Privacy Policy

Privacy Policy

Global Career Networks Limited – Group Privacy Policy

Last updated: 2 November 2026

1. Introduction

Global Career Networks Limited (“GCN”, “we”, “us” or “our”) is committed to protecting the privacy and personal information of individuals who interact with our websites, brands, services and business operations.

GCN owns and operates a number of websites and trading brands providing recruitment, staffing, outsourcing, business advisory and migration-related services.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information, and describes the rights individuals have in relation to their personal information.

This policy applies to the following brands and their associated websites:

GCN owns 70% of Staffbank Outsourcing Solutions Ltd. Staffbank is an operating company within the wider group, providing staffing, recruitment outsourcing and associated business services.

References to individual brands in this policy identify the relevant services and do not necessarily refer to separate legal entities. Where a brand is operated by a separate legal entity, that entity’s responsibilities will be determined by the actual processing arrangements.

2. Who We Are

The organisation responsible for the processing of personal information described in this policy is:

Global Career Networks Limited

Company Registration Number: 09748842
Registered in: England and Wales
Registered Office: 30 Victoria Terrace, Addingham, Ilkley, LS29 0NF
Email: [email protected]

GCN is registered with the UK Information Commissioner’s Office (ICO) as a data controller.

GCN owns 70% of Staffbank Outsourcing Solutions Ltd. GCN provides the group’s website infrastructure, CRM systems and data storage facilities, while Staffbank maintains and manages relevant operational activities.

Depending on the activity concerned, Staffbank may process personal information on behalf of GCN or may have separate responsibilities as a data controller. These responsibilities are determined by the actual processing arrangements.

GCN is responsible for ensuring that appropriate data protection arrangements are maintained across the websites and services it operates.

3. Applicable Data Protection Legislation

We process personal information in accordance with applicable data protection and privacy legislation, including:

  • The UK General Data Protection Regulation (UK GDPR).
  • The Data Protection Act 2018, as amended.
  • The Data (Use and Access) Act 2025.
  • The Privacy and Electronic Communications Regulations 2003 (PECR), as amended.
  • The EU General Data Protection Regulation (EU GDPR), where applicable.
  • Other relevant national data protection and privacy laws where our activities or services bring us within their scope.

For individuals in the United Kingdom, references to GDPR generally mean the UK GDPR.

Where we process personal information relating to individuals in the European Economic Area in circumstances covered by the EU GDPR, the relevant EU requirements will also apply.

4. Who This Policy Applies To

This policy applies to individuals whose personal information we collect or process in connection with our websites, services and business activities, including:

  • Job applicants and candidates.
  • Individuals identified or approached through recruitment and talent-sourcing activities.
  • Existing and prospective clients.
  • Employers, hiring managers and business representatives.
  • Suppliers, contractors and business partners.
  • Individuals using our websites or submitting enquiries.
  • Individuals engaging with our marketing and business communications.
  • Individuals using our recruitment, staffing, advisory or migration services.

Some services may have additional privacy notices or terms that explain specific processing activities in greater detail. These should be read alongside this policy.

5. Personal Information We Collect

The personal information we collect will depend on the nature of your interaction with us.

5.1 Identification and Contact Information

This may include:

  • Name and title.
  • Residential or business address.
  • Email address.
  • Telephone and mobile numbers.
  • Nationality and country of residence.
  • Professional contact details.
  • Company and employment details.

5.2 Recruitment and Candidate Information

Where you apply for a role, register with us, are approached about an opportunity or otherwise participate in recruitment activities, we may collect:

  • CVs, employment history and professional experience.
  • Qualifications, education and professional certifications.
  • Professional registrations and memberships.
  • Skills, competencies and language abilities.
  • References and referee contact details.
  • Salary expectations and remuneration information where lawfully obtained and relevant.
  • Career preferences and job-search information.
  • Interview notes, assessment results and recruitment correspondence.
  • Right-to-work and immigration information where relevant.
  • Information relating to professional suitability and eligibility for particular positions.

Depending on the role and applicable legal requirements, we may also process special category personal information, including health information, or criminal offence information where lawful and necessary.

5.3 Client and Business Information

For clients, prospective clients and business contacts, we may collect:

  • Business contact information.
  • Employer and organisational details.
  • Job vacancies and workforce requirements.
  • Recruitment and staffing requirements.
  • Commercial correspondence and meeting notes.
  • Contractual and billing information.
  • Business development and CRM records.

5.4 Migration and Advisory Information

In connection with migration and international business advisory services, we may collect information relevant to the requested service, including:

  • Identity and contact information.
  • Employment and educational history.
  • Immigration and visa-related information.
  • Family and dependent information where relevant.
  • Financial and supporting documentation where required.
  • Business ownership and corporate information.
  • Information required to assess eligibility or provide professional services.

5.5 Website and Technical Information

When you visit our websites, technical information may be processed as part of normal website operation, security and hosting. This may include:

  • IP address.
  • Browser type and version.
  • Operating system and device information.
  • Date and time of access.
  • Website access and server security logs.
  • Information submitted through website forms.

We do not use website analytics or advertising cookies to track visitors or build advertising profiles. Our cookies are intended for essential website functionality and session management.

6. How We Collect Personal Information

We obtain personal information through several channels.

6.1 Information Provided Directly

You may provide information when you:

  • Complete an enquiry or contact form.
  • Submit a job application or register as a candidate.
  • Send us your CV or professional information.
  • Request recruitment, staffing, migration or advisory services.
  • Enter into a business relationship with us.
  • Subscribe to communications or marketing.
  • Contact us by telephone, email or other communication channels.

6.2 Information Obtained from Third Parties

In some circumstances, we obtain information from other sources, including:

  • Professional networking platforms such as LinkedIn.
  • Recruitment websites and job boards.
  • Publicly available professional profiles and directories.
  • Referrals and recommendations.
  • Previous employers and professional referees.
  • Clients and business partners.
  • Public registers and professional registration bodies.
  • Other recruitment and sourcing platforms.

Where we obtain personal information from third parties, we will provide the information required by applicable data protection legislation, including information about the source of the data where appropriate.

6.3 Automatically Collected Information

We may process technical information automatically through our hosting infrastructure and website security systems. This is distinct from the use of optional analytics or advertising cookies.

7. How We Use Personal Information

We use personal information only where we have an appropriate lawful basis and for legitimate business or service-related purposes.

7.1 Recruitment and Talent Services

We may use personal information for:

  • Identifying and sourcing potential candidates.
  • Assessing qualifications, experience and suitability.
  • Matching candidates with relevant vacancies.
  • Contacting candidates about employment opportunities.
  • Preparing and submitting candidate profiles to clients.
  • Arranging interviews and facilitating recruitment processes.
  • Supporting onboarding and compliance procedures.
  • Maintaining recruitment records and candidate databases.

7.2 Staffing and Outsourcing Services

We may use personal information for:

  • Responding to staffing and outsourcing enquiries.
  • Assessing business and workforce requirements.
  • Providing recruitment delivery, staffing and outsourcing services.
  • Managing client relationships and service delivery.
  • Coordinating personnel and operational support.
  • Administering contractual arrangements.

7.3 Business Advisory and Migration Services

We may use personal information for:

  • Responding to advisory and migration enquiries.
  • Assessing service requirements and eligibility.
  • Providing agreed consultancy and administrative services.
  • Preparing and processing relevant documentation.
  • Communicating with relevant professional bodies, authorities and service providers where authorised or legally required.

7.4 Business Administration

We may use personal information for:

  • Maintaining internal business records.
  • Managing client, supplier and candidate relationships.
  • Processing payments and invoices.
  • Managing contracts and agreements.
  • Improving our services and business operations.
  • Maintaining security and preventing fraud or misuse.

7.5 Marketing and Communications

We may use personal information for:

  • Providing information about our services.
  • Sending relevant business communications.
  • Promoting vacancies and employment opportunities.
  • Communicating with existing and prospective clients.
  • Managing subscriptions and marketing preferences.

Marketing communications are managed in accordance with applicable data protection and electronic marketing legislation.

8. Lawful Bases for Processing

We rely on one or more of the following lawful bases, depending on the purpose and circumstances of the processing.

Consent

Where you have given clear permission for us to process your information for a specific purpose.

Contract

Where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.

Legal Obligation

Where processing is necessary to comply with a legal or regulatory obligation.

Legitimate Interests

Where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

Examples may include recruitment sourcing, maintaining business relationships, service development, business administration and appropriate direct marketing.

Vital Interests

Where processing is necessary to protect someone’s life or physical safety in circumstances recognised by applicable legislation.

Where we process special category information, such as health information, or criminal offence information, we will also identify and rely on the additional legal conditions required by applicable legislation.

9. Sharing Personal Information

We may share personal information where necessary for the purposes described in this policy.

9.1 Group Companies and Associated Brands

We may share information between GCN and relevant group companies, including Staffbank Outsourcing Solutions Ltd, where necessary for legitimate business operations and service delivery.

GCN provides the group’s website infrastructure, CRM and data storage facilities. Staffbank maintains relevant operational activities, which may include recruitment delivery, staffing and client service operations.

Staffbank personnel may access personal information through GCN’s systems where required to carry out their operational responsibilities.

Access is restricted according to operational requirements and applicable data protection obligations.

Where a group company processes personal information on behalf of GCN, appropriate data processing arrangements will apply. Where it determines its own processing purposes, it will have its own controller responsibilities.

9.2 Clients and Prospective Employers

In recruitment activities, candidate information may be shared with relevant employers and clients for the purpose of considering candidates for employment or engagement.

We will share information that is relevant and appropriate to the recruitment process and in accordance with applicable legal requirements.

9.3 Service Providers and Professional Advisers

We may share information with:

  • IT and hosting providers.
  • Recruitment and CRM software providers.
  • Email and communication service providers.
  • Marketing and analytics providers, where applicable.
  • Payment and financial service providers.
  • Professional advisers, including legal and accounting advisers.
  • Compliance and verification providers.

These organisations may process information on our behalf under appropriate contractual arrangements or act as independent controllers where applicable.

9.4 Regulatory and Government Authorities

We may disclose information where required by law, regulation, court order or a legitimate request from an appropriate authority.

9.5 Business Transfers

In the event of a sale, merger, restructuring or transfer of all or part of our business, relevant personal information may be disclosed to prospective purchasers or transferred to the acquiring organisation, subject to applicable data protection requirements.

10. Data Storage, Security and International Access

GCN maintains its principal website, CRM and database infrastructure on servers hosted by IONOS in Birmingham, United Kingdom.

GCN also uses Microsoft 365 services, including OneDrive, SharePoint and Exchange Online, for business communications, document management and data storage.

Our Microsoft 365 tenant confirms the United Kingdom as the current and committed data geography for OneDrive, SharePoint and Exchange Online.

These arrangements provide UK-based primary data storage for our principal business systems.

Authorised personnel, including operational staff based in India, may access relevant information remotely through secure online systems where required to perform their duties. Personal information is not intentionally stored locally on computers or devices in India as part of these arrangements.

Remote access from outside the United Kingdom is subject to appropriate security controls and applicable international data protection requirements. Where required, GCN will implement appropriate contractual safeguards and transfer assessments.

Our hosting and cloud service providers may also undertake certain technical, security, support and administrative processing activities in accordance with their respective contractual and data protection arrangements.

We take appropriate technical and organisational measures to protect personal information against:

  • Unauthorised access.
  • Accidental loss or destruction.
  • Unauthorised disclosure.
  • Alteration or misuse.
  • Unlawful processing.

Security measures may include access controls, authentication, secure hosting, system monitoring, staff procedures and contractual safeguards with service providers.

Access to personal information is restricted to individuals who require it for legitimate business purposes.

No method of electronic storage or transmission is completely secure. However, we take reasonable and appropriate steps to protect the information entrusted to us.

11. Data Retention

We normally retain personal information for a period of up to 24 months from the date of the last relevant interaction or activity.

This applies to information held in connection with recruitment, business enquiries and other service-related relationships, subject to the nature of the information and any applicable legal or regulatory requirements.

Information may be retained for longer where necessary to:

  • Comply with legal, accounting or regulatory obligations.
  • Establish, exercise or defend legal claims.
  • Fulfil contractual responsibilities.
  • Maintain records that we are legally required to preserve.

You may contact us at any time to request information about the personal data we hold about you or to request its deletion where the legal conditions for erasure are met.

Requests should be sent to:

[email protected]

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of.

12. Your Data Protection Rights

Depending on the applicable legislation and circumstances, you may have the following rights.

Right of Access

To request a copy of the personal information we hold about you.

Right to Rectification

To request correction of inaccurate or incomplete information.

Right to Erasure

To request deletion of personal information where the legal conditions for erasure are met.

Right to Restrict Processing

To request that we limit how we use your information in certain circumstances.

Right to Data Portability

To request the transfer of certain personal information to you or another organisation in a structured, commonly used and machine-readable format.

Right to Object

To object to processing based on legitimate interests or to processing for direct marketing.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Rights Relating to Automated Decision-Making

You may have rights in relation to decisions made solely through automated processing where those decisions have legal or similarly significant effects.

We do not intend to make significant decisions about individuals solely through automated processing without implementing the safeguards required by applicable legislation.

To exercise your rights, please contact [email protected].

We may need to verify your identity before responding to a request.

We will respond within the applicable statutory time limits. In most cases, this will be one month, subject to any lawful extension or other applicable provisions.

Some rights are subject to exemptions and may not apply in every circumstance.

13. Direct Marketing

We may contact individuals about services, vacancies, business opportunities and other information relevant to their relationship with our brands.

Our marketing activities are conducted in accordance with applicable data protection and electronic marketing legislation.

Depending on the recipient, communication method and circumstances, we may rely on consent, the legitimate interests provisions of applicable data protection law, or an applicable electronic marketing exception.

For electronic marketing, we distinguish between individual subscribers and corporate subscribers where required by PECR or equivalent legislation.

We may also contact business representatives using professional contact information for relevant business-to-business communications where legally permitted.

You may object to direct marketing or unsubscribe from marketing communications at any time.

Every marketing email will provide an appropriate means of opting out.

We will maintain suppression records where necessary to ensure that individuals who have opted out are not contacted again for the relevant marketing purposes.

14. Cookies and Website Technologies

Our websites use session-based cookies and similar technologies where necessary for essential website functionality, security and the operation of services requested by visitors.

We do not use advertising cookies or analytics cookies to track visitors, create advertising profiles or collect information for third-party advertising purposes.

Cookies used for essential functionality are generally temporary and expire when the browsing session ends.

Where applicable, our websites will provide information about cookies and any consent choices required under relevant privacy legislation.

Website hosting and security systems may independently process technical information, such as IP addresses and server logs, as part of normal website operation. This is separate from the use of cookies.

15. Third-Party Websites and Services

Our websites may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, security or content of third-party websites that we do not control.

Where you interact with third-party services, their own privacy notices and terms may apply.

We recommend reviewing those notices before providing personal information.

16. Children’s Information

Our services are generally intended for adults and business users.

We do not knowingly seek to collect personal information directly from children unless it is necessary for a legitimate service-related purpose and permitted by applicable law.

Where information relating to a child is processed, appropriate safeguards will be applied.

17. Complaints and Regulatory Authority

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve the matter.

You also have the right to complain to the relevant data protection supervisory authority.

For individuals in the United Kingdom, this is:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/

For individuals in the European Economic Area, complaints may be made to the relevant national data protection supervisory authority.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business activities, services, technology or legal requirements.

The latest version will be published on our websites, together with its revision date.

We encourage visitors to review this policy periodically.

19. Contact Us

For questions about this Privacy Policy, our use of personal information or to exercise your data protection rights, please contact:

Global Career Networks Limited

Registered Office: 30 Victoria Terrace, Addingham, Ilkley, LS29 0NF

Email: [email protected]

Website: https://globalcareernetworks.com/

Please identify the brand or service to which your enquiry relates so that we can direct it appropriately.

Global Career Networks Limited
Company Registration Number: 09748842
Registered in England and Wales