Our commitment under data protection law.

This policy applies to all personal data processed by Found-U Recruitment, whether collected through this website, by email, by telephone or in person. It should be read alongside our Privacy Policy.

• Processed lawfully, fairly and transparently.
• Collected for specified, explicit purposes and not used in ways incompatible with them.
• Adequate, relevant and limited to what is necessary.
• Accurate and kept up to date.
• Kept no longer than needed.
• Processed securely, with integrity and confidentiality.

• Legitimate interests — operating a recruitment service, contacting professionals about relevant roles and contacting employers about hiring needs, balanced against your rights.
• Contract — where we are engaged by a client or acting for a candidate in a live process.
• Consent — marketing emails, non-essential cookies, and sharing your CV with a named employer.
• Legal obligation — right-to-work checks, tax and accounting records.

We avoid collecting special category data. Where it is genuinely necessary — for example, adjustments for an interview — we collect only what is needed, with your explicit consent, and delete it once the reason has passed.

• The right to be informed about how your data is used.
• The right of access to a copy of your data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure — see our Right to be Forgotten policy.
• The right to restrict processing.
• The right to data portability.
• The right to object, including to direct marketing at any time.
• Rights relating to automated decision making; we do not make automated decisions about you.

Email dominic@found-u.co.uk with the subject line "Data request". We respond within one calendar month and will confirm your identity before releasing information. There is no fee unless a request is manifestly unfounded or excessive.

We use suppliers for hosting, email, scheduling, video hosting and analytics. Each is bound by a data processing agreement. Where a supplier processes data outside the UK or EEA, we rely on UK adequacy regulations or the International Data Transfer Addendum to standard contractual clauses.

Candidate records: up to two years from last meaningful contact. Client and placement records: up to six years. Website analytics: retained in aggregated form. Records are reviewed annually and deleted when the period expires.

Suspected breaches are investigated immediately. Where a breach is likely to risk your rights and freedoms, we notify the Information Commissioner's Office within 72 hours and inform affected individuals without undue delay.

Please raise any concern with us first at dominic@found-u.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.