Last updated: July 2025
Cititec is committed to protecting and respecting your privacy. Please read this Privacy Notice (“notice”) carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint. This notice, together with our Data Protection Policy, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
We collect, use and are responsible for certain personal data about you. When we do so, we are subject to the UK General Data Protection Regulation and Data Protection Act 2018 (DPA 2018) (“UK GDPR”). Our Data Protection Officer is Candice Dennison who can be contacted using the details in the ‘How to contact us’ section below.
1. Who we are and what we do
We are Cititec Talent Limited. Cititec is a UK company registered under Company Number 3614377 and has its registered office at First Floor, 5 Fleet Place, London, EC4M 7RD. We are a recruitment agency and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003 (our Business). As part of our Business, we offer the provision of recruitment and contracting services (our Services). In order to provide these Services, we collect the personal data of the following types of people to allow us to undertake our Business;
- Prospective and placed candidates for permanent or temporary roles;
- Prospective and live client contacts;
- Supplier contacts to support our Services; and
- Employees, consultants, temporary workers.
We collect information about you to carry out our core Business and ancillary activities.
2. Information you give to us or we collect about you
This is information about you that you give us by filling in forms on our website accessible at: www.cititec.com (our Site) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our Site, to enter our database, subscribe to our mailing lists or Services, attend our events, participate in discussion boards or other social media functions on our Site, enter a survey, and when you report a problem with our Site. The information you give us or we collect about you will depend on your relationship with us and the progression of Service(s) we provide to you. You may be asked to provide us with information about your identity – such as your name, address, email address, telephone numbers, curriculum vitae and details of your qualifications, experience and employment history and interests, photograph and financial information – as well as information about your nationality and background and other documents such as your passport, work permit/visa and driving licence when this is applicable and/or required to meet regulatory and compliance requirements of Cititec our clients. This will enable us to proceed with verifying your qualifications and experience and your right to work in the United Kingdom.
3. Sensitive data and background checks/verifications
Certain personal data we collect is treated as a special category to which additional protections apply under data protection law. Examples of sensitive data include: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as data concerning health, sex life or sexual orientation. This sensitive data may be collected if our clients require evidence of nationality for visa or work permit requirements or if you need assistance or adjustments to attend an interview. Where we process such special category personal data, we will also ensure we are permitted to do so under data protection laws.
Please note that we do not intentionally and directly process sensitive data unless you voluntarily choose to provide this to us or where you agree to provide it following a request from us, our clients, or our third-party suppliers. With respect to sensitive data (which may include background checks, including CRB checks and credit checks), we will only collect and process such data if you consent to provide it to us. Please note that we may use third parties to assist us in carrying out such verifications and your data will only be shared with them on the basis of your consent, which you may withdraw at any time following the process set out in this notice.
4. Information we collect about you when you visit our Site
With regard to each of your visits to our Site, subject to our compliance with cookies rules and your consent (where this is legally required) we will collect your IP address. This allows us to monitor usage of the Site. An IP address is also captured if a CV is uploaded via our Site.
5. Information we obtain from other sources
With regard to each of your visits to our Site, subject to our compliance with cookies rules and your consent (where this is legally required) we will collect your IP address. This allows us to monitor usage of the Site. An IP address is also captured if a CV is uploaded via our Site.
Information we obtain from other sources
This is information we obtain about you from other sources such as LinkedIn, corporate websites, job board websites/online CV libraries, your business card, personal recommendations, public social media profiles. In this case we will inform you, by sending you this notice, as soon as reasonably possible (and at the latest at the first time we contact you) regarding the fact we hold personal data about you. This information is only obtained through channels we believe to be compliant with applicable data protection laws.
We are working closely with third parties including business partners, sub-contractors in technical, professional, payment and other services, advertising networks, analytics providers, search information providers, credit reference agencies, and professional advisors. We may receive information about you from them for the purposes of our recruitment services and ancillary support services. Such information will always be processed in accordance with this notice.
6. Purposes of the processing and the legal basis for the processing
We use information held about you in the following ways:
- To carry out our obligations arising from any contracts we intend to enter into or have entered into between you and us and to provide you with the information and Services that you request from us or we think will be of interest to you because it is relevant to your career or to your organisation.
- To provide you with information about other Services we offer that are similar to those that you have already purchased, been provided with or enquired about.
The core Services we offer to our candidates and clients is the introduction of candidates to our clients for the purpose of temporary or permanent engagement. However, our Services expand to supporting individuals throughout their career and to supporting businesses’ resourcing needs and strategies.
Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data. We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide Services to you or receive services from you or your organisation. We will rely on legal obligation if we are legally required to hold information on to you to fulfil our legal obligations. We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required. Examples of when consent may be the lawful basis for processing include permission to introduce you to a client (if you are a candidate) or to collect and process sensitive data as set out above.
7. Our Legitimate Business Interests
As a recruitment business and recruitment agency we introduce candidates to clients for permanent employment, temporary worker placements or independent professional contracts. The exchange of personal data of our candidates and our client contacts is a fundamental, essential part of this process. In order to support our candidates’ career aspirations and our clients’ resourcing needs we require a database of candidate and client personal data containing historical information as well as current resourcing requirements. To maintain, expand and develop our Business we need to record the personal data of prospective candidates and client contacts.
8. Consent
Should we want or need to rely on consent to lawfully process your data we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system. Where consent is the lawful basis for our processing, you have the right to withdraw your consent to this particular processing at any time. Withdrawal of consent will not affect the lawfulness of any processing we carried out up until your consent was withdrawn. Where we rely on consent as a basis for processing your personal data, we will not also rely on another lawful basis since we consider this would be unfair, and the ICO (the UK regulator) also shares this view.
9. Cookies
A cookie is a small text file which is placed onto your device (eg computer, smartphone or other electronic device) when you use our Site. Our Site uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site. Unless the cookies are strictly necessary for the proper functioning of the Site or to enable us to provide a Service to you, we will always ask for your prior consent before applying cookies or other similar technologies.
10. Marketing
We will use your personal data to send you updates either by phone, e-mail or otherwise about our Services, including exclusive offers, promotions or new Services. You have the right to opt out of receiving marketing communications at any time by:
- contacting us using the details below; or
- using the ‘unsubscribe’ link in emails you receive.
We will always treat your personal data with the utmost respect and never sell or share it with other organisations outside of Cititec’s group for marketing purposes.
11. Keeping your personal data secure
We have appropriate security measures to prevent your personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine need to access it. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
12. Retention of your data
We retain your data only for as long as there is a legitimate business interest to do so, or until an individual requests deletion, unless we are legally or contractually required to retain it. Data will be securely deleted or anonymised once it is no longer required and no retention obligations remain.
13. Your Rights
Under the UK GDPR, you have a number of rights regarding your personal data. These include:
- Right to Access
You have the right to request a copy of the personal data we hold about you. This is commonly known as a “subject access request.” - Right to Rectification
If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct or complete it. - Right to Erasure (Right to be Forgotten)
You can request that we delete your personal data where there is no good reason for us to continue processing it. This is subject to certain legal or contractual obligations that may require us to retain it. - Right to Restrict Processing
You have the right to ask us to limit the processing of your data in certain circumstances, for example, if you contest its accuracy or object to our use of it. - Right to Data Portability
You can request that we provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another organisation. - Right to Object
You have the right to object to us processing your personal data where we are doing so based on our legitimate interests or for direct marketing purposes. - Right to Withdraw Consent
If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw consent. - Rights in Relation to Automated Decision Making and Profiling
You have the right not to be subject to a decision based solely on automated processing (including profiling) that has legal or similarly significant effects on you. - Right to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s data protection authority:Information Commissioner’s Office (ICO)
14. How to contact us
Questions, comments and requests regarding this notice are welcomed and should be addressed to [email protected]. If you have any queries or concerns about our use of your personal data, we hope we will be able to resolve any issues you may have in the first instance. However, if we are unable to resolve matters to your satisfaction then you also have the right to lodge a complaint with the for as long as there is a legitimate business interest to do so, or until an individual requests deletion, unless we are legally or contractually required to retain it. Data will be securely deleted or anonymised once it is no longer required and no retention obligations remain.Information Commissioner in the UK. The UK’s Information Commissioner may be contacted using the details at +44(0)303 123 1113 or at https://ico.org.uk/.