Privacy Policy

Last Updated: May 2025

GopheRec Ltd (“GopheRec”, “we”, “our”, or “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or interact with our recruitment services.

GopheRec Ltd
Registered Address: 2 Chevin View, Belper, Derbyshire, DE56 1BB, United Kingdom
Email: privacy@gopherec.com
Company No.: 14509126

GopheRec provides recruitment and talent acquisition services for clients across various industries. We act as a data controller for the personal information we collect directly through our website and recruitment processes.

We may collect and process the following types of personal data:

Visitors to our website:

• IP address and browsing data (via analytics tools)
   
• Contact information submitted through our forms (e.g., name, email, phone number)
   

Candidates:

• Name, email, phone number, and address
   
• CV/resume and employment history
   
• Education, skills, and professional qualifications
   
• Salary expectations and job preferences
   
• References, interview feedback, and correspondence
   

Clients and business contacts:

• Company name, contact name, email, phone number, and communications
   

We do not intentionally collect special category data (e.g., health, ethnicity, political opinions) unless it is necessary and we have obtained your explicit consent.

We use personal data to:

• Match candidates with suitable job opportunities
   
• Communicate with candidates and clients
   
• Manage ongoing recruitment projects and relationships
   
• Improve our services and website performance
   
• Comply with legal and regulatory obligations
   

Lawful bases for processing include:

• Legitimate interests (providing recruitment services, maintaining business operations)
   
• Contractual necessity (when fulfilling recruitment agreements)
   
• Consent (for optional communications, ongoing candidate engagement)
   
• Legal obligations (record keeping, compliance)
   

We apply strong technical and organisational measures to protect your data, including:

• Encryption at rest and in transit (TLS 1.2+, AES-256)
   
• Password-protected systems and multi-factor authentication
   
• Role-based access control and least-privilege permissions
   
• GDPR-compliant cloud storage (Microsoft 365, Google Workspace, ATS systems)
   
• Regular security reviews and access audits
   

Your data is securely stored within the UK or the EEA in compliance with the UK GDPR.

We may share personal data with:

• Our trusted third-party processors (e.g., applicant tracking systems, email providers, or analytics services)
   
• Legal or regulatory bodies where required by law
   

All third-party service providers are bound by Data Processing Agreements (DPAs) ensuring data protection and confidentiality.
We never sell or rent your personal data to any third parties.

We retain your personal data only as long as necessary for the purpose it was collected, typically:

• Candidates: 12 months after last contact, unless you consent to longer retention
   
• Clients and business contacts: For the duration of the working relationship or as legally required
   

When data is no longer needed, it is securely deleted or anonymised.

Under UK GDPR, you have the right to:

• Access your personal data
   
• Request correction or deletion
   
• Restrict or object to processing
   
• Request a copy of your data (data portability)
   
• Withdraw consent at any time
   

Requests should be sent to privacy@gopherec.com, and we will respond within 30 days.

Our website may use cookies and analytics tools to improve performance and understand user behaviour.
You can adjust your browser settings to refuse or manage cookies. Non-essential cookies will only be used with your consent.

If personal data is transferred outside the UK or EEA (for example, when using global cloud service providers), we ensure adequate safeguards are in place such as Standard Contractual Clauses (SCCs) or equivalent protection mechanisms.

In the event of a data breach, GopheRec will:

• Immediately investigate and contain the incident
   
• Notify affected parties and the UK ICO within 72 hours, if required
   
• Take remedial action to prevent recurrence
   

We may update this Privacy Policy from time to time to reflect legal or operational changes.
The most recent version will always be available on our website, with an updated “Last Updated” date.

For questions, concerns, or data-related requests, please contact:

Data Protection Officer
GopheRec Ltd
📧 privacy@gopherec.com
📍 2 Chevin View, Belper, Derbyshire, DE56 1BB, United Kingdom