Disruptive DataTech: Data Privacy & Protection Policy
This Privacy Notice sets out how Disruptive DataTech collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller
Disruptive DataTech is the data controller for the personal data we process.
We are registered in England and Wales with our registered office at:
124 City Road, London, EC1V 2NX
ICO Registration Number: ZB933265
If you have any questions about how we process your personal data, you can contact us at privacy@disruptivedatatech.com.

2. Who This Policy Applies To
This policy applies to:

• Candidates who apply for roles or are part of our talent network
• Clients and prospective clients who use or enquire about our consulting and HR services
• Website visitors or users of our online services
• Any individual who provides personal information to Disruptive DataTech

3. What Personal Data We Collect
For Candidates:

• Name and contact details
• CV, qualifications, work history, and preferences
• Right to work documentation
• Salary expectations, availability
• Notes from interviews and communications
• References and background checks (if required)
• Payroll and compliance details (if engaged via us

For Clients:

• Name, company, job title
• Business contact information
• Role descriptions and consulting requirements
• Communications and contract information
• Automatically Collected:
• IP address, device type, browser information
• Website usage data through cookies and analytics tools

4. Legal Basis for Processing
We rely on one or more of the following legal bases:

• Performance of a contract: to fulfil agreements with candidates or clients
• Legitimate interests: to contact you about relevant roles or services, where this does not override your rights
• Legal obligation: to comply with employment, tax, or regulatory requirements
• Consent: for marketing communications, which you may withdraw at any time
• We have conducted Legitimate Interests Assessments (LIAs) where required to ensure our interests are balanced against your privacy rights.

5. How We Use Your Information
We use your data to:

• Deliver consulting, HR, and staffing solutions
• Match candidates to suitable contract or permanent opportunities
• Communicate with clients and candidates
• Process payroll and billing (where applicable)
• Maintain business and operational records
• Improve our services and user experience
• Send relevant updates or marketing (where permitted)
• Comply with legal and regulatory requirements

6. Failure to Provide Personal Information
In some cases, providing personal data is required by law or necessary for us to provide our services. If you fail to provide certain information when requested, we may not be able to properly assist you with your search for a role or deliver our services effectively.

7. Marketing Communications
We may contact you with relevant industry updates, job opportunities, or information about our services.

• You can opt out at any time by:
• Clicking or Email “unsubscribe” in any email
• Contacting us at privacy@disruptivedatatech.com
• We do not sell or rent your personal data to third parties.

8. Sharing Your Data
We may share personal data with:

• Clients (with candidate knowledge and consent)
• Technology providers, such as applicant tracking systems or payroll platforms
• Legal and regulatory authorities where required
• Professional advisors, such as accountants or insurers
• Any successors to our business in the event of a sale, transfer, or mergerAll third parties are required to protect your data and use it only for specified purposes.

9. International Transfers
Some of our partners or clients may be based outside the UK or European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK or EU
• International Data Transfer Agreements or equivalent safeguards

10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this notice.
We do not anticipate holding your information – whether as a candidate or client – for more than six years from our last contact, unless we have a lawful reason to retain it for longer (such as a legal obligation or to defend a claim).
You may request deletion of your personal data at any time by contacting us.

11. Your Rights Under UK GDPR
You have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request limitation of how we use your data
• Portability: Receive your data in a transferable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: At any time, if processing is based on consent

To exercise any of these rights, email privacy@disruptivedatatech.com. We will respond within one month.
We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with the request in such circumstances, in line with data protection law.

12. Security Measures
We implement appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, alteration, or disclosure.
While no system is entirely secure, we regularly review our security practices to ensure your data remains protected.

13. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our business, services, or legal requirements. The most recent version will always be available on our website.

14. Contact Us
If you have any questions about this policy or how we handle your data, please contact:
Disruptive DataTech
124 City Road, London, EC1V 2NX
privacy@disruptivedatatech.com