Legal

Privacy policy

Last updated: June 2026

Template notice: this is a starting-point privacy policy for a UK recruitment agency. Have it reviewed by your data protection adviser or solicitor, and replace the placeholders (company details, retention periods, contact addresses) before going live.

Astilon Recruitment Ltd (“Astilon”, “we”, “us”) is a specialist finance and accountancy recruitment agency. We take the privacy of candidates, clients and website visitors seriously. This policy explains what personal data we collect, why, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

The data controller is Astilon Recruitment Ltd, registered in England & Wales (company number to be added), registered office to be added. For any privacy question, contact us at info@astilon.com.

The data we collect

  • Candidates: name, contact details, CV, work history, qualifications, current and desired salary, location, right-to-work information, and anything else you choose to share with us.
  • Clients / employers: name, business contact details, company information and details of the roles you are hiring for.
  • Website visitors: information submitted through our forms, plus limited technical data needed to operate the site securely.

How we use your data and our lawful basis

  • To provide recruitment services — matching candidates to roles, submitting candidates to clients with their permission, and managing the hiring process. Our lawful basis is legitimate interests and, where relevant, taking steps to enter into a contract.
  • To respond to enquiries you send through our forms — based on your consent and our legitimate interest in replying to you.
  • To keep you informed of relevant roles where you have asked us to, which you can opt out of at any time.
  • To meet legal obligations, such as confirming the right to work in the UK.

Sharing your data

We only share a candidate’s details with a client where the candidate has given permission for that specific role. We may use trusted service providers (for example, secure form handling, email and applicant-tracking tools) who process data on our behalf under appropriate agreements. We do not sell your data.

How long we keep it

We keep candidate data for as long as it is useful to the recruitment relationship and as required by law, after which it is securely deleted. Specific retention periods to be confirmed (a common approach is to review candidate records every two years). You can ask us to delete your data at any time.

Keeping your data secure

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Files such as CVs are stored securely and access is limited to those who need it.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data, or restrict how we use it;
  • object to processing based on our legitimate interests;
  • request a copy of your data in a portable format;
  • withdraw consent at any time, where we rely on it.

To exercise any of these rights, email info@astilon.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data.

Cookies

This website uses only the cookies necessary to function and, where applicable, to understand how the site is used. Update this section to reflect the analytics or marketing tools you actually deploy.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

← Back to home