Candidate Privacy Notice
Global Career Networks Limited
Last updated: 2 November 2026
1. Introduction
Global Career Networks Limited (“GCN”, “we”, “us” or “our”) is committed to protecting the privacy and personal information of individuals who engage with our recruitment and talent services.
This Candidate Privacy Notice explains how we collect, use, store and share personal information about individuals who apply for employment opportunities, register with us, are referred to us or are identified through our recruitment and talent-sourcing activities.
GCN owns and operates a number of businesses and brands, including:
- Staffbank Outsourcing Solutions Ltd – staffbank.net
- Carter Wellington Global Recruitment Group – carterwellington.com
- RemoteBench – remotebench.net
- Implexus Advisors – implexus.net
- Milne Migration Solutions – milnemigration.com
This notice primarily relates to recruitment and candidate information processed through our recruitment and staffing activities.
It should be read alongside the GCN Group Privacy Policy, available on our websites.
2. Who Is Responsible for Your Information?
The organisation responsible for the processing of candidate information described in this notice is:
Global Career Networks Limited
Company Registration Number: 09748842
Registered in: England and Wales
Registered Office: 30 Victoria Terrace, Addingham, Ilkley, LS29 0NF
Email: [email protected]
GCN is registered with the UK Information Commissioner’s Office (ICO) as a data controller.
GCN owns 70% of Staffbank Outsourcing Solutions Ltd and provides the group’s website infrastructure, CRM systems and data storage facilities.
Staffbank maintains relevant operational activities, which may include recruitment delivery, candidate sourcing, client services and recruitment administration.
Depending on the particular recruitment activity, Staffbank may process candidate information on behalf of GCN or may act as an independent data controller. Where another organisation independently determines the purposes and means of processing, it will have its own data protection responsibilities.
3. Who Does This Notice Apply To?
This notice applies to individuals whose personal information we process in connection with recruitment and talent services, including:
- Individuals applying for advertised vacancies.
- Candidates registering with our recruitment businesses.
- Individuals submitting their CV or professional profile.
- Candidates referred to us by clients, colleagues or other individuals.
- Individuals identified through LinkedIn, job boards and professional networking platforms.
- Individuals contacted directly by our recruitment consultants about potential opportunities.
- Candidates being considered for permanent, temporary, contract or other professional engagements.
- Individuals whose information is retained for consideration against future opportunities.
You do not need to have applied for a specific vacancy for this notice to apply. We may identify and contact individuals whose professional experience appears relevant to recruitment assignments we are handling.
4. What Personal Information Do We Collect?
The information we collect depends on your professional background, the opportunities being considered and the stage of the recruitment process.
This may include:
4.1 Personal and Contact Information
- Full name and preferred name.
- Email address.
- Telephone and mobile numbers.
- Residential location and country of residence.
- Nationality, where relevant.
- Professional contact information.
4.2 Professional and Employment Information
- CVs and professional profiles.
- Employment history and previous positions.
- Current employment and job title.
- Qualifications and educational history.
- Professional registrations, memberships and certifications.
- Skills, competencies and areas of expertise.
- Languages spoken.
- References and referee contact details.
- Career preferences and availability.
- Salary expectations and remuneration information where relevant.
4.3 Recruitment and Assessment Information
- Job applications and expressions of interest.
- Interview notes and feedback.
- Assessment results.
- Candidate suitability and matching information.
- Communications with recruitment consultants.
- Client feedback relating to a recruitment submission.
- Recruitment progress and placement records.
4.4 Immigration and Eligibility Information
Where relevant to a particular opportunity, we may collect:
- Nationality and immigration status.
- Visa and work authorisation information.
- Professional registration and licensing information.
- Right-to-work documentation.
- Information relating to eligibility for employment in a particular country.
4.5 Special Category and Criminal Offence Information
Certain recruitment assignments may require the processing of additional information, including health information, disability information, professional fitness information or criminal offence information.
We will only process such information where there is an appropriate legal basis and where the additional conditions required by applicable data protection legislation are satisfied.
We will only request or obtain this information where it is relevant and necessary for the recruitment activity concerned.
5. How Do We Obtain Your Information?
We obtain candidate information from several sources.
5.1 Directly From You
You may provide information when you:
- Submit your CV or application.
- Register with one of our recruitment businesses.
- Complete an online candidate form.
- Respond to a recruitment consultant.
- Attend an interview.
- Provide additional qualifications or professional documentation.
- Communicate with us by email, telephone or other channels.
5.2 Professional Networking and Recruitment Platforms
We may identify and obtain professional information from platforms and services including:
- LinkedIn.
- Online recruitment websites and job boards.
- Professional directories and industry databases.
- Publicly accessible professional profiles.
- Other recruitment sourcing platforms.
This information may include your professional experience, qualifications, current or previous employment, professional contact details and publicly available career information.
5.3 Referrals and Third Parties
We may also receive information from:
- Employers and prospective clients.
- Professional colleagues and referrals.
- Previous employers.
- Professional referees.
- Recruitment partners.
- Educational institutions and professional registration bodies, where appropriate.
Where we obtain information from sources other than you, we will provide the information required by applicable data protection legislation, including the source of the information where required.
6. Why Do We Process Your Information?
We process candidate information for the following purposes.
6.1 Candidate Identification and Sourcing
- Identifying individuals who may be suitable for recruitment assignments.
- Reviewing professional experience and qualifications.
- Building and maintaining candidate databases.
- Contacting individuals about relevant career opportunities.
- Identifying potential matches for current and future vacancies.
6.2 Recruitment and Candidate Representation
- Assessing your suitability for particular roles.
- Discussing your career preferences and employment objectives.
- Preparing candidate profiles and CV submissions.
- Introducing you to relevant employers and clients.
- Arranging interviews and facilitating recruitment processes.
- Obtaining and communicating recruitment feedback.
6.3 Compliance and Verification
Where relevant, we may use your information to:
- Verify professional qualifications.
- Check professional registrations and licences.
- Verify employment history and references.
- Establish right-to-work or immigration eligibility.
- Complete client-specific compliance and onboarding requirements.
6.4 Maintaining Candidate Relationships
We may retain your information to:
- Keep your professional profile up to date.
- Contact you about future opportunities.
- Maintain a record of previous recruitment activity.
- Understand your career preferences.
- Provide relevant recruitment services over time.
7. Our Lawful Bases for Processing
We process candidate information using the lawful bases available under applicable data protection legislation.
Depending on the circumstances, these may include:
Legitimate Interests
We may process professional information to identify and approach suitable candidates, maintain recruitment databases, match individuals with vacancies and provide recruitment services to employers.
We consider our legitimate interests alongside the privacy rights and reasonable expectations of individuals.
Where we rely on legitimate interests, you have the right to object to that processing in certain circumstances.
Consent
We may rely on consent where you have specifically agreed to a particular use of your information, including certain optional processing activities.
You may withdraw consent at any time.
Contract and Pre-contractual Steps
Where processing is necessary to take steps at your request before entering into a contract or to fulfil an agreement with you.
Legal Obligation
Where we need to process information to comply with legal or regulatory requirements.
Where special category information or criminal offence information is processed, we will also identify and rely on the additional legal conditions required by applicable legislation.
8. Sharing Your Information
We may share your information where necessary to provide recruitment services or fulfil the purposes described in this notice.
8.1 Prospective Employers and Clients
Where you are being considered for an opportunity, we may share your CV, professional profile, qualifications, employment history and other relevant information with the prospective employer or client.
We will normally seek your agreement before making a formal candidate submission to an identified employer, unless another lawful basis or arrangement applies.
8.2 Group Companies and Recruitment Teams
Your information may be accessed by authorised personnel within GCN and relevant group companies, including Staffbank Outsourcing Solutions Ltd, where necessary to provide recruitment and staffing services.
This may include recruitment consultants, resourcers, compliance personnel and recruitment administration teams.
Access is restricted according to operational responsibilities.
8.3 Recruitment and Compliance Partners
Where required, we may share relevant information with:
- Recruitment partners and professional associates.
- Qualification verification providers.
- Professional registration bodies.
- Reference-checking providers.
- Background screening providers.
- Immigration and compliance advisers.
- Relevant government or regulatory authorities.
8.4 Technology and Service Providers
We use third-party technology and service providers to support our recruitment operations.
These may include:
- EspoCRM and associated CRM infrastructure.
- IONOS hosting and server services.
- Microsoft 365, including OneDrive and Exchange Online.
- Email and communication platforms.
- Recruitment sourcing and professional networking platforms.
- Other IT, security and document management providers.
These organisations may process information on our behalf or act as independent data controllers, depending on the service provided.
9. International Data Access and Transfers
GCN maintains its principal website, CRM and database infrastructure on servers hosted by IONOS in Birmingham, United Kingdom.
Our Microsoft 365 tenant confirms the United Kingdom as the current and committed data geography for OneDrive, SharePoint and Exchange Online.
Authorised recruitment personnel based in India may access candidate information remotely through secure online systems, including EspoCRM, where necessary to perform recruitment and operational duties.
Personal information is not intentionally stored locally on computers or devices in India as part of these arrangements.
Remote access from India is nevertheless subject to applicable international data protection requirements. GCN will implement appropriate contractual safeguards and transfer assessments where required.
We may also share candidate information with employers, clients or professional partners located outside the United Kingdom where this is necessary for a recruitment assignment.
Where personal information is transferred internationally, we will use appropriate safeguards in accordance with applicable UK GDPR or EU GDPR requirements.
10. How Long Do We Retain Candidate Information?
Our normal retention period for candidate information is up to 24 months from the date of your last relevant interaction or recruitment activity.
This allows us to maintain professional candidate records and consider individuals for relevant future opportunities.
You may contact us at any time to:
- Request details of the personal information we hold.
- Request correction of inaccurate information.
- Request deletion of your information where the legal conditions for erasure are met.
- Object to certain processing activities.
- Withdraw consent where processing is based on consent.
Requests should be sent to:
We may retain certain information for longer where required by law, regulation, contractual obligations or to establish, exercise or defend legal claims.
Where information is no longer required, it will be securely deleted, anonymised or otherwise disposed of.
11. Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information where the relevant legal conditions are met.
- Request restriction of processing in certain circumstances.
- Request data portability where applicable.
- Object to processing based on legitimate interests.
- Object to direct marketing.
- Withdraw consent where we rely on consent.
- Exercise rights relating to certain automated decision-making activities.
You may exercise these rights by contacting:
We may need to verify your identity before responding.
We will respond within the applicable statutory time limits, normally one month, subject to any lawful extension.
Some rights are subject to exemptions and may not apply in every circumstance.
12. Direct Marketing and Recruitment Communications
We may contact you about employment opportunities, recruitment assignments and other professional opportunities relevant to your experience.
Recruitment-related communications are distinguished from general marketing communications about our wider business services.
Where we send electronic marketing communications, we will comply with applicable data protection and electronic marketing legislation, including PECR where applicable.
You may ask us to stop contacting you about recruitment opportunities or unsubscribe from marketing communications at any time.
We will maintain appropriate records of your preferences and objections to ensure they are respected.
13. Data Security
We take appropriate technical and organisational measures to protect candidate information against:
-
- Unauthorised access.
- Accidental loss or destruction.
- Unauthorised disclosure.
- Alteration or misuse.
- Unlawful processing.
Access to candidate information is restricted to authorised personnel who require it for legitimate recruitment or operational purposes.
Our systems use appropriate access controls and security measures to protect information held within our hosting and cloud infrastructure.
14. Automated Decision-Making and Candidate Profiling
We may use recruitment systems and software to organise candidate information, search professional profiles, identify potential matches and support recruitment activities.
These tools may assist our recruitment teams in identifying individuals whose skills and experience correspond with vacancy requirements.
Our recruitment systems are intended to support human decision-making. We do not intend to make decisions producing legal or similarly significant effects solely through automated processing without implementing the safeguards required by applicable legislation.
You may contact us if you have questions about how your information is used in recruitment assessments.
15. Complaints
If you have concerns about how we process your personal information, please contact us first so that we can investigate and attempt to resolve the matter.
You also have the right to complain to the relevant data protection supervisory authority.
For individuals in the United Kingdom:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Individuals in the European Economic Area may contact their relevant national data protection supervisory authority.
16. Changes to This Notice
We may update this Candidate Privacy Notice from time to time to reflect changes in our recruitment activities, systems, services or legal requirements.
The latest version will be published on our websites together with its revision date.
17. Contact Us
For questions about this notice, the processing of your candidate information or to exercise your data protection rights, please contact:
Global Career Networks Limited
Registered Office: 30 Victoria Terrace, Addingham, Ilkley, LS29 0NF
Email: [email protected]
Company Registration Number: 09748842
Registered in England and Wales.
