Privacy Policy

Privacy & GDPR

daniel james resourcing Limited (djr) Privacy Policy

Last updated: September 2026

1. Who we are

Daniel James Resourcing Limited (“djr”, “we”, “us” or “our”) is a specialist recruitment and talent solutions business.

For the purposes of UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (and all subsequent amendments, additions and associated implanted legislation from time to time), Daniel James Resourcing Limited is a data controller. This means that we are responsible for deciding how and why we collect and use your personal information.

This Privacy Policy explains how we collect, use, store and share personal information relating to:

• candidates and prospective candidates;
• permanent, temporary, contract and freelance workers;
• individuals working through personal service companies or umbrella companies;
• client and prospective client contacts;
• suppliers and other business contacts;
• referees;
• visitors to our website; and
• anyone else who communicates or interacts with djr.

We are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

2. Data protection principles

We will process personal information in accordance with applicable data protection law.

This means that personal information will be:

• used lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes;
• adequate, relevant and limited to what is necessary;
• accurate and, where necessary, kept up to date;
• retained only for as long as reasonably necessary; and
• kept secure using appropriate technical and organisational measures.

3. The personal information we may collect

The information we collect will depend on our relationship with you.

3.1 Candidates and workers

We may collect and process information including:

• your name, title and contact details;
• your CV and employment history;
• skills, experience and qualifications;
• current and previous employers;
• salary, remuneration and rate information;
• job preferences and availability;
• location and workplace preferences;
• interview notes and feedback;
• information contained in correspondence with us;
• information obtained during telephone or video conversations;
• professional profiles and information available from publicly accessible sources;
• references and referee information;
• right to work and identity documentation;
• National Insurance number, where required;
• tax status information;
• bank and payment details, where required;
• details relating to assignments or placements;
• start and end dates;
• timesheets;
• performance information;
• compliance documentation; and
• other information reasonably required in connection with recruitment, employment or an assignment.
• any information and documentation required to comply with any contractual obligation or applicable laws in any relevant jurisdiction(s) and/or any contractual obligation in the course of our proper performance of services for you and our customers

 

3.2 Clients, prospective clients and other business contacts

We may collect information including:

• your name;
• job title;
• employer or organisation;
• business email address;
• business telephone or mobile number;
• professional profile information;
• information about your role and responsibilities;
• recruitment or resourcing requirements;
• records of our communications and interactions with you;
• notes relating to meetings and conversations;
• information available from professional networking platforms, company websites and other publicly accessible sources; and
• information relevant to our existing or potential business relationship.
• any information and documentation required to comply with any contractual obligation or applicable laws in any relevant jurisdiction(s) and/or any contractual obligation in the course of our proper performance of services for our actual or potential customers and candidates

 

3.3 Special category information

Where necessary and lawful, we may process more sensitive information, known as “special category data”.

This may include information relating to:

• health or disability;
• racial or ethnic origin; or
• other special category information that you voluntarily provide or that we are legally required to process.

We will only process this information where we have an appropriate lawful basis and, where required, an additional condition for processing special category information.

3.4 Criminal offence information

Where necessary for recruitment, placement, compliance or other legitimate business purposes, we may request, obtain and process information relating to criminal convictions or offences.

We will only process this information where permitted by applicable law and where appropriate safeguards are in place. We will only collect and retain such information where it is relevant and necessary for the specific purpose for which it is required.

4. How we collect personal information

We may obtain personal information directly from you or from other sources.

These sources may include:

• information you provide directly to djr;
• CVs, applications and registration forms;
• telephone calls, emails, messages and meetings;
• referrals and recommendations;
• referees;
• our clients;
• job boards and CV databases;
• professional networking platforms;
• company websites;
• publicly accessible online sources;
• recruitment technology and sourcing platforms;
• data enrichment and prospecting tools;
• our CRM and recruitment systems;
• marketing and business development platforms; and
• third-party service providers.

4.1 Recruitment sourcing and data enrichment

As part of our recruitment and business development activities, djr uses technology to identify potential candidates and relevant business contacts.

This may include  recruitment sourcing, prospecting, enrichment or data collection tools that we use from time to time (details of which can be made available to you upon request).

These tools may help us identify or obtain professional information from publicly available sources and other lawful data sources.

Information collected may include your:

• name;
• employer;
• job title;
• professional experience;
• professional profile;
• business email address;
• business telephone number;
• skills;
• location; and
• other information relevant to recruitment or our legitimate business activities.

The fact that information is publicly available does not remove our responsibilities under data protection law. Where we obtain personal information indirectly, we will process it in accordance with this Privacy Policy and applicable law.

 

5. How and why we use your information

We may use personal information for the following purposes.

5.1 Recruitment and talent services

We may process information to:

• identify potentially suitable candidates;
• contact you about relevant employment or contract opportunities;
• assess your suitability for roles;
• match your skills and experience against client requirements;
• introduce or submit you to clients where appropriate;
• arrange interviews;
• obtain and provide recruitment feedback;
• negotiate offers, rates and terms;
• administer placements and assignments;
• manage contractor relationships;
• undertake appropriate compliance and right-to-work checks;
• obtain references;
• manage timesheets and payments;
• maintain records of previous applications, introductions and placements;
• maintain accurate records of communications, interactions and relevant occurrences in the course of our dealings with you; and
• contact you about future opportunities which we reasonably believe may be relevant to you.

5.2 Clients and business development

We may process information to:

• provide our recruitment and talent services;
• manage existing client relationships;
• identify organisations that may benefit from our services;
• identify relevant decision-makers and business contacts;
• contact prospective clients about our services;
• respond to enquiries;
• discuss hiring requirements;
• manage contracts and commercial relationships;
• provide market information, salary information and other relevant insights;
• maintain records of communications and business relationships; and
• develop and improve our services.

5.3 Business administration

We may also process information for:

• accounting and financial administration;
• invoicing and payments;
• audits;
• legal and regulatory compliance;
• compliance with contractual terms and commitments;
• resolving disputes;
• establishing, exercising or defending legal claims;
• preventing fraud;
• IT and information security;
• maintaining and improving our systems;
• business planning and reporting; and
• analytics relating to our services and operations.

5.4 Anonymised data for organisational reporting and analytics

 

We may also store and process information in anonymised and aggregated form, in which you (and no individual) will be personally identifiable.  This may be done for purposes of statistical analysis, reporting and measurement.

Some reporting may be processed to meet legal requirements (for example, if we meet the threshold for UK gender pay gap reporting) and some may be non-mandatory (for example, statistical tracking of our overall performance in areas such as equality, diversity and inclusion).

6. Our lawful bases for processing

Depending on the circumstances, we may rely upon one or more lawful bases.

These include:

Contract

Where processing is necessary to enter into or perform a contract with you.

Legal obligation

Where processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate interests

We may process personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating a recruitment and talent solutions business;
• sourcing and identifying candidates;
• matching candidates with relevant opportunities;
• maintaining relationships with candidates, clients and business contacts;
• identifying prospective clients and relevant business contacts;
• developing our business;
• communicating with corporate clients and prospective clients;
• maintaining accurate business records;
• improving our services;
• protecting our business and systems; and
• establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider the nature of the information, the reasonable expectations of the individual and the potential impact of the processing.

Consent

In some circumstances, we may rely upon your consent. Where consent is relied upon, we may process the agreed information for the agreed purpose(s) and you may withdraw your consent at any time by notifying us in writing.

7. Direct marketing and business development

We may use professional and business contact information to communicate with existing and prospective clients about djr’s services.

This may include communication by:

• email;
• telephone;
• internet based messaging and any other digital or electronic messaging applications or tools;
• professional networking platforms; and
• other appropriate business communication channels.

Where permitted by law, we may rely on our legitimate interests to conduct proportionate business-to-business marketing.

We will also comply with all relevant legislation (for example, the Privacy and Electronic Communications Regulations (“PECR”) and the Regulation of Investigatory Powers Act 2000) where and to any extent that they apply.

You have the right to object to the use of your personal information for direct marketing at any time.

Marketing emails will provide an appropriate method for opting out or unsubscribing.

You can also contact us directly at hello@wearedjr.com and ask us not to contact you for marketing purposes.

If you opt out, we may retain limited information on a suppression list so that we can respect your preference and avoid contacting you again for the same purpose.

8. Automated processing and artificial intelligence

We use technology to assist any of our business activities, including recruitment, sourcing, administration and business development.

This may include search, matching, enrichment, automation and artificial intelligence (AI) and large language model (LLM) tools to process data and to help our consultants identify potentially relevant candidates, roles or business contacts and manage information more efficiently.

AI may be used in areas such as:

• preparation of materials, data and communications
• preparation, structuring and analysis of reports
• internal training and monitoring
• preparing transcripts of calls, meetings and online events

We shall not use your personal data to train or improve any general or public third-party AI models without your explicit consent, which may be withdrawn at any time.

Technology may assist our decision-making, but we do not make decisions which have legal or similarly significant effects on individuals solely through automated processing without appropriate safeguards.

Our consultants remain responsible for recruitment and business decisions which may impact you, where human judgement is required.

 

9. Call recording

We may use a third party provider (such as 3CX or similar) for our business telephone system with functionality to record telephone calls made to or from djr (details of which can be made available to you upon request).

Call recordings may include conversations with candidates, contractors, clients, prospective clients, suppliers and other business contacts.

Where calls are recorded, we use recordings for legitimate business purposes which may include:

• training and quality assurance;
• confirming instructions, requirements or agreements;
• recruitment and placement administration;
• maintaining accurate records of conversations;
• resolving queries or disputes and investigating complaints;
• compliance and audit purposes;
• compliance with any contractual obligation or applicable laws in any relevant jurisdiction(s) and/or any contractual obligation in the course of our proper performance of services for our actual or potential customers and candidates; and
• establishing, exercising or defending legal claims.

Where appropriate, callers will be informed that calls may be recorded in line with this policy and your full data rights before the recording starts.  We may do this by a standard notification message delivered in live conversation by our staff member who is on the call with you or via an automated interactive voice response (“IVR”) played at the start of your call.

Call recordings will usually only be stored for as long as reasonably necessary for the purposes for which they were collected, taking account of our legal, contractual and regulatory obligations. Recordings shall then be deleted and only transcription records may then be retained, again only for the purposes outlined under this Policy.  Where artificial intelligence tools are used for the purposes of creating transcripts of calls, meetings or online presentations with you, no recording shall be stored or kept for any longer than is reasonably necessary (which is usually up to a maximum of 28 days) for the tool to create the transcript and for the transcript to be checked for accuracy.

Call recordings are personal data and any recordings will be stored securely with encryption and taking all appropriate precautions to protect any sensitive information. Access to call recordings is strictly restricted to a limited number of authorised personnel who have a legitimate business reason to access them.

No intelligible audio recordings will be made or stored containing any payment card data at any time.

10. Sharing your personal information

We may share personal information where reasonably necessary to fulfil our services, contractual obligations and legal requirements, which may involve:

• existing or prospective employers and hirers;
• clients to whom we may introduce you;
• umbrella companies;
• payroll providers;
• finance and accounting providers;
• background screening or compliance providers;
• IT providers;
• CRM and recruitment technology providers;
• communications providers;
• professional advisers, including lawyers and accountants;
• insurers;
• government bodies, regulators or law enforcement agencies where required;
• suppliers supporting the operation of our business; and
• other parties where necessary to establish, exercise or defend legal rights.

We require service providers processing personal information on our behalf to use appropriate security measures and to process personal information only for authorised purposes.

We will not sell your personal information.

11. International transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom and/or the European Economic Area (EEA).

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the destination, this may include relying on:

• UK adequacy regulations;
• approved contractual safeguards such as Standard Contractual Clauses (SCCs), International Data Transfer Agreements (IDTAs) or Binding Corporate Rules (BCR); or
• other lawful transfer mechanisms.

12. Data security

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful:

• loss;
• destruction;
• alteration;
• disclosure; or
• unauthorised access.

Access to personal information is limited to employees, contractors and service providers who have a legitimate business need to access it.

Those people are required to handle personal information appropriately and confidentially.

We also maintain procedures for dealing with suspected personal data breaches and will notify affected individuals and/or the Information Commissioner’s Office where required by law.

13. Data retention

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, taking account of our legal, regulatory, contractual and legitimate business requirements.

Retention periods will vary depending on the type of information and the circumstances in which it was collected. We will regularly review the personal information we hold and will delete, anonymise or securely destroy information when it is no longer required, unless we have a lawful reason to retain it for longer.

Where we are required to retain information to comply with legal, regulatory or contractual requirements, we will retain it for the applicable period.

We may retain limited information for longer where necessary to establish, exercise or defend legal claims, deal with complaints, meet regulatory requirements, maintain an opt-out or suppression record, or otherwise comply with our legal obligations.

Our approach to data retention is set out in our internal Data Retention Schedule.

 

14. Your data protection rights

In addition to being informed of how we process your data, you also have the rights to the following (varying with circumstances):

Access

Request a copy of personal information that we hold about you.

Correction

Ask us to correct inaccurate or incomplete information.

Erasure

Ask us to delete personal information where there is no lawful reason for us to continue processing it.

Restriction

Ask us to restrict how we process your information in certain circumstances.

Objection

Object to processing based on legitimate interests.

You have an absolute right to object to processing of your personal information for direct marketing purposes.

Data portability

In certain circumstances, ask us to provide personal information to you or another organisation in a structured, commonly used and machine-readable format.

Withdraw consent

Where processing is based on consent, withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

These rights are subject to certain legal conditions and exemptions.

 

15. Where we obtain your information from another source

You may not always have provided your information directly to djr.

For example, we may identify your professional information through a job board, professional networking platform, public website, referral, sourcing platform, recruitment database or data enrichment service.

Where required by law, we will provide you with information about our processing within the applicable timeframe.

If you do not wish us to hold or process information obtained in this way, please contact us at hello@wearedjr.com.

We will consider your request in accordance with your rights under applicable data protection law.

If you have previously opted out of marketing or requested that we stop processing information for a particular purpose, we will take reasonable steps to ensure that your preference is maintained even where your details subsequently appear again through a public or third-party source.

16. Cookies and website tracking

Our website may use cookies and similar technologies to operate effectively, understand how visitors use the website and improve our services.

Where cookies or similar technologies are not strictly necessary, they will be used in accordance with applicable consent requirements.

Details of the cookies and tracking technologies currently used on our website, including their purposes and duration, should be set out in our Cookie Policy and cookie preference centre.

17. Third-party websites

Our website or communications may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties acting as independent data controllers, and we encourage you to review their privacy information before providing personal information to them.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our business;
• the technology we use;
• our processing activities; or
• applicable laws and regulatory guidance.

The latest version will be published on our website with the date on which it was last updated.

19. Contacting us

We have not appointed a Data Protection Officer.

Responsibility for data protection within djr sits with:

Danny Wrigglesworth
Director
Daniel James Resourcing Limited

Email: hello@wearedjr.com
Telephone: 020 070 9019

You can also contact us by post at our registered office.

If you have any questions about this Privacy Policy, how we use your information or wish to exercise any of your data protection rights, please contact us using the details above.

20. Complaints

If you are unhappy with how we have handled your personal information, please contact us at hello@wearedjr.com so that we can investigate and respond to your concerns.

We will acknowledge data protection complaints within 30 days and will investigate and respond to them without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.