1. Who we are

Controller: VeriKo Ltd

Website: https://www.veriko.co.uk

Email: info@veriko.co.uk

VeriKo is a recruitment business specialising in software and technology roles.

2. The personal data we collect

Candidates

We may collect and process:

• Name, email address, phone number

• CVs, employment history, skills, qualifications

• Interview notes and technical assessment feedback

• Salary expectations, notice period, availability

• Work eligibility information (where relevant)

• Communications with us

Clients & business contacts

• Name, job title, company name

• Work contact details

• Contractual and billing information

• Communications with us

Website visitors

• IP address

• Browser and device information

• Pages visited and usage data (via cookies)

3. How we collect personal data

We collect personal data when:

• You submit a CV or contact us directly

• You apply for a role we are recruiting for

• You communicate with us by email, phone, or other means

• A client provides your details as a business contact

• We receive your details from professional networks, referrals, or public sources (such as LinkedIn), where permitted by law

• You visit our website

4. How we use personal data

We use personal data to:

• Provide recruitment and talent search services

• Match candidates with suitable roles

• Communicate with candidates and clients

• Arrange and conduct interviews and technical assessments

• Manage professional relationships

• Maintain records of introductions and consent

• Meet legal, regulatory, and contractual obligations

• Improve our services and website

We will never submit a candidate’s CV or personal details to a client without the candidate’s prior knowledge and consent.

5. Lawful bases for processing

We process personal data under one or more of the following lawful bases:

• Consent – where you have provided clear permission (e.g. submitting a CV or agreeing to representation)

• Legitimate interests – to operate and grow our recruitment business, where those interests are not overridden by your rights

• Contract – where processing is necessary to perform or enter into a contract

• Legal obligation – where required by law

6. Who we share personal data with

We may share personal data with:

• Clients and prospective employers (with candidate consent)

• Third-party recruitment, CRM, and ATS platforms used to securely manage data

• Service providers who support our business (e.g. email, scheduling, cloud storage)

• Professional advisers (e.g. accountants, insurers, legal advisers)

• Regulatory or law enforcement authorities where legally required

We only share personal data where necessary and ensure appropriate safeguards are in place.

7. International data transfers

Some of our service providers may store or process personal data outside the UK.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses, to protect your data in accordance with UK GDPR.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Recruitment data

• Detailed candidate information (such as CVs, interview notes, and assessment feedback) is typically retained for up to 24 months from the last meaningful interaction.

• This allows us to support ongoing or future recruitment opportunities while ensuring data remains relevant.

Limited relationship and legal records

• We may retain limited personal data (such as name, contact details, role history, introduction records, and consent history) for up to five (5) years where necessary to:

• Maintain professional relationships

• Manage introductions and recruitment history

• Resolve disputes or defend legal claims

• Meet contractual or regulatory obligations

Deletion and opt-out

• You may request deletion of your personal data at any time.

• You may also opt out of communications at any point.

• Where deletion is requested, we will remove data unless we are required to retain limited records for legal reasons.

9. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

While we take data security seriously, no system can be guaranteed to be completely secure.

10. Your data protection rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate or incomplete data

• Request deletion of your data

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at: [your contact email]

11. Cookies

Our website uses cookies to improve functionality and analyse usage.

For more information, please see our Cookie Policy.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The most current version will always be available on our website.

13. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Email: info@veriko.co.uk