1. Purpose
This policy explains how Recrovia retains, reviews and securely deletes personal data in accordance with UK GDPR and the Data Protection Act 2018.
2. Scope
Applies to candidate accounts, employer accounts, CVs, job adverts, messages, enquiries, support requests and platform usage records.
3. Principles
Personal data will only be kept for as long as necessary, reviewed regularly, protected against unauthorised access and securely deleted when no longer required.
4. Retention Periods
Suggested retention periods:
- Candidate accounts: up to 24 months after last activity.
- Employer accounts: up to 6 years after the end of the business relationship where contractual records are required.
- Job adverts: up to 24 months.
- Candidate applications: up to 24 months unless deleted sooner.
- Customer service enquiries: up to 3 years.
- Invoices and financial records: 6 years or longer where required by law.
- Cookie consent records: retained for compliance purposes.
5. User Rights
Users may request access, correction, deletion or restriction of their personal data where applicable under UK data protection legislation.
6. Secure Deletion
When retention periods expire, information will be securely deleted or anonymised unless a legal obligation requires longer retention.
7. Legal Holds
Data may be retained for longer where required for legal claims, fraud prevention, regulatory investigations or compliance with applicable law.
8. Responsibilities
Able Personnel UK Ltd is responsible for implementing and reviewing this policy. Staff and service providers must follow approved data handling procedures.
9. Review
This policy will be reviewed periodically and updated when legislation or business practices change.