Privacy Policy.

1. Introduction

Talent Bloom Recruitment Ltd (“theCompany”, “we”, “us”, “our”) is a recruitment business providing work-finding services to schools and educational institutions across England.

We process personal data in accordance with:

  • The UK General Data Protection Regulation (“UKGDPR”) 

  • The Data Protection Act 2018

  • Safeguarding Vulnerable Groups Act 2006

  • Keeping Children Safe in Education (current guidance)

  • Conduct of Employment Agencies and Employment Businesses Regulations 2003

For the purposes of data protection law, Talent Bloom Recruitment Ltd acts as a Data Controller.

2. Company Details

Talent Bloom Recruitment LtdRegistered Office Address: 23 Bridgeman Terrace, Wigan, Lancs, United Kingdom, WN1 1SX

Company Number: 16877287Email: simon@talentbloomrecruitment.co.uk

The Director is responsible for data protection compliance.

3. The Data We Collect

We collect personal data from:

  • Candidates (temporary and permanent)

  • Client contacts

  • Referees

  • Website users

3.1 Candidate Data

This may include:

  • Name, address, email, telephone number

  • Date of birth

  • CV and employment history

  • Qualifications and professional registrations

  • Right to work documentation

  • References

  • Interview notes

  • Client feedback

  • Availability and work preferences

  • Bank details (where paid via PAYE)

3.2 Special Category Data

We may process:

  • Health information (fitness to work declarations)

  • Equal opportunities data (where voluntarily provided)

Processing is carried out in accordance with Article 9 UK GDPR and Schedule 1 of the Data Protection Act 2018, and in compliance with safeguarding legislation and statutory guidance.

3.3 Criminal Offence Data

We process criminal offence data where required for roles involving regulated activity with children.

This may include:

  • Disclosure and Barring Service (DBS) information

  • Prohibition and sanction checks

  • Overseas criminal record checks

Processing is carried out in accordance with Article 10 UK GDPR and Schedule 1 of the Data Protection Act 2018, and in compliance with safeguarding legislation and statutory guidance.

4. How We Obtain Your Data

How We may obtain personal data:

  • Directly from you

  • From job boards (e.g. Reed, CV-Library, LinkedIn)

  • From referees you provide

  • From former employers

  • From the Disclosure and Barring Service

  • From professional bodies

  • Via our website

5. Lawful Basis for Processing

We process personal data under the following lawful bases:

5.1 Contract

To:

  • Provide work-finding services

  • Arrange interviews

  • Introduce or supply you to clients

  • Process payments

5.2 Legal Obligation

To:

  • Verify right to work

  • Conduct safeguarding checks

  • Comply with tax and payroll legislation

  • Comply with Conduct Regulations

  • Make statutory referrals where required

5.3 Legitimate Interests

To:

  • Maintain candidate records

  • Match candidates to suitable roles

  • Contact you regarding relevant opportunities

  • Maintain client relationships

  • Improve our services

We balance our legitimate interests against your rights.

Our legitimate interests include operating a recruitment business efficiently and matching suitably qualified candidates with client requirements. A legitimate interests assessment is undertaken where appropriate.

5.4 Consent

We rely on consent where required for:

  • Processing certain health information

  • Ongoing DBS update service checks

  • Marketing communications where soft opt-in does not apply

You may withdraw consent at any time.

6. Who We Share Your Data With 

  • We may share your data with:

  • Schools and educational institutions

  • Referees and former employers

  • Disclosure and Barring Service

  • Teaching Regulation Agency

  • HM Revenue & Customs

  • Pension providers

  • Payroll providers

  • Umbrella companies (where chosen by you)

  • IT system providers

  • Professional advisers

  • Law enforcement or regulatory bodies

  • We enter into written data processing agreements with third-party processors where required.

  • We do not sell personal data.

7. Umbrella Payroll Arrangements

Where you choose to be paid via an umbrella company:

  • We will share necessary personal data to facilitate payment

  • The umbrella company acts as a separate data controller

  • The choice of payment model rests with you

  • We do not mandate or receive financial inducements for payment choices

8. International Transfers

Where personal data is transferred outside the UK (for example, for overseas criminal checks), we ensure appropriate safeguards are in place, including:

  • UK adequacy regulations

  • International Data Transfer Agreements (IDTA)

  • Standard Contractual Clauses where required

9. Data Retention

We retain personal data only for as long as necessary.

Retention periods include:

  • Work-seeker records: minimum 1 year under Conduct Regulations

  • Candidate records: up to 6 years after last engagement (legitimate interest) or longer where required for safeguarding, legal claims, or regulatory compliance.

  • Payroll and tax records: minimum 6 years

  • Safeguarding allegations: in accordance with statutory safeguarding guidance

  • DBS information: retained only as permitted under DBS Code of Practice

Where data is no longer required, it is securely deleted or anonymised.

10. Data Security

We implement appropriate technical and organisational measures, including:

  • Secure cloud-based systems

  • Access controls

  • Encryption

  • Password protection

  • Endpoint protection

  • Role-based access

  • Secure disposal procedures

While we take all reasonable steps, internet transmission is not completely secure.

In the event of a personal data breach, we will assess the risk and, where required, notify the Information Commissioner’s Office within 72 hours and affected individuals where legally required.

11. Your Rights

You have the right to:

  • Be informed

  • Access your data

  • Rectification

  • Erasure (in certain circumstances)

  • Restrict processing

  • Data portability (where applicable)

  • Object to processing based on legitimate interests

  • Not be subject to automated decision-making

To exercise your rights, contact: simon@talentbloomrecruitment.co.uk

12. Complaints

If you are dissatisfied with how we process your data, you may contact us directly.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): 

Website: https://ico.org.uk/concernsTelephone: 0303 123 1113

13. Cookies & Website Data

Our website may use cookies and similar technologies to:

  • Improve functionality

  • Analyse usage

  • Enhance user experience

You may control cookies through your browser settings.

14. Automated Decision Making

We do not make decisions about individuals based solely on automated processing.

15. Changes to This Privacy Notice

We may update this Privacy Notice periodically. The latest version will always be available on our website.

Approval

Approved by: Simon Hillman

Director: Talent Bloom Recruitment Ltd

Date: 01/02/2026