Legal
Privacy Notice
Your data, your rights — plain English.
Last updated 11 July 2026
How we handle your personal data
Forma Talent Ltd ("we", "us") is a specialist recruitment company placing candidates in Salesforce, Business Applications and Revenue Operations roles. This notice explains what personal data we collect, how we use it, and your rights under the UK GDPR and Data Protection Act 2018.
Data controller
We are the data controller of the personal data we process about you. You can contact us at hello@formatalent.com for any privacy-related question or request.
What data we collect
- Contact details: name, email, phone number, LinkedIn URL.
- Employment data (from candidates): CV / résumé, career history, salary expectations, availability, right-to-work status.
- Client / hiring manager data: name, work email, company, role you are hiring for.
- Technical data: IP address, browser, pages visited (see our Cookie Policy).
How we collect it
Directly from you (when you use our forms, email us or speak to us), from your LinkedIn profile where you have made it public, and — with your consent — from professional networks.
Why we use it (lawful basis)
- Candidates: consent (UK GDPR Art. 6(1)(a)) to match you to roles and contact you.
- Clients: legitimate interest (UK GDPR Art. 6(1)(f)) to deliver recruitment services you have engaged us for.
- Legal obligation (Art. 6(1)(c)) where we must comply with employment, tax or right-to-work law.
Who we share it with
- Clients we are placing you with (candidates only — always with your knowledge).
- Service providers we rely on to run the business (hosting, email). We only share what is necessary and we have contracts in place.
- Regulators or law enforcement where legally required.
We do not sell your data. We do not use it for automated decision-making.
International transfers
Our systems are hosted in the UK / EEA. Where we transfer data outside the UK we rely on the UK IDTA or the EU Standard Contractual Clauses.
How long we keep it
- Candidate CVs and profile data: 24 months from last contact, then deleted.
- Client contact data: for the duration of our working relationship plus 6 years for tax records.
- Enquiry submissions (if you did not proceed): 6 months, then deleted.
- Cookie consent records: 6 months.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you.
- Rectify inaccurate data.
- Ask us to erase your data ("right to be forgotten").
- Restrict or object to our processing.
- Withdraw consent at any time — for candidate data this means we will delete your CV and stop contacting you.
- Data portability — receive your data in a machine-readable format.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
To exercise any of these, email hello@formatalent.com. We will respond within one month.
Security
We hold data on password-protected systems. Access is restricted to team members who need it. We keep audit logs of who accesses what. If a breach occurs that puts your rights at risk we will notify the ICO within 72 hours and inform you if the risk is high.
Changes to this notice
We may update this notice from time to time. The current version is dated 11 July 2026. Significant changes will be highlighted on this page.
Contact
Data protection queries: hello@formatalent.com. Post: Forma Talent Ltd (registered address will be added shortly).
Data controller
We are the data controller of the personal data we process about you. You can contact us at hello@formatalent.com for any privacy-related question or request.
What data we collect
- Contact details: name, email, phone number, LinkedIn URL.
- Employment data (from candidates): CV / résumé, career history, salary expectations, availability, right-to-work status.
- Client / hiring manager data: name, work email, company, role you are hiring for.
- Technical data: IP address, browser, pages visited (see our Cookie Policy).
How we collect it
Directly from you (when you use our forms, email us or speak to us), from your LinkedIn profile where you have made it public, and — with your consent — from professional networks.
Why we use it (lawful basis)
- Candidates: consent (UK GDPR Art. 6(1)(a)) to match you to roles and contact you.
- Clients: legitimate interest (UK GDPR Art. 6(1)(f)) to deliver recruitment services you have engaged us for.
- Legal obligation (Art. 6(1)(c)) where we must comply with employment, tax or right-to-work law.
Who we share it with
- Clients we are placing you with (candidates only — always with your knowledge).
- Service providers we rely on to run the business (hosting, email). We only share what is necessary and we have contracts in place.
- Regulators or law enforcement where legally required.
We do not sell your data. We do not use it for automated decision-making.
International transfers
Our systems are hosted in the UK / EEA. Where we transfer data outside the UK we rely on the UK IDTA or the EU Standard Contractual Clauses.
How long we keep it
- Candidate CVs and profile data: 24 months from last contact, then deleted.
- Client contact data: for the duration of our working relationship plus 6 years for tax records.
- Enquiry submissions (if you did not proceed): 6 months, then deleted.
- Cookie consent records: 6 months.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you.
- Rectify inaccurate data.
- Ask us to erase your data ("right to be forgotten").
- Restrict or object to our processing.
- Withdraw consent at any time — for candidate data this means we will delete your CV and stop contacting you.
- Data portability — receive your data in a machine-readable format.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
To exercise any of these, email hello@formatalent.com. We will respond within one month.
Security
We hold data on password-protected systems. Access is restricted to team members who need it. We keep audit logs of who accesses what. If a breach occurs that puts your rights at risk we will notify the ICO within 72 hours and inform you if the risk is high.
Changes to this notice
We may update this notice from time to time. The current version is dated 11 July 2026. Significant changes will be highlighted on this page.
Contact
Data protection queries: hello@formatalent.com. Post: Forma Talent Ltd (registered address will be added shortly).