Privacy Policy

We collect and process your information to ensure your job search is as secure, transparent and easy as possible. We understand your personal data is important and are committed to privacy and confidentiality.

Visitors to our website

When someone visits www.found.legal we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site.

How we use your personal information

Your personal information will be held by Found Legal Ltd.
Our privacy notice explains what information we may obtain from you or about you, how we will use your information, and how we will look after your information.

Our commitment

We will:

  • Only ask for and keep personal information about you which we feel is necessary to deliver the best recruitment service we can; which is in your interests, our business interests, and the business interests of potential future employers.
  • Only use your personal information in connection with the provision of our recruitment services both now and in the future.
  • Only share your personal information with prospective employers and those persons we have confirmed to you in our privacy notice. We will never sell your information to any person.
  • We may store and process your personal information outside of Europe where it is necessary for us to do so or where our IT systems are cloud-based services provided by third party service providers. We will only process your personal information outside of Europe where we have adequate safeguards in place with our clients and third-party service providers.
  • Only retain your personal information for as long as we consider it necessary in order that we can continue to provide the best recruitment service to you now and in the future.
  • Ensure that your personal information is held securely.
  • Comply with all applicable laws in the provision of our recruitment services to you and our processing of your personal information.
  • Contact you about vacancies we have now and in the future by phone, email, or by other means of electronic messaging.
  • Only send you marketing communications by email, or by other means of electronic messaging which relate to our recruitment services or other similar services which we believe will be of interest to you.

About Us

We are Found Legal Ltd, a registered company in England under company number with our registered offices at 71-75 Shelton Street London WC2H 9JQ United Kingdom.

We act as an “employment agency” for the introduction and placement of candidates for permanent or temporary roles with our clients for the purposes of the Conduct of Employment Agency and Employment Businesses Regulations (2003) (Conduct Regulations).

Our services

We are a niche employment agency and we specialise in the recruitment of in-house legal counsel and compliance staff. We provide a tailored recruitment service to our client organisations who are seeking to find talent to fill their permanent or temporary vacancies.

Our role

In delivering our recruitment services, we assist and support:

  • Client organisations in finding suitable talent for their skills needs now and in the future.
  • Candidates in identifying and exploring new and relevant employment opportunities for them now and in the future

How to contact us

If you have any queries or questions about this privacy notice, please contact our data protection manager at [email protected].

Your personal information

Personal data

Any information we hold about you which identifies you as an individual (personal data under the General Data Protection Regulations (GDPR)) may only be used by us in accordance with the requirements of the GDPR. Any personal data that we hold manually or electronically in a relevant filing system is within scope of GDPR.

When we refer to your “personal information” in this privacy notice, we refer to personal data as defined under GDPR which is protected under data protection laws.

Whose Personal Information do we collect and use

We collect, use, and store personal information in respect the following types of individuals:

Candidates (i.e. job applicants / work-seekers)
Individuals who approach us seeking a new role or to discuss a role that they have become aware of, who respond to an advertisement we publish in respect of a role, or who we approach as someone who may be interested in a role we are currently seeking to fulfil for a client organisation or who may be interested in future roles we may have

Client Contacts
Employees within the HR function, hiring managers, and other employees within our client organisations that we have dealings with when providing our recruitment service

Referees
Work and or personal referees to verify candidates employment history as part of our suitability and employment checks undertaken in the provision of our recruitment services.

Referred Contacts
Contacts whom a Candidate, Client or other third party with whom we have had dealings with in the provision of our recruitment service may refer to us or recommend we contact with respect to a role or the delivery of our recruitment services

Supplier Contacts
Employees and other authorised individuals within organisations whom have dealings with us as a consequence of their organisation delivering business and/or support services to us as a supplier to maintain and/or operate our recruitment services

We are committed to protecting and respecting the privacy of those individuals to whom we deliver our services to and those individuals whom our business or our services may affect.

Personal Information we may collect

Candidates
We may collect and process a range of personal information about you, whether obtained directly from you or obtained from a third-party source, and which includes but is not limited to contact details, work and employment history, education, professional qualifications and your personal interests that we believe are relevant to deliver our recruitment services and or to administer any contract assignments that you undertake through us.

Client Contacts and Supplier Contacts

We may collect and process personal information for our Client Contacts and Supplier Contacts and which will typically include Contact details and Service communications.

We will only collect such personal information either directly from you as a Client Contact or Supplier Contact as a consequence of our communications with you, indirectly during negotiations with a Client or Supplier, indirectly from the contract with our Client or our Supplier, or indirectly from a Job Board or via a Networking Site. We may use such personal information to contact you to discuss our recruitment services with you now and in the future, to deliver our recruitment services to you, to perform our obligations under a contract with the Client, and to keep in touch with you regarding future vacancies that you may have for which you wish to find suitable Candidates for.

Referees

We may collect and process personal information relating to Contact details for Referees who are provided to us by a Candidate.

We will only collect such information directly from a Candidate or from a Job Board which the Candidate has published their details on or profile of the Candidate from a Networking Site. Referee details will be shared with our Clients in the delivery of our recruitment services when a Candidate is introduced for roles with our Clients. Clients may therefore contact you to seek a reference on a Candidate when they are considering offering a role or upon the offer of a role to a Candidate. We will only use your Contact details for the purpose of taking up a reference for a Candidate, where we are required to do so by a client for a role that a Candidate has been introduced for.

Referred Candidates

We may collect and process personal information relating to Contact details for Referred Candidates who are provided to us by a Candidate, Client or other third party.

We will receive personal information about you directly from the individual who referred you or from a Job Board or profile for a Networking Site that you may be subscribed to. We will only use such personal information to contact you as a direct consequence of you being referred to us. We will typically ask the person referring you to confirm that you are willing to be contacted by us or in the alternative we will ask the person referring you to introduce you to us. If you express an interest in discussing a role with us now or in the future as a consequence of our contact with you as a Referred Candidate, we will register you and you will be considered a Candidate for the purposes of this privacy notice. If you are not interested in discussing a role with us and confirm that you do not wish to receive further communications from us as a consequence of you being referred to us by a Candidate, we will not retain your personal information.

Sources of Personal Information

In respect of our communications with you and the delivery of our recruitment services, we may obtain personal information from you arising from:

  • Your use of our website
  • Applications you make to roles we advertise for (via our website or via a job board)
  • When you talk to us over the phone, via email, or through any text or email messaging service

We may obtain personal information about you from third party sources:

  • Job boards
  • Networking Sites (LinkedIn, Instagram, Facebook & Twitter)
  • Referrals – a personal or professional recommendation from a third party (typically family member, friend, colleague or former employer)

We may collect further personal information about you in anticipation of or as part of on-going compliance with a contract assignment from third party sources referred to in the Candidate personal information table.

How Personal Information is protected

GDPR rules on processing personal information:

Under data protection law, we must have one or more of the following lawful reasons to process your personal information:

  • We are required to comply with a legal or regulatory requirement (Legal Obligations);
  • It is necessary to enter into and or perform our contract with you (PAYE workers only) (Contract Necessity)
  • It it is in our legitimate interest i.e. we have a business or commercial reason to use your personal information and our use is not unfair to you and does not adversely affect your rights and freedoms (Legitimate Interest); or
  • You consent to our processing (Consent)

Reasons for processing personal information

Candidates

We will use your personal information to:

  • Register your Contact details and other personal information in our database in order to consider you and discuss with you any relevant vacancies that we are instructed to submit candidates for now and in the future (Legitimate Interest)
  • Assess your skills, qualifications, and suitability for a relevant vacancy, and which may include but not be limited to interviewing you (Legitimate Interest)
  • Undertake compliance requirements with the Conduct Regulations (Legal Obligations)
  • Notify you of and carry out any standard pre-screening and or background checks that we require for any contract assignment roles (Legitimate Interest)
  • Discuss any potential role identified with you and ascertain your willingness to work in the role concerned for Conduct Regulations purposes (Legal Obligations)
  • Introduce you to a Client for a role that we have discussed with you (Legitimate Interest).
  • Discuss you as a potential suitable candidate with a Client for vacancies (Legitimate Interest).
  • Notify you of and carry out any background screening, employment verification, and or reference checks relevant to a role but only where it has been instructed by a Client (Legitimate Interest).
  • Communicate with you and the Client about the recruitment process and during each stage of such recruitment process (Legitimate Interest).
  • To keep you updated in respect of all applications that you made to us or roles that you have been submitted for by us (Legitimate Interest).
  • Keep records related to your introductions and the outcome of those submissions (Legitimate Interest)
  • Share your personal information with third parties where required by law or where necessary in pursuit of our legitimate interests (Legitimate Interest)
  • We may use your personal information to help us to establish, exercise or defend legal claims (Legitimate Interest).
  • Keep you informed of future relevant vacancies that may arise now and in the future by email, telephone and or other electronic means (marketing communication) (Legitimate Interest).
  • Contact you individually regarding a role which we believe will be of interest to you whether by email, telephone, and or other electronic means (marketing communication) (Legitimate Interest).
  • Keep you informed of developments in our recruitment services that we believe will be of interest to you by post, email, telephone, and or other electronic means (marketing communication) (Legitimate Interest).
  • Ask you for your help in finding Candidates for roles that we have e.g. through a refer a friend promotion (marketing communication) (Legitimate Interest)
  • Keep you informed about relevant professional information; published salary surveys relevant to you, networking events, and other relevant information about the industry sector or your skills sector which we believe may be of interest to you (marketing communication) (Legitimate Interest).

Our reasons for processing your personal information

We use your personal information for the above purposes identified at the end of each processing activity which involve either processing on the basis of Contract Necessity, Legal Obligations, or Legitimate Interests. Many of our activities are undertaken where we deem it relevant and necessary for our legitimate interests.
What do we mean by legitimate interests for processing Candidate personal information?

Legitimate Interest

Our processing of your personal information is necessary for us to ascertain your suitability for potential roles that we have and to ensure we are matching you to the right roles based on our understanding of your career aspirations and goals. We believe it is important that we have a rounded and informed understanding of your work history, technical and personal skills and your outside interests in order to achieve these aims.

Our sharing of your personal information with Clients regarding potential employment opportunities as well as introducing you for specific vacancies is necessary to ensure that we have the best chance of finding relevant employment opportunities for you and the best chance of us successfully filling vacancies for Clients.

Our assessment of your suitability and completion of our own pre-screening and background checks on you is necessary for us to ensure that you have the technical skills and ability to perform the assignment, and to evidence how we determine your suitability for the role if ever disputed and or audited by our Client; all of which are legitimate interests of ours.

We may collect and process personal information relating to you that we would not ordinarily undertake of our own volition, and we will advise you of any such requirements for a role when discussing the role with you. This may involve us asking you to comply with additional pre-screening requirements of a Client, in addition to those we have already undertaken for our assessment of your suitability and require you to enter into additional contractual obligations where related to contract assignments. We will only require the collection and processing of such personal information where we are asked to by the Client. (Client Requirements) Our collection and processing of such personal information is necessary for us to comply with our contractual obligations to our Client.

We may contact you by sending you marketing communications to you about potential roles, our services, and professional information which we believe are relevant to you and would be of interest to you. Our continued contact with you now and in the future on this basis is beneficial and necessary to ensure that you receive the best range and choice of employment opportunities; that we may assist and support you in your career aspirations at the various stages of your career; that our Clients continue to have access to a broad range of suitable Candidates for roles that they may have now and in the future, that Clients may receive introductions in faster timescales through our access to suitable Candidates, and that we may continue to fulfil roles for Clients to maintain a sustainable and profitable business.

Our Marketing Communications

We have already clarified our grounds for sending you marketing communications under GDPR. Under existing rules on electronic marketing communications, if we wish to send you our marketing communications by electronic mail we are either required to obtain your consent (GDPR standard) to send marketing communications or we may treat you as an existing customer (who we can treat as opted-in to marketing communications).

We rely upon your consent (GDPR standard) to send marketing communications to you.We will treat you as an existing customer on the basis that we have had dealings with you with respect to the provision of our recruitment services. We only send you marketing communications regarding relevant roles, or otherwise in connection with our recruitment services or similar services and provided that you have not opted out of receiving our email marketing communications. We do not share your personal information for marketing purposes with any other person, and provided you have not opted out of receiving our email marketing communications. You have the right at any time to opt out of receiving future email marketing communications from us or otherwise object to our future marketing communications by emailing us directly.

Client Contacts

We may use personal information to contact you to discuss our recruitment services with you now and in the future, to deliver our recruitment services to you, to perform our obligations under a contract with the Client, to keep in touch with you regarding developments in our recruitment services which we believe will be of benefit to you, and to keep in touch with you regarding future vacancies that you may have for which you wish to find suitable Candidates for.

Legitimate Interest – We have a legitimate interest in processing your personal data to ensure that we find suitable Candidates for you for vacancies that you have, to deliver recruitment services to you under contractual terms and conditions, and to ensure that you always receive the most appropriate services from us to deliver your recruitment needs.

Legal Obligations or Legitimate Interest – Less commonly, we may need to process your Contact details in the event we are required to comply any legal and or statutory obligations, and or for which we may rely upon grounds relating to Legal Obligations.

Supplier Contacts

We may use personal information to administer our rights and obligations under our contract with the Supplier, to ensure the delivery of the Supplier’s services to us, and to manage the commercial relationship between the Supplier and us.

Legitimate Interest – all of the above activities reflect processing which is in our legitimate business interests to process based upon the relationship between us and our Supplier.

Legal Obligations or Legitimate Interest – Less commonly, we may need to process your Contact details in the event we are required to comply any legal and or statutory obligations, and or for which we may rely upon grounds relating to Legal Obligations.

Referees

We will only use your Contact details for the purpose of taking up a reference for a Candidate, where we are required to do so by a client for a role that a Candidate has been introduced for.

Legitimate Interest – It is in our legitimate interest to take up references where we are required to do so at the request of our Client to ensure we comply with the terms of our contract with a Client and to ensure that our Candidate has the best chance of being successful in the recruitment process where references are required to be taken prior to an offer.

Legal Obligations or Legitimate Interest – Less commonly, we may need to process your Contact details in the event we are required to comply any legal and or statutory obligations, and or for which we may rely upon grounds relating to Legal Obligations.

Referred Candidates

We will only use your Contact details for the purpose of contacting you as a consequence of you being referred to us and in connection with our recruitment services.

Legitimate Interest – We have a legitimate interest in ensuring that we identify potential suitable Candidates that are not currently registered with us for roles that we are working on now and in the future so that we can fill vacancies that we have open and we can ensure we register and maintain details of suitable Referred Candidates for future roles to ensure that we can best meet the vacancy requirements of our Clients as they arise and so we can meet the needs of our Referred Candidates locating new employment opportunities and keeping Referred Candidates informed of suitable opportunities in the future. Upon registering with us, Referred Candidates will be considered Candidates for the purpose of this privacy notice.

Legal Obligations or Legitimate Interest – Less commonly, we may need to process your Contact details in the event we are required to comply any legal and or statutory obligations, and or for which we may rely upon grounds relating to Legal Obligations.

Security of your personal information

We have put in place measures to protect the security of your information.

Third-party providers will only process your personal information in accordance with our instructions and upon terms under which they have agreed to treat the information confidentially and to keep it secure.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees and third parties who have a business need to know.

Candidates – our Clients are data controllers in their own right for the purposes of data protection laws, and therefore are required to comply with the requirements of security under GDPR. Our terms of business require the Client to comply with the requirements of GDPR and they will have their own privacy notice and policy with respect to their own processing of personal information they collect and use. Should you wish to understand what other personal information, if any, they collect about you, and or process outside of our expectations in this privacy notice, or any queries in relation to their processing of your personal information as a data controller you should contact the Client directly.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

How long we keep your personal information

We will retain your personal information only for as long as is necessary and in accordance with the legitimate interests of our Clients, our Candidates and our own commercial needs to maintain a sustainable and profitable business but subject always to any overriding law which requires us to retain certain information for longer periods.

We believe that it is reasonable and fair that we retain personal information in accordance with the following periods:

Candidates – From the date of collection of your personal information, we expect to have on-going discussions and communications with you during your career with respect to existing and future permanent and fixed term roles however those discussions arise (Career Discussions). However, we understand that there may be periods during which we have no Career Discussions with you and after a period of time it may be reasonable to expect that your personal information is no longer of interest or relevance to us and should be deleted. Given the nature of our recruitment services and the skills and sectors that we operate in, if we have not had any Career Discussions with you for more than 5 years since our last Career Discussion, we will remove your personal information from our CRM and systems. We will retain any personal information (including any sensitive personal information) regarding a permanent or fixed term role that you have been introduced for, irrespective of whether or not you have been successful, for at least 5 years in order to comply with any Legal Obligations and or to ensure we can deal with any Legal Claims that may arise during this time as is necessary and in our legitimate interest. Should you request the deletion of your personal information before this date, we will not erase your personal data until the period above has expired.

Client Contacts / Supplier Contracts – We will retain your personal information for as long as we receive services from you or we provide recruitment services to you and for a period of up to 5 years thereafter.

Referees – We will retain your personal information for as long as a Candidate’s personal information is held by us in accordance with the above retention period.

Referred Candidates – If you do not wish for us to discuss potential roles with you having contacted you as a consequence of a referral as described in this privacy notice, we will not retain your personal information. If you express an interest in discussing potential roles when we contact you, you will become a Candidate for the purposes of retention.

If you choose not to give personal information:

You can choose not to give us personal information when we seek to collect personal data from you at any stage in the recruitment process. We may need to collect personal information by law in certain circumstances. If you choose not to give us this personal information, it may delay or prevent us from delivering our recruitment services to you or prevent us from continuing with any particular application for a role.

If you choose not to give us information that we require to undertake our assessment of your suitability for roles, we may not be able to proceed to register you and or otherwise introduce you to roles through us.

It may also be the case that a role requires us to fulfil Client Requirements to facilitate a Candidate’s introduction and or progression through the recruitment process for a particular role. If you do not wish to give us personal information in response to a Client Requirement, this could mean that we cannot progress your application with the Client concerned or we cannot introduce you to a Client where we notify you prior to your introduction. We will make this clear as soon as we are aware of any Client Requirement which affects a role you are interested in. Whilst not providing the personal information will affect the role relevant to the Client concerned, it will not affect your ability to be introduced for other roles we may have with other Clients.

Sharing your personal information

Sharing personal information with third parties

Candidates
We will share personal information in the provision of our recruitment service that we have collected about you with:

Our Clients (after we have received your permission to put you forward for the role) in order that we can discuss you as a suitable Candidate for a vacancy with the Client, in order to allow the Client to assess your suitability for an interview and or offer of a vacancy, and in order to facilitate the recruitment process (e.g. for the purpose of arranging interviews, undertaking tests etc.) and which shall include the Client’s end customer for a particular contract assignment.

Intermediary. We may be required to work with a master vendor, neutral vendor, or managed supplier of recruitment services to a Client (Intermediary), and in this circumstance we will share your personal information with the Intermediary who is managing the recruitment process for the Client and the Client. For the purposes of this privacy notice, reference to “Client” shall include any Intermediary.

Any authority; which may include but is not limited to; central and local government departments, law enforcement and fraud prevention agencies, HM Revenue & Customs, regulators and other tax authorities; other statutory regulators;

We will share your personal information with the above third parties where required by law or where we have a legitimate interest in doing so. We have a legitimate interest in:

  • complying with our obligations under the law
  • assisting the Authorities in the prevention of crime and fraud
  • assisting the Authorities in maintaining national security and protecting public security
  • where we believe it is necessary in connection with the establishment, defence, and or exercise of legal claims.

Client Contacts and Supplier Contacts

We will share personal information in the provision of our recruitment service or receipt of your service (as applicable) that we have collected about you with:

Our own third-party service providers who deliver services on our behalf and who may process your personal information in the performance of those services under our instruction (subject to agreements with our third-party service providers) and which include but not be limited to our accountants, auditors, legal advisors and IT service provider.

Any authority; which may include but is not limited to; central and local government departments, law enforcement and fraud prevention agencies, HM Revenue & Customs, regulators and other tax authorities; other statutory regulators;

We will share your personal information with the above third parties where required by law or where we have a legitimate interest in doing so. We have a legitimate interest in:

  • complying with our obligations under the law
  • assisting the Authorities in the prevention of crime and fraud
  • assisting the Authorities in maintaining national security and protecting public security
  • where we believe it is necessary in connection with the establishment, defence, and or exercise of legal claims.

Your Rights and How to Complain

Under data protection laws, you have a range of rights which help to protect you in respect of our processing of your personal information. If you are unhappy with how we deal with your request to exercise your rights, or you are unhappy with our response to your request, you may make a complaint to the Information Commissioner’s Office (ICO) who is the supervisory authority responsible for enforcing data protection laws in the UK.

Your Rights

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you. We may ask you to verify your identity as part of our security measures for the protection of personal information. We may also ask you for more information regarding your request in order to ensure that we meet our obligations fully. Whilst no fee is generally chargeable for access requests, we reserve the right to charge a fee if you make repeated requests, ask for further copies of our disclosure, or your request is considered excessive in our reasonable view. We may also decline your request for access if we believe that your request is vexatious.

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below). However, please note:
we may not be able to erase certain personal information due to our continuing legal obligations or in other circumstances allowed under data protection laws.
We cannot guarantee that you will not be contacted by us following erasure if your personal information remains in the public domain (e.g. if you have published or uploaded information to job boards and Networking Sites) and we suggest that you allow us to retain a personal identifier for our list of individuals we should not contact in an effort to prevent you being contacted again (if you request this as part of or as a consequence of any request to erase your personal information).

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. We have a right to reject your request if we decide that our interests in continuing to process your personal information override your interests, rights and freedoms in certain circumstances.

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it. We can only store your personal information during this time and will not delete or otherwise use your personal information, except in relation to Legal Claims, where it is to protect the rights of another person, or it is for reasons of important public interest., or where you have consented to a particular use.

Contact Us – Your Rights

Found Legal’s Data Protection Officer is Mila Read. If you want to review, verify, correct or request erasure of your personal information or object to the processing of your personal data, please contact us by post at Found Legal Ltd 71-75 Shelton Street, London, WC2H 9JQ United Kingdom. (You can also email us at [email protected] to speed up the response).
Right to withdraw your consent – Where you have been asked for consent for processing, you can withdraw your consent at any time. If your consent relates to a Client Requirement, you understand that we may not be able to progress your application for the vacancy concerned. If this is the case, we will let you know. Please note that you can only withdraw your consent to processing activities to which you have consented.
You can withdraw your consent by writing to Found Legal Ltd 71-75 Shelton Street, London, WC2H 9JQ United Kingdom (please email a copy of your message to [email protected] for quicker response).