General Data Protection Regulation (GDPR)

The aim of GDPR is to protect you in an increasingly data-driven world. Although the key principles of data privacy still hold true to the previous directive, many changes have been proposed to the regulatory policies. This new regulation will impact how recruiters process candidate and client data.

The lawful basis for processing

Candidates’ consent will be one of the fundamental requirements and obtaining consent will be compulsory for usage of personal data. Every candidate will have to actively give explicit consent to us storing, retaining and processing information for us to provide our services.

This process of consent will be carried out whether you apply for a position directly via our website, by email, telephone, or if you are contacted by a member of our team regarding an opportunity. The action of applying for a vacancy or registering with us deems consent. You have the right to refuse us from using your information to consider you for other roles.

Data storage and retention

Harrison Scott’s secure, password-protected database stores candidate and client information, accessed to consider individuals for future career opportunities and maintain accurate career history.

We ask for candidates to provide any changes so that our database stores accurate and timely information.

Individuals stored on our database will only be recipients of relevant direct marketing.

Type of Data

Our online registration form requires candidates to give details of name, telephone number, email address, most recent employer, notice period and salary. We store this information along with any other information provided in candidates’ CVs including home address, DOB and employment history.

We very often acquire references on a confidential basis and will also include this information on our internal files.

The withdrawal of consent

Candidates will have the option to request that their data be erased from our database, during, or after the original recruitment process is completed. Please note that the removal of your personal details means you will not be notified of future opportunities.

You have the right to request that your details are removed from our database at any time by emailing remove in the subject line of an email to This will be carried out within one week.

The purpose of processing

Processing would mean actions performed on personal data, such as collecting, recording, organising, storing, using and erasing. Candidate data will only be processed for recruitment purposes ie matching you to suitable vacancies and opportunities.

Recipients of personal data

Any information relevant to opportunities which you have given the consent to be put forward for, will be shared with potential employers so that they can assess your suitability for roles they may have.