Privacy Notice

Node & Vector is the trading name of BLC 121 Limited, a company incorporated in England and Wales (company number 10819147), with its registered office at 4th Floor Radius House, 51 Clarendon Road, Watford, England, WD17 1HP.

We are an executive search and recruiting firm providing work-finding services to clients and work-seekers. In providing these services we process personal data, and in doing so we act as a data controller. We are registered with the Information Commissioner’s Office (ICO).

Your privacy matters to us. If you have any questions about this notice or about how we use your data, please contact us at anthony@nodevector.com or write to us at the address above.

You may give us your personal data directly, for example when you contact us, send us your CV, or instruct us as a client. We may also collect it from other sources, such as job boards, LinkedIn and other professional networking sites, referrals, and publicly available professional information.

We only collect the personal data we genuinely need to provide our services. We keep it accurate and up to date, use it only for the purposes for which it was provided, and do not keep it for longer than necessary. We only use your personal data when the law permits us to do so.

We process candidate and prospective candidate data so that we can match the right people with the right roles. We collect only the information we need, which is necessary for our legitimate interests in providing our work-finding services.

We may collect and hold your data in the following situations:

• You apply or make contact directly, through our website, by email or phone, via a job board or LinkedIn, or in person.
• You are referred to us by a third party, such as a colleague or contact. Where this happens, we will tell you that we have received your data and give you the option to object to it being added to our database.
• We identify you as a prospective candidate, for example from LinkedIn, other professional sources or our own research. Where this happens, we will tell you that we have collected your data and give you the option to object to it being added to our database.

Where we have not dealt with you directly, the data we process typically includes your name, contact details, location, education and employment history, and your professional online profile. We may process other information about you only where you have chosen to share it with us.

We share candidate data with clients on a confidential basis where we consider you may be suitable for a role. We will discuss a role with you before formally putting you forward, and we do not normally share your contact details with a client until you have agreed to be introduced.

We keep candidate data for as long as we are in meaningful contact with you, including written and verbal communication and engagement with our messages. If we have had no meaningful contact for three years, we will securely delete your data. Where you become a contractor and we have a contract with you, we are required by law to keep basic contact, identity, financial and transaction data for six years after the contract ends, for tax purposes.

We process client and prospective client data so that we can introduce and match suitable candidates to you. We collect only the information we need, which is necessary for our legitimate interests in providing our work-finding services.

We may collect and hold your data where you engage our services directly, where you are referred to us by a third party, or where we identify you as a prospective client through events, LinkedIn, other professional sources or our own research. Where you are referred to us or identified by us, we will tell you that we hold your data and give you the option to object.

The data we process typically includes your name, job title, employer, contact details and professional online profile, together with records of our dealings with you.

Where we have a contract with you, we are required by law to keep basic contact, identity, financial and transaction data for six years after you cease being a client, for tax purposes. Where there is no contract, we keep your data while we are in meaningful contact with you and will securely delete it after three years without meaningful contact.

We process referee and emergency contact data only to support our core service of connecting candidates with clients and, where relevant, to support our candidates.

• If you are a referee, a candidate will have given us your details as part of a hiring process. We will contact you to ask whether you are willing to provide a reference and will give you the option to object to your data being processed. We hold this data while the candidate remains on our database. The data we process is normally your name, contact details and organisation.
• If you are an emergency contact, a candidate will have given us your details. We hold this data while the candidate remains on our database, and you may object to it being processed. The data we process is normally your name, relationship to the candidate and contact details.

We process supplier data to manage our contractual arrangements and to comply with our legal obligations. We are required by law to keep basic contact, identity, financial and transaction data for six years after you cease being a supplier, for tax purposes.

We process your personal data if you apply to join our team, which is necessary for our legitimate interests in recruiting the right people. We keep application data for two years and then securely destroy it, unless you ask to be kept on file for future roles, or you are successful and join us.

This applies to everyone who uses our website. We process the limited data we need to provide a good website experience and to support our services.

Cookies and IP addresses. We use cookies, which are small text files placed on your device when you visit, to help our website work and to understand how visitors use it. You will be asked for your consent to non-essential cookies when you first visit, and you can manage your preferences at any time. We also use a third-party service to maintain the security and performance of our website, which processes the IP addresses of visitors.

We do not generally seek to collect special category data. We may, however, process some sensitive data where you are a candidate or apply to work with us, for example details of medical conditions or disabilities that you disclose voluntarily.

For some roles we may carry out a financial background check, or check for any criminal convictions, where this is relevant to the position. We will always ask for your explicit consent before doing so.

We may also collect information about racial or ethnic origin or other characteristics for equal opportunities monitoring, again only with your specific consent, and any reporting will be anonymised.

We rely on the following lawful bases:

• Legitimate interests — to provide and operate our work-finding services, to maintain a database of candidates and contacts, and to communicate with you about roles and our services. We have considered whether these interests are overridden by your rights and freedoms, and we believe they are not.
• Performance of a contract — to manage our engagements with clients, contractors and suppliers.
• Consent — where required, for example before sharing certain candidate data, carrying out background checks, or sending some marketing communications. You can withdraw consent at any time.
• Legal obligation — where we are required to process or retain data by law, for example for tax purposes.

We may send you marketing communications about similar services where we are permitted to do so under our legitimate interests or with your consent. You can opt out at any time by clicking the unsubscribe link in any marketing email or by contacting us at anthony@nodevector.com.

We may share your personal data with:

• Clients, where you are a candidate we consider suitable for a role, on a confidential basis and as described above.
• Candidates, where you are a client who has engaged our services.
• Service providers who support our business, such as our IT, hosting and applicant-tracking software providers. They act as data processors on our behalf, are bound by contract to keep your data secure, and may only use it to provide their service to us.
• Regulators, law enforcement or other authorities, where we are required to do so by law, or where there is an immediate risk to someone’s health or safety.

We do not sell your personal data, and we will not pass it to any other third party without your consent unless the law requires us to.

We are based in the United Kingdom and primarily process data here. Some of our clients and service providers may be located outside the UK or the European Economic Area. Where we transfer your data internationally, we take steps to ensure it is protected by an appropriate safeguard, such as an adequacy decision or standard contractual clauses, as required by UK data protection law.

We have appropriate technical and organisational measures in place to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. We also have procedures to deal with any suspected personal data breach, and we will notify you and the ICO where we are legally required to do so.

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Rectify data that is inaccurate or incomplete
• Erase your data in certain circumstances
• Restrict our processing of your data in certain circumstances
• Object to processing based on legitimate interests, and to direct marketing at any time
• Data portability, in certain circumstances
• Object to automated decision-making and profiling that has legal or similarly significant effects

To exercise any of these rights, contact us at anthony@nodevector.com. We may ask you to verify your identity. We will respond within one month, and there is normally no charge.

We may update this notice from time to time. The current version is always available on our website, and the date at the top shows when it was last updated.

If you have any concerns about how we handle your personal data, please contact us at anthony@nodevector.com so we can help. You also have the right to complain to the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the chance to address your concerns before you approach the ICO, so please do contact us first.