Privacy Policy

Last updated: 11/05/2026

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, engage with our services, or communicate with us. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Idiom Consulting Limited   16 Blatchington Road Hove East Sussex BN3 3YN United Kingdom

We act as a Data Controller for the personal information we collect.

If you have any questions about this policy or your data, you can contact us at: Email: mark.mason@idiomconsulting.co.uk

2. What Personal Data We Collect

We may collect and process the following information:

Information you provide directly

• Name, email address, phone number
• CVs, career history, qualifications
• Identification documents (for due diligence)
• Information provided during interviews or assessments
• Billing and invoicing details (for clients)

Information collected automatically

• IP address
• Browser type and device information
• Website usage data (via cookies and analytics tools)

Sensitive data (where relevant)

For certain roles, we may process:

• DBS information
• AML/ID verification data
• Professional conduct or regulatory checks

This is always done lawfully and with appropriate safeguards.

3. How We Use Your Data

We use your personal data to:

• Provide headhunting and recruitment services
• Assess suitability for roles
• Conduct due diligence (ID, AML, DBS, social media checks)
• Communicate with you about opportunities or services
• Manage client relationships
• Improve our website and user experience
• Meet legal and regulatory obligations

We only process data where we have a lawful basis, such as:

• Legitimate interests (e.g., recruitment activity)
• Contractual necessity
• Legal obligation
• Consent, where required

4. How We Store and Protect Your Data

We take data security seriously. Measures include:

• Encrypted storage systems
• Access controls and authentication
• Secure data transfer protocols
• Regular security reviews

We retain personal data only for as long as necessary for the purposes described in this policy or to meet legal requirements.

5. Sharing Your Data

We may share your data with:

• Clients seeking to fill roles
• Background screening providers
• Professional advisers (legal, financial, compliance)
• Technology providers supporting our systems

We never sell your data to third parties.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place.

6. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion (“right to be forgotten”)
• Object to processing
• Restrict processing
• Request data portability
• Withdraw consent (where consent is the basis for processing)

To exercise any of these rights, contact us using the details above.

7. Cookies

Our website uses cookies to improve functionality and analyse usage. You can manage or disable cookies through your browser settings.

A full Cookie Policy can be provided on request.

8. Links to Other Websites

Our website may contain links to external sites. We are not responsible for their content or privacy practices.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.