Privacy Policy
How we collect, use, and protect your personal data
Last updated: 12 February 2026
Contents
Overview
Recruitica ("we", "us", "our") operates a rec2rec marketplace platform that connects recruitment professionals with agencies seeking talent. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
We are committed to protecting the privacy and security of all our users, including recruiters, recruitment agencies, candidates, and site visitors. As a data controller under the UK GDPR and EU GDPR, we take our obligations seriously and have designed our platform with privacy by design and by default.
This policy applies to all personal data processed through the Recruitica platform, our website, and any related services. By using our platform, you acknowledge that you have read and understood this policy.
Key commitment: We will never sell your personal data to third parties. Your data is used solely to provide and improve our recruitment marketplace services.
Data We Collect
| Category | Examples | Applies To |
|---|---|---|
| Account Information | Name, email, phone number, password (hashed), profile photo | All users |
| Recruiter Profile Data | Employment history, specialisations, desk focus, billing history, commission structure | Recruiters |
| Agency Profile Data | Company name, registration number, office locations, team members, brand assets | Agencies |
| Candidate Data | CV/resume, work history, skills, salary expectations, interview records, references | Candidates |
| Job Listing Data | Job title, description, compensation, location, requirements, application status | Agencies posting roles |
| Communication Data | Messages between recruiters and agencies, interview scheduling, notifications | All users |
| Usage & Analytics | Pages visited, features used, search queries, session duration, device info | All users |
| Payment Data | Billing address, payment method (processed by Stripe), transaction history | Paying users |
How We Use Your Data
Legal Basis for Processing
Contract Performance
Processing necessary to provide our recruitment marketplace services, manage your account, and facilitate connections between recruiters and agencies.
Legitimate Interest
Improving our platform, ensuring security, preventing fraud, conducting analytics, and providing relevant matching results. We balance our interests against your rights.
Consent
Marketing communications, optional profile features, non-essential cookies, and newsletter subscriptions. You may withdraw consent at any time.
Legal Obligation
Retaining financial records for tax purposes, responding to legal requests, and complying with employment and data protection regulations.
Data Sharing & Third Parties
We never: Sell your personal data to third parties for marketing purposes, share candidate data without recruiter and candidate consent, or provide data access to any party without a lawful basis.
Data Retention
| Data Type | Retention Period | Lawful Basis |
|---|---|---|
| Active account data | Duration of account | Contract performance |
| Candidate profiles | 3 years after last activity | Legitimate interest |
| Job applications | 2 years after application | Legitimate interest |
| Interview records | 1 year after interview | Legitimate interest |
| Communication logs | 6 months after last message | Legitimate interest |
| Analytics (anonymised) | 2 years | Legitimate interest |
| Financial records | 7 years | Legal obligation |
| Deleted account data | 30 days (then purged) | Erasure request |
When retention periods expire, data is automatically flagged for secure deletion. You may request early deletion at any time by exercising your right to erasure.
Your Rights
Right to Access
Request a copy of all personal data we hold about you, free of charge.
Right to Rectification
Correct any inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where consent is the processing basis.
Right to Lodge a Complaint
File a complaint with the ICO (UK) or your local supervisory authority.
To exercise any of these rights, contact us at privacy@recruitica.com. We will respond within 30 days. For complex requests, we may extend this to 60 days with notice.
International Data Transfers
Your data may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:
Standard Contractual Clauses
EU-approved SCCs with all processors outside the EEA
Adequacy Decisions
Transfers to countries with EU adequacy decisions
Security Measures
Encryption
All data encrypted in transit (TLS 1.3) and at rest (AES-256).
Access Controls
Role-based access, multi-factor authentication, and audit logging.
Infrastructure Security
Hosted on SOC 2 compliant infrastructure with DDoS protection.
Monitoring
Continuous security monitoring, vulnerability scanning, and incident response.
For more details on our security practices, visit our Trust Center.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how we handle your data, please contact us:
Data Protection Officer
privacy@recruitica.com
Supervisory Authority
Information Commissioner's Office (ICO)
ico.org.uk
We aim to respond to all privacy-related inquiries within 30 calendar days.