Privacy policy
This policy explains how VWIN Limited ("VWIN", "we", "us") collects and uses personal data when you visit our website, enquire about or use our services, or register with us as a candidate. We process personal data in line with the UK GDPR and the Data Protection Act 2018. VWIN Limited is the data controller and is registered with the Information Commissioner's Office.
1. Data we collect
- Enquiries and clients: name, job title, organisation, contact details and the content of your correspondence with us.
- Candidates: CV and career history, contact details, qualifications, skills, salary expectations, right-to-work information where relevant, and notes from our conversations and assessments.
- Hiring clients' staff: contact details of the people we deal with about vacancies.
- Website visitors: if you accept analytics cookies, usage information such as pages visited, device and browser type, and approximate location.
2. How we use it and our lawful basis
- To respond to enquiries and deliver consulting and assurance services (contract, or legitimate interests before a contract).
- To provide recruitment services: assessing candidates, matching them with vacancies and introducing them to employers (legitimate interests; we will always get your agreement before sending your CV to a specific employer).
- To meet legal, accounting and regulatory obligations (legal obligation).
- To understand and improve our website using analytics, only where you have consented (consent).
We do not make decisions about candidates using solely automated processing.
3. Who we share it with
We do not sell personal data. We share it only where necessary: with prospective employers (candidates' details, with agreement), with service providers who host our email, files and systems under data processing terms, with professional advisers, and with authorities where the law requires it.
4. International transfers
Some of our service providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement.
5. How long we keep it
- Client and contract records: up to 7 years after the engagement ends, for tax and legal purposes.
- Candidate records: up to 2 years from our last meaningful contact, unless you ask us to delete them sooner.
- Enquiries that don't lead to work: up to 2 years.
6. Your rights
You have the right to access, correct or delete your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Contact hello@vwin.co.uk and we will respond within one month.
7. Complaints
Please contact us first so we can try to resolve your concern. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Changes
We may update this policy from time to time. The latest version will always be published here.