Privacy policy for Low Carbon Recruitment Ltd – GDPR Compliance

This Privacy Policy sets out the basis on which Low Carbon Recruitment Ltd (“LCR GROUP”) will process personal information provided to us, this information is also referred to as ‘personal data’. We take our obligations in respect of the privacy of personal data very seriously and we will only process personal information as detailed in this notice, unless we inform you otherwise. In order to ensure that the personal data we hold is accurate and up to date, we request that you inform us of any relevant changes to the personal information we hold about you.

How we receive information and how we may use it

LCR GROUP receive your personal data when you apply directly for an advertised role via job boards or linkedin. This statement explains how we process personal data received into our organisation. When you register with LCR GROUP you MUST consent to us collecting and storing your personal information. You will not be able to submit your enquiry or details to LCR GROUP without consenting to us storing your personal data. LCR GROUP will obtain written confirmation consenting to the above.

What data do we collect?

CANDIDATE DATA: We only ask for details that will genuinely help us to help you, such as your name, age, contact details, education details, employment history, emergency contacts, immigration status, and financial data (where we need to carry out financial background checks). Where appropriate, and in accordance with local laws and requirements, we may also collect personal data related to your health, diversity, or details of any criminal convictions.

If you are a contractor and we place you in a role, we may also store passport details, bank account details, national insurance numbers, and other financial data.

CLIENT DATA: We need to collect and use data about you, or individuals at your organisation, in the course of providing you with services such as finding candidates who are the right fit for you or your organisation. The personal data that we collect about our clients is actually very limited. We generally only need to have your contact details or the details of individual contacts at your organisation (such as their names, telephone numbers and email addresses) to enable us to ensure that our relationship runs smoothly. We may also hold extra data that someone in your organisation has chosen to tell us.

SUPPLIER DATA: We need a small amount of data from our suppliers to ensure that things run smoothly. We need contact details of relevant individuals at your organisation so that we can communicate with you. We also need other data such as your bank details so that we can pay for the services you provide, if this is part of the contractual arrangements between us.

WEBSITE USERS: We collect a limited amount of data from our website users which we use to help us to improve your experience when using the Site, and to help us manage the services we provide. This includes data such as how you use our website, the frequency with which you access our website, and the times that our website is most popular.

How do we collect personal data?

CANDIDATE DATA: Unless you have given us explicit consent, we process your personal data as a candidate under ‘legitimate interest’, in compliance with the General Data Protection Regulations. This means that we have a clear business interest in processing and storing your personal data. In practice, this means that we have recently seen that you are looking for a new position; and, as recruiters, deem it appropriate to store your personal data in order to help you with your search.

There are two main ways in which we collect your personal data:

Directly from you; and

From third parties (e.g. social media, job boards).

As part of the services we provide, you may choose to provide us with your CV, to be viewed by our consultants and staff members who access the Site. In addition to the provisions of this Privacy Policy.

CLIENT DATA: There are two main ways in which we collect your personal data:

Directly from you; and

From third parties (e.g. our Candidates) and other limited sources (e.g. online and offline media).

SUPPLIER DATA: We collect your personal data during the course of our work with you.

ALL DATA: We may also automatically collect data about your usage of the Site using cookies and other technology (for full details of what we use see the section below on “Cookies”). To that effect, we use your IP address (a series of numbers that identifies a computer on the internet) to collect (among other things) internet traffic data, and data regarding your browser type and computer. If you do not want to receive cookies, you may reject them by using your browser settings (for help with how to do this see the section below on “Cookies”).

How do we use your personal data?

CANDIDATE DATA: The main reason for using your personal data is to help you find employment or other work roles that might be suitable for you. The more data we have about you, your skillset and your ambitions, the more bespoke we can make our service. Where appropriate and in accordance with local laws and requirements, we may also use your personal data for things like marketing, profiling and diversity monitoring. Where appropriate, we will seek your consent to undertake some of these activities.

CLIENT DATA: The main reason for using data about clients is to ensure that the contractual arrangements between us can properly be implemented and the relationship can run smoothly. This may involve identifying candidates who we think will be the right fit for you or your organisation.

SUPPLIER DATA: The main reason for using your personal data is to ensure that the contractual arrangements between us can properly be implemented and the relationship can run smoothly; as well as to comply with legal requirements.

Data gathered through cookies and similar technologies are used to measure and analyse data on visits to the Site, to tailor the websites to make them better for visitors, and to improve technical performance. We will not use the data to identify you personally or to make any decisions about you.

Our candidate promise

We will never share our candidates’ personal details or Curriculum Vitae with a third party without the candidate’s explicit consent, and then we will only share the personal information with that one company or individual.

Who do we share your personal data with?

CANDIDATE DATA: Primarily we will share your personal data with prospective employers to increase your chances of securing the job you want.

CLIENT DATA: We will share your data primarily to ensure that we provide you with a suitable pool of candidates.


If you become a candidate, client or supplier of LCR Group, we may use your personal data to send you information that we think may be of interest to you or your business. This is within our legitimate interests as a recruitment company to use your data in this way.

If you do not wish to receive any direct marketing material or communications after you submit or provide your details, please contact us using the details below (stating UNSUBSCRIBE in the heading of any email message) indicating if you do not wish to be contacted for one or more of these marketing purposes and/or via particular forms of communication e.g. email or telephone. Please note that the preferences that you state will override any registrations you or your organisation may have with the relevant preference organisations.

If you change your mind about being contacted by us in the future, or change address, or if any data that we hold about you is inaccurate or out-of-date, please let us know by emailing or writing to us. We may need to check your identity before amending your data.

How do we safeguard your personal data?

Some of the data you provide to us will be held on our computers in the UK and will only be accessed by or given to our staff working in the UK. Some of the data you provide to us may be transferred to, stored and processed by third party organisations which process data for us and on our behalf. These third parties may be based (or store or process data) in the UK or elsewhere including outside of the EEA.

We care about protecting your data. That’s why we put in place appropriate measures that are designed to prevent unauthorised access to, and misuse of, your personal data. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

How long do we keep your personal data for?

Once your personal data is on our database, we will hold your data for a period of 6 years. If we have no record of a positive interaction with you or your company (e.g. by email, phone, job application, etc.), we will delete your personal data from our system, unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities).

We maintain the right to hold personal data about specific individuals for longer than the standard 6 years. If we have stored financial data about you, we will hold on to your details for ten years. If we have placed you in a role, we will hold on to your data for ten years. This ensures that we can effectively monitor our placements and our business relationships.

Data security

LCR Group has in place administrative, technical, and physical measures on the Site and internally. These measures are designed to guard against and minimise the risk of loss, misuse, unauthorised access or disclosure, alteration, or destruction. Only employees who need the data to perform a specific job are granted access to your personal data.

Where we transfer data to third parties to enable them to process it on our behalf, we ensure that the providers meet or exceed the relevant legal or regulatory requirements for transferring data to them and keeping it secure.

We will also ensure that where personal data is transferred to a country or international organisation outside of the UK/EEA, we will comply with the relevant legal rules governing such transfers.

How can you access, amend or take back the personal data that you have given to us?

Please be aware that you have the following data protection rights:

The right to be informed about the personal data LCR Group processes about you;

The right of access to the personal data LCR Group processes about you;

The right to rectification of your personal data;

The right to erasure of your personal data in certain circumstances;

The right to restrict processing of your personal data;

The right to data portability in certain circumstances;

The right to object to the processing of your personal data that was based on a public or legitimate interest;

The right to request that we provide personal data you have given us to a third party provider of our services (where lawful basis for processing is consent and where processing is automated);

The right not to be subjected to automated decision making and profiling; and

The right to withdraw consent at any time.

Where you have consented to LCR Group processing your personal data you have the right to withdraw that consent at any time by using the contact the details below. At any time, you have the right to request that we cease processing your personal data, and to request we erase your personal data.

We will respond to your request (including providing data on whether the rights apply in the particular circumstances) within the applicable statutory time period. If we are not sure of your identity, we may require you to provide further data in order for us to confirm who you are.

Changes to this policy

We may make changes to this Privacy Policy from time to time as our business and internal practices and/or applicable laws change. We will not make any use of your personal data that is inconsistent with the original purpose(s) for which it was collected or obtained (if we intend to do so, we will notify you in advance wherever possible) or otherwise than is permitted by applicable law.

Please note: if you wish to no longer be contacted by us, we may recommend that you simply express the option to be put as ‘do not contact’ on our database, rather than full erasure. This ensures that you will not be contacted by us for 6 years. Anonymisation or erasure may mean that you may still be contacted if data re-appears on a job board.

Third parties

By the nature of our work, we share candidate personal data with clients, and vice versa. If you do not agree to this then we can not represent you effectively. We ensure that our clients are happy with this Privacy Policy, and that our clients have a similar policy in place.

We do not sell any personal data to third parties.

How to contact us

If you would like to get in touch to discuss this Privacy Policy, how we use your personal data, to exercise your rights, to provide feedback, or to make a complaint about use of your personal data, please contact us as follows:


You can also contact the Data Commissioner’s Office via or on 0303 123 1113 for data, advice or to make a complaint.


Cookies, also known as browsers or tracking cookies, are small text files that are added to your computer when you visit a website. They help websites to perform certain functions e.g. to know who you are if you log into a restricted part of a website, for shopping carts, and for tracking purposes.

We use cookies on our website.

Get in touch