Capital Tax Recruitment Ltd
Privacy Policy and Cookie Policy
Last updated: November 2025
We are committed to protecting your privacy and handling your personal data in a lawful, fair and transparent manner. This notice explains how we collect, use and protect personal data in the course of providing recruitment and related services.
If you have any questions about this notice, please contact our Data Protection Officer using dpo@capitaltaxrecruitment.com
- Who we are
Capital Tax Recruitment Ltd
Registered office: 86 to 90 Paul Street, London, EC2A 4NE
Company number: 10287696
Data Protection Officer: Graham Young
Email: dpo@capitaltaxrecruitment.com
Website: https://www.capitaltaxrecruitment.com
We act as a data controller for the purposes of the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
- The personal data we collect
We collect, store and process the following categories of personal data when providing recruitment services.
Candidate information
- Name, contact details and location
- Career history, qualifications, skills and experience
- CVs, LinkedIn profiles, professional biographies and similar information
- Current and historical salary information
- Work eligibility information where relevant
- Notes from conversations, interviews or meetings
- Assessments, interview feedback and information relevant to a job search
- Data obtained from publicly available sources
- Information added to your record by way of accuracy checks, verification or data enrichment
Client and business contact information
- Name, contact details and role
- Information relating to hiring needs, job descriptions and recruitment activity
- Correspondence and meeting notes
Technical information
- IP address, device details and browser information
- Information on how you interact with our website
- Cookies as set out in section 11
- How we collect personal data
We collect data in the following ways.
Directly from you
- When you send a CV or apply for a role
- When you communicate with us
- When you submit information through a contact form
- When you engage with us on LinkedIn or other platforms
Publicly available sources
- LinkedIn and other professional networking sites
- Public websites, company pages and career sites
- Job boards, search engines and directories
- Professional publications and public registers
Third party sources
- Referrals from contacts within our network
- Data verification and accuracy tools
- Data enrichment or matching tools that support our recruitment processes
- Our CRM provider and related recruitment software partners
Automatically
- Cookies and similar technologies when you browse our site
We always ensure that personal data obtained from third party or public sources is processed in accordance with data protection law and is limited to what is relevant for recruitment purposes.
- Our lawful basis for using personal data
We rely on the following lawful bases when processing personal data.
Legitimate interest
We process personal data for the purpose of providing recruitment services, identifying suitable candidates, presenting opportunities, supporting clients with hiring needs and maintaining business relationships. This includes contacting individuals about relevant roles or market related information. We balance our legitimate interests against your rights and freedoms and have undertaken an internal assessment to confirm that this basis is appropriate.
Consent
Where required, for example for certain types of marketing, we may rely on your consent. You can withdraw consent at any time by contacting us.
Contract
We process personal data when necessary for the performance of a contract or to take steps prior to entering into a contract.
Legal obligation
We may process personal data to comply with legal or regulatory requirements.
- How we use personal data
We use your personal data for the following purposes.
- To provide recruitment services to candidates and clients
- To create, maintain and update records in our CRM
- To review CVs, profiles and experience against job opportunities
- To contact candidates about suitable roles
- To contact clients about candidates who may be of interest
- To introduce candidates to clients and manage the recruitment process
- To carry out pre screening, interviews and suitability assessments
- To deliver insights, updates and relevant information within the tax sector
- To comply with legal and regulatory requirements
- To maintain business operations, internal administration and record keeping
We may use tools that help us organise, structure or analyse recruitment data. These tools may assist with searching, matching, profiling or enrichment in order to present appropriate opportunities. Any such processing is always subject to review and used only in connection with our recruitment services.
You can ask us not to contact you about opportunities at any time by emailing: dpo@capitaltaxrecruitment.com
- Data enrichment and profiling
We use services that help us verify, complete or update information already held in our CRM. These services use reputable data sources, such as publicly available information, and are used to improve accuracy and ensure that our records remain relevant. These services are used only to support our recruitment functions and do not involve automated decisions that have a legal or significant effect on you.
Where profiling techniques are used to help identify suitable opportunities or to search for relevant experience, this is always overseen by a consultant and does not replace human decision making.
You have the right to request further information about any profiling that relates to you.
- Sharing personal data
We may share your personal data with the following parties.
- Clients who may wish to consider you for a role
- Technology providers who support our recruitment systems
- Data storage, CRM and email service providers
- Professional advisers including insurers or legal advisers where required
- Third parties where required by law, regulation or to protect rights or safety
We only share personal data where necessary and always ensure that appropriate safeguards are in place.
We will never sell your personal data.
- International transfers
Some of our service providers are located outside the United Kingdom or the European Economic Area. Where this is the case, we ensure that appropriate safeguards are in place. These may include standard contractual clauses, international data transfer agreements or other legally recognised mechanisms.
- Retention of personal data
We retain personal data only for as long as necessary for the purposes described in this notice.
- Candidate data: normally retained for up to six years after the last meaningful contact
- Client and business contact data: normally retained for up to six years after the end of the business relationship
- Email opt out records: retained permanently to ensure compliance
- Website analytics and cookie data: retained in accordance with section 11
We carry out regular reviews to ensure that data which is no longer required is securely deleted.
- Your rights
You have the following rights under data protection law.
- The right to access your personal data
- The right to have inaccurate data corrected
- The right to request deletion of your data
- The right to object to processing
- The right to restrict processing
- The right to data portability
- The right to withdraw consent where consent is the lawful basis
- The right to complain to the Information Commissioners Office
To exercise any of these rights, please contact: dpo@capitaltaxrecruitment.com
Further information about your rights is available from the Information Commissioners Office at: www.ico.org.uk
- Cookies and similar technologies
Our website uses cookies to improve your browsing experience and to help us understand how visitors use the site. Cookies are small text files placed on your device when you visit our website.
We use the following categories of cookies.
Essential cookies
These are required for the operation of the site and include cookies that enable basic website functionality and security.
Performance and analytics cookies
These help us understand how visitors use the website and allow us to improve the site. These may include analytics tools provided by reputable third party service providers.
Functionality cookies
These allow the site to remember choices you make and provide enhanced features.
You can adjust your browser settings to refuse cookies or to notify you when cookies are set. Please note that disabling certain cookies may affect website functionality.
Where required, our site will request your consent before placing non essential cookies.
- Security
We take appropriate technical and organisational measures to protect personal data. These include secure access controls, encryption, regular system monitoring and restrictions on who can access your data. All third party suppliers are assessed for compliance and required to handle data securely.
- Third party websites
Our site may contain links to third party websites. We are not responsible for the content or privacy practices of external sites and recommend that you review their privacy notices before providing personal data.
- Changes to this notice
We may update this privacy notice from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email.