Last Updated: 24 November 2025

1. Who We Are

RGM Partners Ltd (“RGM Partners”, “we”, “our”, or “us”) is a private limited company registered in England and Wales under company number 16615779, with its registered office at Eldo House, Kempson Way, Bury St Edmunds, Suffolk, IP32 7AR, United Kingdom.

We provide recruitment and talent advisory services to companies and professionals across the United Kingdom.
We are a Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact us:
hello@rgmpartners.co.uk or +44 (0)20 8135 0837

If you have any questions about this policy or how we process your data, you can contact us at the above email address. You also have the right to complain to the Information Commissioner’s Office (ICO) (www.ico.org.uk).

2. Scope of This Policy

This Privacy Policy explains how we collect, use, and protect personal data relating to:

• Candidates applying for or enquiring about roles;

• Clients and prospective clients;

• Suppliers and partners;

• Visitors to our website.

3. What Data We Collect

A. Candidates

When you apply for a role or register with RGM Partners, we may collect:

• Full name, contact details (email, phone number, address);

• CV/resume, employment history, skills, education, and qualifications;

• Salary expectations, notice period, and career interests;

• Interview notes and communications during the recruitment process;

• References and feedback from previous employers or referees.

We may also process limited special category data (e.g. health information) only if necessary to make reasonable adjustments during interviews, and always with your consent.

B. Clients and Prospects

We collect:

• Business contact details;

• Communications, job specifications, and contractual information;

• Payment, billing, and correspondence records.

C. Suppliers and Partners

We collect:

• Business contact and payment details;

• Contractual and correspondence information.

D. Website Visitors

We collect:

• IP address, browser type, device information;

• Usage and analytics data via cookies (see Section 11 below);

• Information provided via contact forms or newsletter sign-ups.

4. How We Collect Your Data

• Directly from you (CV uploads, phone calls, emails, LinkedIn, or form submissions);

• From publicly available sources such as LinkedIn or job boards;

• From referrals or recommendations;

• From clients or referees;

• Automatically through cookies and analytics tools on our website.

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

PurposeLegal BasisTo provide recruitment and placement servicesLegitimate Interests (matching candidates with opportunities)To enter into or perform a contractContractTo comply with legal or regulatory obligationsLegal ObligationTo send marketing to business contactsLegitimate Interests (B2B marketing, with opt-out option)To maintain website functionality and analyticsConsent (for non-essential cookies)To handle complaints or legal claimsLegitimate Interests / Legal Obligation

6. How We Use Your Data

We may use your data to:

• Match you with relevant job opportunities;

• Share your CV with clients (only with your consent);

• Communicate with you about vacancies, interviews, and feedback;

• Maintain business relationships with clients and suppliers;

• Improve our website and services;

• Comply with legal or regulatory requirements.

7. Data Sharing

We may share your data with:

• Clients or prospective employers (with your prior consent);

• Technology and infrastructure providers (e.g. Zoho CRM and Microsoft OneDrive, both of which operate under GDPR-compliant terms);

• Professional service providers such as accountants, auditors, or legal advisers;

• Regulators or authorities where legally required.

All third parties are required to maintain data security and use your data only as instructed by us.

8. International Data Transfers

If data is transferred outside the United Kingdom (for example, to our cloud providers), such transfers will comply with the UK GDPR using:

• Adequacy decisions (approved countries); or

• UK International Data Transfer Agreements (IDTA) or Addenda to Standard Contractual Clauses.

9. Data Retention

We retain data only as long as necessary for the purposes set out above.

Data TypeRetention PeriodCandidate data (CVs, communications)Up to 3 years from last contactClient and supplier recordsUp to 6 years after contract endReferee or reference dataLinked to candidate recordMarketing contactsUntil you opt-out or after 2 years of inactivityWebsite analytics / cookiesSee cookie section below

You may request deletion of your data sooner (see Section 10).

10. Your Rights

You have the following rights under UK GDPR:

• Access – Request a copy of your data;

• Rectification – Request correction of inaccurate data;

• Erasure – Request deletion (“right to be forgotten”);

• Restriction – Request limited processing;

• Data portability – Request transfer to another controller;

• Object – Object to processing (e.g., direct marketing);

• Withdraw consent – Where processing is based on consent.

To exercise these rights, contact us at hello@rgmpartners.co.uk.
We will respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

11. Cookies

Our website uses cookies to improve performance, enhance user experience, and gather analytics. Some are essential for functionality, while others are optional and require your consent.

Cookie TypePurposeExample / ProviderDurationConsent RequiredEssentialEnables website functionality (forms, security, etc.)Site CMSSessionNoAnalyticsMeasures traffic and usage patternsGoogle Analytics6–24 monthsYesPerformanceImproves speed and responsivenessHosting/CDNSessionNoPreferenceSaves user preferences (e.g., cookie banner choices)CookieConsent6–12 monthsYes

You can manage or delete cookies via your browser settings at any time.

12. Security

We use organisational and technical measures to keep your data secure, including encryption, access controls, and secure storage via Zoho CRM and Microsoft OneDrive (both GDPR-compliant platforms).
All staff handling personal data receive regular data protection training.

13. Links to Other Websites

Our website may include links to third-party sites (e.g., LinkedIn, client websites). We are not responsible for their privacy practices and recommend reviewing their respective policies.

14. Children

We do not knowingly collect or process data from individuals under 16 years of age. If you believe we have received such data, please contact us and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be posted on our website with the “Last Updated” date above.

16. Contact

If you have any questions or wish to exercise your rights, contact:
RGM Partners Ltd
Eldo House, Kempson Way, Bury St Edmunds, Suffolk, IP32 7AR
hello@rgmpartners.co.uk or +44 (0)20 8135 0837

You may also contact the Information Commissioner’s Office (ICO) via www.ico.org.uk or by phone at 0303 123 1113.