Privacy Notice for Candidates & Job Seekers
Bluestone HR Ltd (the company) is a HR and recruitment business which provides HR support services to its clients and candidates.
We will aim to comply with the requirements of the GDPR to ensure that personal data provided to us is carefully processed.
Data protection compliance within the organisation is the responsibility of the Director.
Personal data – what is collected and why
We will collect personal data as part of the human resources services we deliver to clients and their employees, which may include recruitment processes covering external applicants. We will collect and process sensitive personal data only as is necessary and in compliance with all applicable legislation.
The data could include;
- name, address and contact details including email address and phone number;
- details of your qualifications, skills, experience and employment history;
- information about your current level of remuneration, including benefit entitlements;
- whether or not you have a disability for which an organisation needs to make reasonable adjustments during the recruitment process; and
- information about your entitlement to work in the UK.
By applying for a role, candidates consent to us collecting and processing personal data supplied by them and to disclosing this information to prospective employers in connection with a recruitment process.
Personal data and third parties
As part of a recruitment process, we may pass personal data to prospective employers. Please note that as a result, applications may be transferred to the relevant employer, who may retain a copy of the documents or distribute them to third parties. Clients and their employees who may have access to personal information are required to keep the information confidential.
We may share your data with third parties involved in providing our services, including (but not limited to) legal and professional advisers with whom we work with, subcontractors and services such as accountancy or marketing support services. We will also use third party suppliers to process your data, such as software solutions providers.
With the exception of a prospective employer, we will not share your data with third parties, unless your application for employment is successful and an offer of employment is made. We may then share your data with former employers to obtain references for you, employment background check providers to obtain necessary background checks and the Disclosure and Barring Service to obtain necessary criminal records checks.
We do not share information with third parties for direct marketing purposes.
Safeguarding your data
The security of any personal data is extremely important to us and access is only provided to prospective employers as part of a recruitment process.
We will take all reasonable physical, electronic and administrative steps to safeguard personal data to protect it from loss, misuse, unauthorised use, access, inadvertent disclosure, alteration and destruction.
We will strive to protect all personal data, but it must be noted that despite reasonable precautions no data transmission or storage can be guaranteed to be 100% secure. Therefore, anyone disclosing any personal information to us online or otherwise, must understand that they do so at their own risk.
Storage of data
Information provided by clients or applicants will be stored in paper records or on computer systems in accordance with the Data Protection Act 1998.
Personal data will not be kept longer than is necessary for the purposes for which it was supplied. If you want to request that any of your personal data is deleted before that time then email
Your rights in relation to your data
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.
If you want us to do this or if you want to exercise any of your rights with respect to the access, processing, accuracy, storage, deletion or any other aspects of your personal data then please contact
If you make a request relating to your data protection rights, we will consider it in accordance with all applicable data protection laws and regulations. No administration fee will be charged unless the request is deemed to be excessive.
We hope this privacy notice has been helpful in setting out how we handle your personal data. If you have any questions or a query that hasn’t been covered, please contact us by email in the first instance at
The supervisory authority in the UK for data protection matters is the Information Commissioner (ICO). If you think your data protection rights have been breached in any way by us, you are able to make a complaint to the ICO.
Last reviewed: October 2023
