.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use our site.

8.2 Types of Cookies We Use

Essential Cookies: Required for the website to function properly (e.g., cookie consent preferences)
Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
Functional Cookies: Remember your preferences and settings
Marketing Cookies: Track your activity to deliver relevant advertisements (only with your consent)

8.3 Managing Cookies

You can control and manage cookies through our cookie consent banner and your browser settings. Disabling certain cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

Unauthorized access or disclosure
Accidental loss or destruction
Malicious attacks and cyber threats

Security measures include:

Encryption of data in transit and at rest
Secure server infrastructure
Regular security audits and updates
Access controls and authentication
Staff training on data protection

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

Posting the updated policy on our website
Updating the “Last Updated” date at the top of this page
Sending you an email notification (for material changes)

We encourage you to review this policy periodically.

14. Contact Us

Data Protection Inquiries

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: info@retrofittalent.com

Phone: 07435722581

Address: Retrofit Talent, [Your Business Address]

15. Complaints to the ICO

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK’s supervisory authority:

Information Commissioner’s Office (ICO)

Website: www.ico.org.uk

Phone: 0303 123 1113

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Thank you for trusting Retrofit Talent with your personal information.

We are committed to protecting your privacy and handling your data responsibly.