Hansel Careers Limited - Candidate Privacy Notice
Who We Are (Data Controller)
This Privacy Notice applies to all candidates using our website www.hansel.group to search and apply for job vacancies via our website.
We take your Data Protection seriously and in accordance with UK Data Protection Act 2018, the UK General Data Protection Regulation (GDPR) and any successor legislation (the "Regulations"), we have reviewed our policies, processes and security procedures to ensure compliance with these regulations.
This privacy notice is to inform you, potential candidates, of the types of data we process about you, the reasons for processing your data, the lawful basis for processing, your rights and the retention periods of your data.
If you have any questions about your data or how we handle it, please contact us at hello@hansel.group
Data We Collect
| Data you provide to us | Processing Activity | Lawful basis |
|---|---|---|
| Personal details such as name, address, phone numbers | Profile extraction and matching | Contractual requirement |
| Right to work confirmation | Candidate to confirm right to work | Legal obligation |
| Your CV or other information supplied in CV covering letter | Profile extraction and matching | Contractual requirement |
| Details of your education, skills and employment history | Profile extraction and matching | Contractual requirement |
| Details of your ACA qualifications, certifications, training and modules completed | Profile extraction and matching | Contractual requirement |
| Public professional profiles / Social media profiles | Profile building | Consent |
| Salary expectations | Profile extraction and matching | Contractual requirement |
| All data | AI-matching optimisation, analytics, fraud prevention | Legitimate Business Interests |
| Automatically collected data from our platform | ||
| Platform activity (searches, clicks, saved jobs) | Management of our platform usage | Legitimate Business Interests |
| Technical identifiers (IP address, device logs, authentication data) | Management of our platform | Legitimate Business Interests |
How We Use Your Data — Including AI-Matching
Our AI-driven system analyses your profile, ranks suitability, provides job recommendations, and supports employer-candidate matching. We use your data for service delivery, analytics, security, and compliance.
How our AI works
Our AI system uses statistical and machine-learning models to:
- Profile your skills, experience, and preferences
- Score your potential fit to job descriptions
- Surface personalised job recommendations
- Rank candidates for employers (where configured)
- Extract and structure information from your CV
- Generate match scores and suitability rankings
- Recommend personalised job opportunities
- Suggest profile improvements or missing skills
- Provide and improve our AI-matching service
- Train our AI systems using anonymised or pseudonymised data (where possible)
Your data is also processed to:
- Allow employers to review your profile
- Support communication between employer and candidate
- Improve matching model accuracy
- Detect suspicious activity
- Prevent platform misuse
- When required, respond to law-enforcement and regulatory requests
- Maintain compliance with employment-related legislation
Human oversight
- Employers always make final hiring decisions
- You may request human review of any automated recommendation or assessment
No fully automated hiring decisions
We do not make legally binding or significant decisions solely by automated means.
Automated Decision-Making & AI Profiling
We use AI models for job-matching and scoring. These processes include profiling but do not make legally binding decisions. You may request human review or opt-out where applicable.
CV Database Retention
We may retain your CV to provide long-term matching opportunities:
- To evaluate emerging roles that align with your profile
- To reduce re-application friction in future job searches
We retain your CV unless you delete your account or request erasure:
- Active candidate accounts: As long as your account remains in use
- Inactive accounts: 12–24 months from last activity
- Talent-pool recruitment database: With your consent, we may retain your CV for an extended period (e.g., up to 3 years) to match you to future roles
Renewal requests
Before extended retention expires, we will ask you to renew or withdraw consent.
Deletion rights
You may delete your account or request removal of your CV at any time.
Data Sharing
We share data with potential Employers (joint Data Controllers). We do not sell your personal data.
Data Processors
In order to provide our services, we use third party providers for example, technology providers to host our applications and your data.
We have a data processing agreement in place with any third parties we use to process your data under our instructions, to ensure data is not compromised. Third parties must implement appropriate technical and organisational measures to ensure the security of your data.
Data Transfers outside the UK or EEA
Your data is located with processors in the UK or EEA and we have entered into Data Processing Contracts with our Processors.
Security Measures
We implement technical and organisational safeguards to protect your personal data from unauthorised access, alteration, or loss.
Your GDPR Rights
You have rights to access, correct, erase, restrict, object, request portability, withdraw consent, and complain to us about how we process your data.
Changes to this Notice
We may update this Notice periodically. Updates will be posted on our website.
Contact Us
For rights requests, questions or complaints: hello@hansel.group
Controller: Hansel Careers Limited
ICO Registration Number: ZB497441
Updated 23rd March 2026