Last updated: April 2026
1. Who we are
Surface Talent Ltd (company number [COMPANY NUMBER]) is the data controller for personal data collected through this website and our recruitment services. Our registered office is 67C King Street, Knutsford, Cheshire, WA16 6DX.
For data protection queries, contact us at privacy@surfacetalent.co.uk.
2. What data we collect
We collect and process the following categories of personal data:
Candidates
- Name, email address, telephone number
- CV, employment history, qualifications and skills
- Current and desired salary or rate
- Right-to-work status
- Professional references (where you provide them)
- Any other information you include in your application or correspondence
Clients
- Contact name, job title, email address, telephone number
- Company name and address
- Role briefs and hiring requirements
Website visitors
- IP address, browser type, device information
- Pages visited, time on site and referral source (via Google Analytics and Microsoft Clarity)
- Any information you submit through contact or application forms
3. How we use your data
We process personal data for the following purposes:
- Recruitment services: matching candidates to roles, managing applications, communicating with clients and candidates about opportunities, arranging interviews and managing offers
- Client relationships: managing role briefs, invoicing and ongoing service delivery
- Website analytics: understanding how visitors use our site so we can improve it
- Legal compliance: meeting our obligations under employment, tax, equality and immigration law
- Marketing: sending relevant job alerts or sector updates where you have opted in or where we have a legitimate interest (you can opt out at any time)
4. Legal basis for processing
We rely on the following legal bases under UK GDPR:
- Consent: where you submit your CV, apply for a role or opt in to communications
- Legitimate interests: operating our recruitment business, managing client relationships, improving our website and marketing our services. We balance our interests against your rights and freedoms
- Contractual necessity: where processing is needed to fulfil a contract with you or take pre-contractual steps at your request
- Legal obligation: where we are required to process data by law (for example, right-to-work checks)
5. Who we share data with
We share personal data only where necessary and appropriate:
- Clients: candidate information is shared with prospective employers as part of the recruitment process, with your knowledge
- Group companies: Surface Talent is a sister company of the EMC Surface Technologies group. We may share data within the group for administrative purposes
- Service providers: we use third-party processors including Airtable (applicant tracking), Formspree (form handling), Google (analytics) and Microsoft (analytics). These providers process data on our behalf under appropriate contracts
- Legal and regulatory bodies: where required by law or to protect our legal rights
We do not sell personal data to third parties.
6. International transfers
Some of our service providers (including Google and Microsoft) process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
7. How long we keep data
- Candidate data: retained for up to 2 years from our last meaningful contact, unless you ask us to delete it sooner. This allows us to contact you about future opportunities
- Client data: retained for the duration of our working relationship and for up to 6 years afterwards for legal and accounting purposes
- Website analytics data: retained in accordance with the default retention periods of Google Analytics (14 months) and Microsoft Clarity (30 days for session data)
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (subject to legal obligations)
- Restrict or object to processing
- Data portability (receiving your data in a structured, machine-readable format)
- Withdraw consent at any time, where consent is the legal basis
To exercise any of these rights, email privacy@surfacetalent.co.uk. We will respond within one calendar month.
9. Cookies
Our website uses cookies to function and to help us understand how visitors use the site. Full details are in our cookie policy.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or damage. Access to personal data is restricted to those who need it to deliver our services.
11. Complaints
If you are unhappy with how we handle your data, please contact us first at privacy@surfacetalent.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will change accordingly. Material changes will be communicated where appropriate.