Candidate & Client Privacy Notice
Last updated: November 2025
Rekquin Ltd (“Rekquin”, “we”, “our”, “us”) is a specialist recruitment agency helping technology companies hire software engineers. We are committed to protecting the privacy and security of your personal data.
This Privacy Notice explains:
What personal data we collect
How we use it
Who we share it with
How long we retain it
Your rights under data protection law
How to contact us and our EU Data Protection Representative
This Privacy Notice applies to candidates, clients, prospective candidates, and any individual whose data we process in the course of recruitment activities.
1. Who we are
Rekquin Ltd
Company number: 16815453
Registered address: 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom
Email: tom@rekquin.com
We are registered with the Information Commissioner’s Office (ICO), UK under registration number ZC031122.
2. The data we collect
We collect and process the following categories of personal data for recruitment purposes:
Candidates
Name
Email address
Phone number
Location
CV, employment history & education
Technical skills & project information
LinkedIn/GitHub/portfolio links
Salary expectations
Notice period
Interview availability
Notes from screening conversations
Any other information you choose to provide
Clients & hiring managers
Name
Business contact details
Role requirements
Notes from calls
Feedback on interviews
We do not intentionally collect or request sensitive (“special category”) data. Where such data is voluntarily provided or incidentally included (for example within a CV), it will only be processed where lawful and necessary and handled with appropriate safeguards.
We do not knowingly collect or process personal data relating to individuals under the age of 18. If such data is provided unintentionally, it will be deleted securely.
3. How we collect your data
We collect data directly from you or from publicly accessible professional sources, including:
LinkedIn
GitHub
Company websites
CVs you provide to us
Email communication
Phone/video calls
Job applications submitted to us
4. Why we process your data (Legal basis)
We process your data under the following lawful bases:
Legitimate Interests (Article 6(1)(f))
For recruitment-related activities including:
Sourcing candidates
Assessing suitability for roles
Introducing candidates to clients
Maintaining professional relationships
Communicating regarding roles, opportunities or hiring needs
Consent (Article 6(1)(a))
When explicitly required — for example, before submitting your CV to a client.
Contract (Article 6(1)(b))
To perform obligations under agreements or requests you make to us.
5. How we use your data
We use personal data to:
Assess suitability for job opportunities
Discuss roles with you
Introduce candidates to clients
Maintain accurate records in our CRM
Manage interview processes
Provide recruitment and consulting services
We will always confirm with you before sharing your CV with any client.
6. Who we share data with
We share candidate information with:
Clients and hiring managers who are considering you for a role
Tools we use to provide recruitment services (e.g. RecruitCRM, Microsoft 365)
We will only introduce your details to a client with your prior consent
We do not sell or share data with any third parties for marketing.
All providers we use comply with GDPR or equivalent data protection frameworks. All third-party service providers who process data on our behalf do so under a written data processing agreement and must comply with UK GDPR or equivalent standards.
7. International transfers
As we work with clients in France, the United States, and the United Kingdom, data may be transferred outside the EU/UK.
Where this happens, we ensure appropriate safeguards exist, such as:
Standard Contractual Clauses
Secure encrypted systems
Reputable, GDPR-aligned service providers
8. Data security
We use appropriate technical and organisational measures to protect your personal data, including encryption, secure cloud systems, access controls, and security monitoring. While no system is completely secure, we take all reasonable steps to protect your information from loss, misuse, or unauthorised access.
9. Data retention
We retain candidate data for 24 months from your last interaction with us.
You may request deletion at any time — we will action this within 30 days unless required to retain data for legal or contractual reasons.
We do not use automated decision-making or profiling that produces legal or similarly significant effects. All recruitment decisions involve human review.
10. Your rights
You have the right to:
Access your data
Correct inaccurate data
Request deletion
Object to processing
Withdraw consent
Request data portability
To exercise your rights, contact us directly or contact our EU Representative below.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.
Information Commissioner’s Office
Website: ico.org.uk
Helpline: 0303 123 1113
11. EU/EEA Data Protection Representative (DataRep)
For individuals in the EU/EEA, Rekquin Ltd has appointed DataRep as our Data Protection Representative.
You may contact DataRep if you wish to exercise your GDPR rights or raise concerns relating to EU/EEA data.
How to contact DataRep
Online contact form: https://www.datarep.com/data-request
Email address (for EU GDPR queries): euprivacy@datarep.com
Austria: DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Belgium: DataRep, Rue des Colonies 11, Brussels, 1000
Bulgaria: DataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
Croatia: DataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
Cyprus: DataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
Czech Republic: DataRep, Platan Office, 28. Října 205/45, Floor 3&4, Ostrava, 70200, Czech Republic
Denmark: DataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
Estonia: DataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
Finland: DataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
France: DataRep, 72 rue de Lessard, Rouen, 76100, France
Germany: DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
Greece: DataRep, Ippodamias Sq. 8, 4th floor, Piraeus, Attica, Greece
Hungary: DataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
Iceland: DataRep, Laugavegur 13, 101 Reykjavik, Iceland
Ireland: DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Italy: DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
Latvia: DataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
Liechtenstein: DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Lithuania: DataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
Luxembourg: DataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
Malta: DataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
Netherlands: DataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
Norway: DataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
Poland: DataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
Portugal: DataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
Romania: DataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
Slovakia: DataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
Slovenia: DataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
Spain: DataRep, Calle de Manzanares 4, Madrid, 28005, Spain
Sweden: DataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE - 211 46, Sweden
Postal addresses (29 EU/EEA locations):
IMPORTANT: Please address all written correspondence to “DataRep” to ensure it reaches them.
12. Contacting us
For any data protection queries, contact:
Rekquin Ltd
Email: tom@rekquin.com
Address: 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom