Privacy Policy

PRIVACY POLICY (UK GDPR)

Last updated:8/03/2026

1) Who we are
Roland & Miga Auto Talent Solutions [add “Ltd” if registered] (“we”, “us”, “our”) is a UK recruitment agency specialising in the automotive sector.

For data protection law, we are the “data controller” for the personal information collected through our website and for recruitment/business relationship purposes.

Email (Data Protection Contact): roland@rolandmigatalentscouk.com
Phone/WhatsApp: [your number]
Registered address: [your business address]
Company number (if Ltd): [number]
ICO registration (if applicable): [ICO number]

2) What this policy covers
This policy explains how we collect, use, store, and share personal data for:
A) Website visitors
B) Candidates (job seekers)
C) Client contacts (hiring managers / HR / business contacts)
D) Suppliers and other business contacts

3) The personal data we collect

A) Website visitors
- Contact details you submit via forms (name, email, phone, message)
- Technical data (IP address, device info, browser type)
- Usage/cookie data (see Cookie Policy)

B) Candidates
- Identity & contact details (name, email, phone, location)
- CV/work history, qualifications, skills, training, licences, salary/rate expectations
- Interview notes, screening results, references (where applicable)
- Right to work information (where required for a role)
- Communications with you (emails, messages, calls)

Special category data (sensitive)
We avoid collecting special category data unless it’s needed (e.g., reasonable adjustments). If we do process it, we apply extra safeguards.

C) Client contacts
- Work contact details (name, job title, company, work email/phone)
- Communications and meeting notes
- Vacancy requirements and hiring feedback
- Contract and billing-related details (where applicable)

4) Where we get your data from
- Directly from you (forms, CVs, messages, calls)
- Public professional sources (e.g., LinkedIn) where relevant to recruitment
- Referrals (e.g., a colleague recommends you)
- Clients/referees (e.g., interview feedback or references, where relevant)

5) How we use your data (purposes)

Website enquiries
- Respond to your questions and requests
- Provide information about our services

Recruitment (candidates)
- Identify suitable roles and contact you about opportunities
- Assess suitability (screening, shortlisting, interviews)
- Present your profile to a client for a specific vacancy (typically after you confirm you want to proceed)
- Arrange interviews, offers, and placement administration
- Maintain our talent pool and keep in touch about future opportunities (you can opt out anytime)
- Improve our service and keep appropriate records

Client relationship management
- Understand hiring needs and deliver recruitment services
- Share shortlisted candidate profiles
- Arrange interviews and placements
- Handle contracts, invoicing and service administration where applicable

6) Lawful bases (UK GDPR)
We rely on one or more of the following lawful bases depending on the activity:
- Legitimate interests: recruitment sourcing, contacting candidates, matching to roles, and managing client relationships
- Contract / steps before contract: when you ask us to progress your application or we provide recruitment services to a client
- Legal obligation: where we must comply with law
- Consent: only where required (for specific choices)

7) Recruitment systems (Bullhorn)
We use Bullhorn as our Applicant Tracking System (ATS)/CRM to store and manage recruitment and client relationship data. Bullhorn acts as a “data processor” on our instructions, and we require appropriate contractual protections.

8) Who we share your data with
We may share personal data with:
- Clients/employers: for a specific vacancy and recruitment process
- Service providers: systems that support our business (e.g., ATS/CRM, email, cloud storage, IT support)
- Professional advisers: accountants, legal advisers (where necessary)
- Authorities: where legally required

We never sell personal data.

9) International transfers
Some suppliers may store or access data outside the UK. Where this happens, we use appropriate safeguards to protect your data.

10) How long we keep your data (retention)
We keep personal data only as long as necessary for the purposes above.

Typical retention periods (edit these to your preference):
- Candidates not placed: [e.g., 12 months] from last meaningful contact, then deleted/anonymised unless you ask us to keep it longer.
- Placed candidates / placement records: [e.g., up to 6 years] where needed for legal/accounting reasons.
- Client contact records: [e.g., 24 months] from last meaningful business contact.
- Website enquiries: [e.g., 12 months] unless needed longer for a dispute.

11) Security
We use appropriate security measures to protect personal data, including access controls, secure systems, and organisational procedures.

12) Your rights
You have rights including: access, correction, deletion, restriction, objection, and data portability (in some cases).

Opt-out
You can opt out of recruitment updates at any time by replying “STOP” or emailing us.

13) Complaints
If you have concerns, contact us first and we’ll try to resolve it.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).

14) Changes to this policy
We may update this policy from time to time. The “Last updated” date will show the latest version.

Contact (Data Protection)
roland@rolandmigatalentscouk.com