TOMLIN PERSONNEL LIMITED strictly adheres to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, placing the utmost importance on the personal privacy and data security of all website visitors, corporate clients, and job candidates. This Privacy Policy outlines how we collect, use, store, disclose, and protect personal data, as well as the legal rights of users, throughout our website operations and the provision of graduate recruitment services. It applies to all individuals and organizations that visit this website, inquire about, or utilize our recruitment services.
I. Data Controller Information
TOMLIN PERSONNEL LIMITED acts as the data controller for this website and its recruitment services, bearing full responsibility for the processing, storage, and management of all personal data. Should you have any questions, objections, or requests regarding the processing of your personal data or privacy protection, please contact us via our official channels; all inquiries will be addressed within the statutory timeframes.
II. Scope of Data Collection
We collect necessary personal information in a compliant manner based solely on legitimate business needs, and we strictly avoid the arbitrary or excessive collection of user data. Data collected during routine business operations and website activities falls primarily into the following three categories:
1. Corporate Client Information: Company name, contact person’s name, email address, telephone number, recruitment requirements, job descriptions, hiring criteria, records of partnership communications, etc. This data is used to facilitate graduate recruitment services, finalize partnership terms, and track service progress.
2. Job Candidate Information: Candidate name, contact details, CV/resume, educational background, professional skills, internship and work history, job preferences, career plans, interview records, etc. This data is used for talent screening, role matching, employer recommendations, and recruitment coordination services.
3. Website Visitor Information: Anonymous or basic access data—such as browsing history, device information, session duration, page navigation paths, and cookie data—used to optimize the website experience, troubleshoot technical issues, and analyze operational metrics. III. Lawful Use of Data
All personal data collected by us is used solely for the disclosed, legitimate business purposes and will not be used for unrelated activities. The specific scope of use is as follows:
1. Executing core graduate recruitment services, including talent sourcing, initial resume screening, qualification verification, targeted talent recommendations, and end-to-end recruitment process management;
2. Communicating with corporate clients and job candidates regarding business matters, requirements, progress updates, inquiries, and post-service support;
3. Verifying and confirming recruitment cooperation terms and service fees in advance to ensure compliant and transparent collaboration;
4. Maintaining normal website operations, optimizing page functionality, and enhancing the user browsing experience;
5. Complying with local UK laws and regulations, including statutory obligations such as compliance filings, business record retention, and risk assessments;
6. Responding to user requests regarding privacy rights, inquiries, feedback, complaints, and suggestions.
IV. Data Sharing and Disclosure Rules
TOMLIN PERSONNEL LIMITED strictly prohibits the sale, rental, or resale of any user’s personal data. Relevant information is disclosed in a limited and compliant manner only in the following necessary scenarios:
1. Recruitment operations: Forwarding candidate resumes and qualification details—matched to specific roles—to partner employers for interview evaluation and recruitment coordination;
2. Regulatory compliance: Submitting relevant business and data records in accordance with lawful directives from UK judicial authorities or regulatory bodies;
3. Third-party services: Compliant third-party service providers (e.g., for website hosting or data storage) may process data only within the scope of their services; all such providers are required to sign privacy and confidentiality agreements that strictly limit data usage rights.
V. Data Storage and Security Protection
We employ industry-standard measures—including encrypted storage, access controls, regular backups, and security audits—to comprehensively protect user personal data against leakage, tampering, loss, unauthorized access, and misuse. All business data is retained only for the duration of the business relationship and the statutory retention period. Upon the conclusion of cooperation or termination of business activities, we will archive, anonymize, or permanently delete redundant data in accordance with UK GDPR requirements, thereby preventing the prolonged, unnecessary retention of users’ private information. VI. Statutory Privacy Rights of Users
In accordance with the UK GDPR and the UK Data Protection Act, all users possess full statutory privacy rights, specifically including: the right to access data, the right to rectify information, the right to data erasure, the right to restrict processing, the right to data portability, the right to object, the right to withdraw consent, and the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
You may submit requests regarding your privacy rights at any time via the official email address tomdunnn1@outlook.com. We will verify and respond to requests within the statutory one-month timeframe (or within the statutory extension period for complex cases) and will process compliance-related requests free of charge.
VII. Cookie Usage
This website utilizes cookies and similar tracking technologies to record user browsing preferences, optimize website loading speeds, enhance the user experience, and compile website operational data. Cookies do not compromise user privacy or sensitive information. You may disable or clear cookies via your browser settings; doing so may affect the browsing experience on certain pages but will not restrict core business inquiry functions.
VIII. Policy Updates and Revisions
We reserve the right to update this Privacy Policy in response to business developments, industry regulations, or changes in UK laws and regulations. Revised policies will be posted directly on the official website and will take effect immediately upon publication. Users are encouraged to review these terms periodically to stay informed of our privacy protection practices.