GDPR Statement
GVOLVO LTD (“we”, “us”, or “our”) is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This statement explains how we collect, process, store, and protect personal data when interacting with clients, candidates, website users, and third-party recruitment providers.
1. Data Controller
GVOLVO LTD acts as the Data Controller for all personal data submitted through our website or via other communication channels.
As the data controller, we are responsible for determining the purposes and means of processing personal data and ensuring it is handled lawfully and fairly.
2. Personal Data We Collect
We may collect personal data including, but not limited to:
- Name, business name, and job title
- Contact details (email address and phone number)
- Information provided in recruitment or staffing enquiries
- Technical information such as IP address, browser type, and website usage data
This information is collected directly from you when you:
- Submit an enquiry through our website
- Register for recruitment services
- Engage with our candidate or client processes
3. Purpose and Legal Basis for Processing
We process personal data for the following purposes:
- Responding to recruitment or staffing enquiries
- Assessing business hiring requirements and candidate suitability
- Introducing clients to relevant recruitment or RPO providers
- Maintaining business records and communication history
- Complying with legal and regulatory obligations
Our legal basis for processing personal data may include:
- Consent
- Legitimate interest
- Contractual necessity
depending on the context in which the data is provided.
4. Sharing and Third-Party Processing
GVOLVO LTD introduces clients and candidates to vetted recruitment and staffing providers.
We only share relevant personal data required to facilitate these introductions.
Once an introduction is made, any further processing of personal data by the recruitment provider is governed by their own privacy policies.
We take reasonable steps to ensure that all recruitment partners comply with GDPR principles and maintain appropriate data protection standards.
5. Data Retention
Personal data is retained only for as long as necessary to:
- Respond to recruitment enquiries
- Facilitate candidate or client introductions
- Comply with legal or regulatory requirements
Typically, enquiry or candidate data is retained for up to 12 months, unless an ongoing recruitment relationship requires a longer retention period.
6. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your personal data
- Object to or restrict processing
- Request data portability
- Withdraw consent at any time
Requests can be made by contacting:
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
7. Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure.
However, while we take reasonable steps to protect data, no system can guarantee complete security during transmission or storage.
8. Updates to This Statement
This GDPR Statement may be updated periodically to reflect changes in:
- Legal requirements
- Technology
- Business operations
The most current version will always be published on this website.