Privacy Policy

We comply with the latest data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable U.S. privacy laws such as the California Consumer Privacy Act (CCPA). Please note that we may amend this Privacy Notice from time to time and will post any changes here.

About Us

Vantage Consulting is a specialist recruitment business providing work-finding services to employers and job seekers across the UK and the United States. In providing these services, we process personal data (including, at times, sensitive personal data), and in doing so, we act as a data controller.

Who to Contact Regarding Your Personal Data

Your privacy is important to us, and we are committed to safeguarding your data privacy rights. Our Data Protection Officer (DPO) oversees data protection matters and is available to answer any questions regarding this privacy notice and how Vantage Consulting uses your data.

You can contact our Data Protection Officer by using our Contact Form or by writing to:
Vantage Consulting, Unit B, Dyson Ct, Gillette Cl, Staffordshire Technology Park, Stafford ST18 0LQ
For U.S.-based users, please email us at privacy@vantageconsulting.co.uk with the subject line “U.S. Privacy Request”.

How We Collect and Process Personal Data

You may provide personal details directly (e.g. via application or registration forms or our website), or we may collect them from other sources such as job boards. We will only process your personal data where there is a lawful basis to do so, which may include:

- Performance of a contract
- Compliance with a legal obligation
- Legitimate interests
- Consent
- Vital interests

We collect only the minimum data required to provide our recruitment services and take steps to keep this data accurate, secure, and retained only as long as necessary.

If You Are a Candidate

We process candidate data to match the best individuals with the right opportunities. Data is retained while we have meaningful contact (e.g., communication, marketing interaction). If there has been no meaningful contact for five years, we will securely delete your data unless retention is required for legal or regulatory reasons.

Where there is a contractual relationship (e.g., if you are placed in a contract role), we retain certain records for up to six years for tax or audit purposes.

The Main Ways We Process Your Personal Data

- Applications through our website, email, phone, or job boards.
- Referrals from third parties (e.g., colleagues, mutual connections).
- Identification via public sources such as LinkedIn or online CV databases.

The Personal Data We Collect and Process

Depending on the source, we may collect:

- Name, contact information, CV/resume, education and employment history
- Publicly available social media profiles
- Right-to-work documentation or visa status (where relevant)
- Any additional information you choose to provide

Marketing Communications

We may contact you about relevant roles or services under legitimate interest where you’ve engaged with us before. You can opt out at any time using the ‘Unsubscribe’ link or by contacting us directly.

Sharing Your Data with Employers

We will only share your data with prospective employers with your explicit consent. Contact information is typically withheld until there is a job offer or significant progression in the process.

If You Are a Client

We process client data to deliver recruitment services, including matching talent to roles. Data is retained while there is active or meaningful engagement. Where there is a contractual relationship, we retain certain records for up to six years for compliance and tax purposes.

International Data Transfers

As we now operate in both the UK and the United States, your data may be processed or transferred internationally. Where data is transferred outside the UK:

- We ensure compliance via Standard Contractual Clauses (SCCs) approved by the UK ICO
- We ensure transfers occur only to jurisdictions with adequacy decisions or appropriate safeguards
- For U.S. users, we ensure compliance with state-level privacy regulations such as the CCPA

Your Rights as a Data Subject

UK / GDPR Rights:
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure under certain circumstances
- Restrict or object to processing
- Request data portability
- Lodge a complaint with the ICO

U.S. / CCPA Rights (for California Residents):
You have the right to:
- Know what personal data is collected and why
- Request deletion of your personal data
- Opt out of the sale of personal data (we do not sell your data)
- Not be discriminated against for exercising your rights

To make a CCPA-related request, email privacy@vantageconsulting.co.uk with the subject line “CCPA Request”.

Automated Decision-Making and Profiling

We do not use automated decision-making processes that have legal or similarly significant effects. However, we may use tools that help us filter applications or match candidates based on skills and experience. All such tools are subject to human review. If you feel you’ve been unfairly affected, you can request a manual review.

Children’s Data

Vantage Consulting does not knowingly collect or process personal data from individuals under the age of 16. Our services are directed solely at adults in the professional workforce. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

SMS Communications

Vantage Consulting may occasionally use SMS (text messaging) to share relevant job opportunities or updates with candidates or clients.

- For UK-based individuals, we may send SMS messages under the basis of legitimate interest, where there is an existing relationship or engagement with our services. You can opt out of SMS communications at any time by replying to a message or contacting us directly.

- For individuals based in the United States, we will only send SMS messages where we have received clear and documented consent, in line with U.S. regulations. We do not use SMS as a first point of contact. You can opt out at any time by replying to a message or contacting us.

We keep a record of all opt-ins and review our processes regularly to ensure compliance with relevant data protection laws.

Complaints

If you are unhappy with how we handle your personal data, you can contact our Data Protection Officer or, if you're in the UK, lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/concerns/
Phone: 0303 123 1113

For U.S. residents, please contact your state’s attorney general or regulatory authority for further guidance.