Privacy Policy

Forefront Technology Solutions Limited Last updated: 17 August 2026

Forefront Technology Solutions Limited ("Forefront", "we", "us", "our") is a recruitment business specialising in technology, change, and transformation placements. We are a data controller in respect of the personal data described in this policy, registered in England and Wales (Company Registration Number: 16469483, Registered Address: 14 Victoria Square, Droitwich, England, WR9 8DS).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to candidates, clients, and visitors to our website, and is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who this policy applies to

This policy is primarily aimed at:

• Candidates — individuals who apply for a role, submit a CV, or are approached by us regarding a recruitment opportunity;

• Client contacts — individuals at organisations we work with;

• Website visitors — individuals browsing our website.

Personal data we collect

From candidates, in the course of providing recruitment services, we may collect:

• Full name, address, email address, and telephone number;

• CV, employment history, qualifications, and references;

• Interview feedback and assessment notes;

• National Insurance number, where required for right-to-work or onboarding purposes;

• Identity and right-to-work documentation (for example, passport or other proof of identity/right to work);

• Where a candidate operates through their own limited company, relevant company details (for example, company name, registration number, and VAT/tax reference);

• Bank details and related financial information, solely for the purpose of processing invoices or payments in relation to a placement;

• Occasionally, and only where voluntarily disclosed by the candidate (for example, to support a request for reasonable adjustments), special category data such as health information. We do not seek this information proactively.

From client contacts, we may collect business contact details (name, job title, work email, and telephone number) necessary to deliver our recruitment services.

From website visitors, we may collect limited technical information (such as browser type and general usage data) to help us maintain and improve our website. We do not use this information to identify individual visitors.

Why we process your data

We process personal data for the following purposes:

• To assess candidate suitability for roles and manage the recruitment process, including sourcing, screening, interview coordination, and submission to clients;

• To verify identity and right to work, where applicable;

• To communicate with candidates and clients about opportunities, feedback, and outcomes;

• To process invoicing and payment in relation to a placement;

• To comply with our legal and regulatory obligations (for example, under employment, tax, and immigration law);

• To maintain and improve our website.

Our lawful bases for processing include: taking steps at your request prior to entering a contract (for example, submitting your details for a role you have applied to); performance of a contract (for example, with a client or a placed contractor); compliance with a legal obligation (for example, right-to-work checks or tax record-keeping); and our legitimate interests in operating an effective recruitment business, balanced against your rights.

How we store your data

Personal data is stored securely using cloud-based systems operated by established, reputable service providers, with appropriate encryption both in transit and at rest. Access to your data is restricted to authorised personnel only, protected by strong authentication controls.

All personal data is stored within the United Kingdom. We do not transfer personal data outside the UK.

Who we share your data with

We share candidate data with the relevant client to whom you have applied, or who we believe may be interested in your profile, for the purpose of the recruitment process. Where a placement proceeds, we may also share relevant information with payment or invoicing intermediaries strictly as necessary to process payment.

We do not sell personal data, and do not share it with any other third party, other than as described above or as required by law.

How long we keep your data

We retain personal data only for as long as necessary for the purposes described above, and in line with our internal Record Retention Policy, which reflects UK legal requirements including HMRC, Home Office, and employment law guidance. In general:

• General candidate and recruitment records are retained for 1–2 years following the end of an engagement, or 6–12 months for unsuccessful applications;

• Right-to-work documentation is retained for the duration of an engagement plus 2 years;

• Financial and invoicing records are retained for 6 years, in line with HMRC and Companies Act requirements.

Data is securely deleted or destroyed once the applicable retention period has ended, unless we are required to retain it for longer by law.

Your rights

Under the UK GDPR, you have the right to:

• Be informed about how your personal data is used;

• Access the personal data we hold about you;

• Have inaccurate personal data corrected;

• Request erasure of your personal data, in certain circumstances;

• Restrict how we use your personal data, in certain circumstances;

• Receive your personal data in a portable format;

• Object to certain types of processing, including direct marketing;

• Rights in relation to any automated decision-making or profiling (we do not currently carry out any automated decision-making or profiling in relation to candidates).

To exercise any of these rights, please contact us using the details below. We will respond within one month, in accordance with statutory timeframes.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has not been handled in accordance with the law.

Security

We take the security of your personal data seriously and maintain technical and organisational measures — including encryption, access controls, and staff training — to protect it against unauthorised access, loss, or disclosure, as set out in our internal Information Security Policy.

Cookies

Our website may use cookies or similar technologies to help it function correctly and to understand general website usage. You can control cookies through your browser settings.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last updated.

Contact us

If you have any questions about this policy, or wish to exercise any of your data protection rights, please contact:

Ian Holmes Data Protection Officer, Forefront Technology Solutions Limited Email: ian.holmes@forefront-technology.co.uk