Legal

Privacy Notice

Last updated: May 2026

Template content. This document is a credible boilerplate. Please have your solicitors review and tailor it before publication. Placeholders are shown in [square brackets].

This Privacy Notice explains how MB Talent Partners Ltd ("we", "us", "our") collects, uses, shares and protects personal data when you interact with us as a candidate, client, supplier, introducer or website visitor.

We are the data controller of your personal data. We are committed to handling your data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

MB Talent Partners Ltd, a company registered in England and Wales (company no. [00000000]), registered office: [Registered office address]. Our ICO registration number is [ZA000000].

Data protection enquiries: dpo@mbtalentpartners.co.uk.

2. The data we collect

If you are a candidate

  • Identity and contact information (name, email, phone, address)
  • Career information (CV, work history, qualifications, references, salary expectations)
  • Right-to-work documentation, regulatory standing (SRA / CLC / CILEx) and AML information where required
  • Diversity information, where you choose to provide it, on an aggregated and anonymised basis

If you are a client, introducer or supplier contact

  • Name, role, business contact details and information about your firm
  • Records of our communications with you and the engagements we work on together

If you are a website visitor

  • Strictly necessary cookies (see our Cookie Policy)
  • With your consent: analytics data about how the site is used
  • Information you submit through our forms (e.g. contact, CV upload)

3. Lawful bases

We rely on the following lawful bases under Article 6 UK GDPR:

  • Legitimate interests — to provide recruitment services, contact candidates and clients about relevant opportunities, and operate our business
  • Contract — to perform our agreement with you (for candidates we are representing or clients we are working with)
  • Legal obligation — to comply with right-to-work, AML and tax requirements
  • Consent — for non-essential cookies and direct marketing where required under PECR

4. How we share your data

We do not sell personal data. We share data only as needed to deliver our service and on a confidential basis:

  • Hiring firms — only where you have given specific, role-by-role consent for us to share your CV
  • Service providers we use to operate the business — including Attio (CRM), Make.com (workflow automation), Algominds (sourcing intelligence), our hosting providers, our accountants and our solicitors
  • Regulators and law enforcement — where we are legally required to do so

All processors act under written contracts that meet UK GDPR Article 28 requirements.

5. International transfers

Where personal data is transferred outside the UK, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses, supplemented where appropriate by additional technical and organisational measures.

6. How long we keep your data

  • Candidates: three years from our last meaningful contact with you, after which we will either delete your record or contact you to renew consent
  • Clients: for the duration of our relationship and six years after the end of the last engagement, in line with statutory limitation periods
  • Right-to-work and AML records: as long as required by law (typically two years after the end of an engagement, longer where required by AML legislation)
  • Website analytics (with consent): a maximum of 26 months

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Request erasure where the data is no longer needed
  • Restrict or object to certain processing, including direct marketing
  • Receive your data in a portable format
  • Withdraw consent at any time, where we rely on consent

To exercise any of these rights please email dpo@mbtalentpartners.co.uk. We will respond within one month.

8. Complaints

If you are unhappy with how we have handled your personal data you may complain to the Information Commissioner's Office at ico.org.uk. We would, however, appreciate the opportunity to address your concerns first.

9. Changes to this notice

We may update this Privacy Notice from time to time. The date at the top of the page shows when it was last updated.