Privacy Policy
Last updated 11 September 2026
This policy explains what personal information Doncaster Personnel UK collects, why we collect it, who else sees it, how long we keep it, and the rights you have over it under UK data protection law: the UK GDPR and the Data Protection Act 2018.
Who we are
Doncaster Personnel UK is a recruitment agency based at 9 Tresmere, Pittville Circus, Cheltenham GL52 2PU. We decide how and why your personal information is used, which in data protection terms makes us its controller.
Our data protection contact is Victoria O’Connor, Founder & Director. Get in touch with her at enquiries@doncasterpersonnel.co.uk about anything in this policy.
Who this policy covers
- People who visit this website.
- People who contact us, through the website form or by email.
- Candidates we help to find work.
- Clients, and the people at client organisations we deal with.
What we collect
When you contact us
The contact form asks for your name, company, phone number, email address, the service and industry you are interested in, and your message. Only your name, phone number and email address are required.
When you work with us as a candidate
The information you choose to give us, such as your CV, work history, qualifications, the kind of role you are looking for and your contact details. With your knowledge, we may also collect references and the results of background checks. Checks involving sensitive information, such as criminal records, are only carried out where the law allows it and the role requires it.
When you work with us as a client
Contact details for the people we deal with at your organisation, and details of the roles you ask us to fill.
When you visit this website
Like almost every website, ours receives your IP address, the number that identifies your internet connection, each time a page loads. We use it in two narrow ways:
- To stop the contact form being flooded with messages, we keep a scrambled, one-way version of your IP address that cannot be turned back into the original. It is deleted within two hours.
- Our hosting provider keeps short-lived technical logs to keep the site running and secure.
We do not use analytics or advertising trackers, and we do not build profiles of visitors.
Why we use it, and our legal basis
The law requires a lawful basis for every use of personal information. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry | Legitimate interests, because you asked us to get in touch. Where your enquiry is about using our services, also taking steps at your request before a contract. |
| Find you work, or find candidates for you | Contract, or legitimate interests in providing recruitment services. We will always check with you before sending your details to a prospective employer. |
| Right-to-work checks and keeping records | Legal obligation. |
| Keep the website and contact form secure, and stop spam | Legitimate interests. |
We will not send you marketing emails unless you have agreed to receive them.
Automated checks on the contact form
Google reCAPTCHA checks whether a form submission looks as though it came from a person or from an automated program. If it looks automated, the message is not sent, and you can email us directly instead. The check is not used to make any other decision about you.
Who we share it with
We never sell your information. We share it only with:
- Prospective employers, if you are a candidate, and only with your agreement.
- Referees and background check providers, with your knowledge, as part of checks you have agreed to.
- Authorities, where the law requires it.
- Service providers who run parts of our business for us. They may only use your information on our instructions:
| Provider | What they do for us |
|---|---|
| Vercel | Hosts this website and runs the contact form. |
| reCAPTCHA spam protection and the office map on the contact page, and the website’s fonts on every page. | |
| Resend | Delivers contact form messages to our inbox. |
| Upstash | Stores the scrambled IP addresses used to limit form submissions. |
| Namecheap | Forwards email sent to our enquiries@ address. |
International transfers
Some of these providers are based in, or store information in, the United States. Where your information is handled outside the UK, we rely on an approved safeguard such as UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement.
How long we keep it
We keep records for five years, then delete them or make them fully anonymous. The scrambled IP addresses used to protect the contact form are deleted within two hours, and our hosting provider’s technical logs are kept for a short time only.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- have anything inaccurate corrected
- have your information deleted
- ask us to limit how we use it
- object to us using it
- receive it in a format you can take to someone else
- withdraw your consent at any time, wherever we rely on it
To use any of these rights, email Victoria at enquiries@doncasterpersonnel.co.uk. It is free, and we will reply within one month.
Cookies
This website does not set any cookies of its own. It stores one small note in your browser for the length of your visit so that the opening animation only plays once, and that note is deleted when you close the tab.
The contact page uses two Google services, reCAPTCHA and Google Maps, which may set their own cookies. Google explains how in its privacy policy (opens in a new tab).
If you are unhappy
Please tell us first, so we have the chance to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint (opens in a new tab) or on 0303 123 1113.
Changes to this policy
We will update this page if the way we handle personal information changes. The date at the top shows when it last changed.
The short version
- Data protection contact: Victoria O’Connor, enquiries@doncasterpersonnel.co.uk
- How long we keep records: five years
- Selling your data: never, for any purpose