Devonshire Appointments Limited (“Devonshire”, “we”, “us”, “our”) is committed to protecting the privacy of our candidates, clients, suppliers and website users.
This policy explains what personal data we collect, how we use it, how we protect it, and your rights under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Registered office:
Lower Ground Floor, Park House
16–18 Finsbury Circus
London EC2M 7EB
Company Registration Number: 2145418
Who We Are
Devonshire Appointments Limited is a recruitment agency and employment business. We process personal data (including sensitive personal data) in order to provide services to our clients, candidates and suppliers. In doing so, we act as a data controller.
What personal data we may collect from you
Candidates
We may collect:
- Full name and contact details
- CV, employment history (typically up to 10 years) and qualifications
- Right to work documentation
- Salary details and National Insurance number
- Nationality
- Referee details
- Limited company details (where relevant)
- Interview notes and feedback
- Communications between us
This list is not exhaustive.
Candidates – Special Category Data
Where required by a client or by law, we may process special category data, including:
- Health information (e.g. sickness records where relevant to a role)
- Disability information
- Criminal conviction data (where legally required)
- Financial background checks (e.g. CCJs or bankruptcy, where role-specific)
We only process this information where there is a lawful basis to do so.
Clients
We may collect:
- Company name and registration details
- VAT number
- Hiring manager name, title and contact details
- Communications between us
- Feedback relating to candidates
- Marketing preferences
We may source professional contact details from publicly available sources such as LinkedIn, where this is relevant to our recruitment services.
Suppliers
We typically collect:
- Business contact name
- Contact details
- Contract and payment information
How We Collect Data
We collect data:
- Directly from you (CVs, registration forms, email, phone, meetings)
- From job boards and professional networking platforms
- From referrals
- From publicly available sources
- From clients providing references
Where we collect your data indirectly, we will inform you of the source.
How We Use Your Data
Candidates
We use your data to:
- Provide work-finding services
- Assess suitability for roles
- Submit your details to clients (with appropriate legal basis)
- Communicate with you
- Provide interview and salary advice
- Manage payroll (where applicable)
- Meet legal and regulatory obligations
- Send relevant marketing communications (in line with your preferences)
Clients
We use your data to:
- Provide recruitment services
- Maintain business relationships
- Respond to enquiries
- Conduct surveys and market insight research
- Fulfil contractual obligations
- Send marketing communications
Suppliers
We use your data to:
- Manage contracts
- Communicate
- Meet legal and financial obligations
Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
- Legitimate interests – providing recruitment services and maintaining business relationships
- Contractual necessity – where processing is required to fulfil a contract
- Legal obligation – compliance with employment and tax legislation
- Consent – where required, including certain marketing and special category data processing
Where we rely on legitimate interests, we ensure these are balanced against your rights.
Sharing Your Data
We may share your data with:
- Prospective employers
- Payroll providers (e.g. RSM InTime)
- Umbrella companies and limited companies
- IT and CRM providers
- Background screening providers
- Professional advisers (lawyers, accountants)
- Government and regulatory authorities where required
All third parties are required to maintain appropriate security measures and only process data in line with our instructions.
We do not sell personal data.
International Transfers
We work with clients in the UK, EU, US and APAC. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as International Data Transfer Agreements (IDTAs) or equivalent safeguards.
Data Retention
We retain personal data only for as long as necessary.
As a recruitment agency, we are required under the Conduct of Employment Agencies and Employment Businesses Regulations 2003 to retain certain records for at least one year.
Where consent is relied upon, we typically retain candidate data for up to six years following last meaningful contact, unless you request deletion sooner.
Payroll data is retained in line with HMRC and employment legislation requirements.
Marketing data is retained until you opt out.
Your Rights
Under UK GDPR, you have the right to:
- Be informed about how your data is used
- Access your data
- Request correction of inaccurate data
- Request erasure (in certain circumstances)
- Restrict processing
- Object to processing based on legitimate interests
- Data portability (where applicable)
- Withdraw consent at any time
To exercise your rights, contact: [email protected]
You also have the right to lodge a complaint with the UK regulator, the Information Commissioner’s Office (ICO).
Marketing Preferences
You can opt out of marketing communications at any time by:
- Clicking “unsubscribe” in our emails
- Emailing [email protected]
We will retain a suppression record to ensure your preferences are respected.
Contact Us
For data protection queries: [email protected]
For general enquiries: [email protected]
Updates to This Policy
We may update this policy periodically. The latest version will always be available on our website.
Last updated: February 2026
Devonshire Appointments Limited is owned by Paragon Works.
This website was created and is managed by Shane Jones Limited.