Top Talent Recruitment - The Right Talent. The Right Fit.
UK GDPR & INTERNATIONAL DATA PRIVACY

Privacy Policy

How Top Talent Recruitment collects, safeguards, and processes personal data across the United Kingdom, Middle East, and Greece in compliance with UK GDPR and international standards.

Effective: January 1, 2026Last Updated: October 2026Global Scope: UK (HQ), UAE & Greece Legally Binding
Privacy PolicyTerms of ServiceCookie Policy

AES-256 Encryption

Candidate CVs and sensitive credentials are encrypted at rest with TLS 1.3 in-transit security.

Zero Data Brokering

We never monetize, sell, or rent your CV or contact details to third-party telemarketers or advertisers.

UK GDPR & ICO Compliant

Fully compliant with the UK Data Protection Act 2018 and European/Middle Eastern statutory standards.

Right to Erasure

Candidates maintain complete control to update or permanently delete uploaded CVs and profile records.

01

Introduction & Data Controller

Top Talent Recruitment (“we”, “us”, or “our”) operates the international direct talent platform accessible at toptalentrecruitment.co.uk. We connect vetted professionals directly with verified hiring authorities across our United Kingdom Headquarters (London) and regional operational hubs in the Middle East (Dubai, UAE) and Greece (Athens).

We act as the primary Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to transparency, integrity, and robust safeguards regarding how your personal information is stored, processed, and transmitted.

02

Categories of Information We Collect

We collect and securely process the following categories of information:

Candidate Profile & CV Data

Full legal name, verified email address, phone number, location/postcode, curriculum vitae (CV/resume in PDF/DOCX format), employment history, salary expectations, education credentials, portfolio links, and optional cover notes.

Employer & Organization Data

Company legal trade name, registered office address, company registration number, corporate domain email, company logo, hiring manager contact details, and job opening specifications.

Telemetry & Technical Usage Data

Anonymized IP address, browser user-agent, operating system, approximate geographic country, job search queries, referral URLs, and session engagement timestamps.

03

Lawful Bases & Purpose of Processing

Under Article 6 of the UK GDPR, we process personal information under the following legal frameworks:

  • Contractual Performance: Processing candidate applications, delivering CVs directly to employer inboxes, and providing candidate dashboards.
  • Legitimate Interests: Preventing recruitment fraud, verifying employer authenticity, scanning uploads against malware via ClamAV, and optimizing application flow.
  • Legal Obligation: Retaining statutory employment records and maintaining audit trails as required by UK and EU tax laws.
  • Explicit Consent: Sending regional career newsletters and loading non-essential marketing or analytics cookies.
04

Advertising & Analytics (GA4, AdSense)

To maintain 100% free candidate access and support platform operations, we partner with industry-standard service providers:

Google Analytics 4 (GA4)

Measures aggregated user visits with IP anonymization enabled. GA4 scripts only initialize after user cookie consent is recorded.

Google AdSense

Displays contextually relevant career opportunities. Users can manage or opt out of personalized ads via Google's Ads Preference Manager.

05

Data Retention & Security Architecture

Security is built into every layer of our platform infrastructure. We implement defense-in-depth measures to safeguard user data:

Our Technical Security Standards:

  • At-Rest Encryption: Candidate resumes and profile documents are protected using AES-256 encryption.
  • In-Transit Encryption: All platform data is transmitted strictly over modern TLS 1.3 with HSTS enabled.
  • Temporary Signed Access (HMAC): CV downloads generate temporary 15-minute expiring signed URLs. Public file access is strictly blocked.
  • Malware Inspection: All uploaded files undergo automated anti-virus stream inspection (ClamAV) prior to storage.
06

Your Statutory Rights Under UK GDPR

Under the UK Data Protection Act 2018 and UK GDPR, you hold unequivocal rights regarding your data:

Right of Access (SAR)Request a complete copy of all personal records we hold about you at zero cost.
Right to RectificationUpdate or correct any inaccurate qualifications, phone numbers, or job preferences.
Right to Erasure (Forgotten)Permanently delete your candidate profile, applications, and uploaded CV files.
Right to PortabilityExport your profile records in a machine-readable JSON/PDF format upon request.
07

Cross-Border Transfers (UK, UAE & Greece)

Because Top Talent Recruitment operates international hiring corridors connecting candidates with opportunities across the United Kingdom, United Arab Emirates (Middle East), and Greece, cross-border data routing may occur when you apply directly to an international employer.

All international data transfers comply with UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) to ensure your data maintains the same stringent protections across all jurisdictions.

08

Data Protection Officer (DPO) Inquiries

To exercise any of your statutory rights, submit a subject access request, or report a data privacy concern, please contact our appointed Data Governance team:

Appointed DPO: Legal & Compliance Directorate

Email: info@toptalentrecruitment.co.uk

Registered Address: First Floor, Office No 101, Fairlawn High Street UB1 3HB, London, United Kingdom

Telephone: +44 7447 277182 / 020 8004 0816

You also have the right to lodge a complaint directly with the UK supervisory authority: Information Commissioner's Office (ICO) at ico.org.uk.

Direct Transparency Commitment

Top Talent Recruitment operates with full salary transparency and zero recruitment markups across the United Kingdom, Middle East, and Greece.

Contact Legal Desk