Privacy Policy

Cesium Executive Group Limited (company number 07270838), which trades as Cesium Group ("Cesium Group", "we", "us" or "our"), is committed to safeguarding the privacy of the candidates, clients and website visitors we work with. The Cesium Group entity that acts as controller of your data will depend on the service we are providing to you, as explained below.

We want every interaction to be safe and secure. Any information you give us, or that we gather, whether through our website, written correspondence (including email), telephone calls or meetings with our consultants, is used only for the purposes set out in this policy.

This policy describes the categories of personal data we collect, why we use it and how we look after it. It is also intended to meet our transparency obligations under the UK GDPR and any other applicable laws.

Who this policy covers

This notice explains how Cesium Group handles personal data relating to:

• active candidates – individuals we are representing for roles with other employers or within Cesium Group, whether sourced through our website, job boards, social media or other channels;
• prospective candidates;
• clients;
• prospective clients; and
• visitors to our website(s).

Together we refer to you as "you" or "your". This policy also describes your privacy rights, including your right to object to our processing. You can contact us at info@cesiumgroup.com.

Personal data we collect

Candidates

When you register with us so that we can help you find work, we collect and process personal data about you. This usually includes your name, contact details, the information in your CV, your current package, your location and what you are looking for in your next role. Where the law permits, we may also hold information about your health (for example, so we can make reasonable adjustments), diversity information such as ethnicity, sexual orientation and religion (for equal-opportunities monitoring), and details of any unspent criminal convictions where a client requires this or where you apply for a role with us directly.

If you visit our website, interact with the emails we send (by opening, forwarding or clicking links), or sign up for job alerts or other updates, we also collect data from those interactions.

We may also receive information about you from third parties, including:

• referees, once you have been offered a role;
• former employers, to confirm your dates of employment;
• educational institutions, to verify your qualifications;
• the Disclosure and Barring Service or Disclosure Scotland, where we need details of unspent convictions;
• credit reference agencies, where we need to check your financial standing;
• publicly available sources such as LinkedIn and social media, to build a fuller picture and help us match you to suitable roles; and
• clients we have introduced you to, who may give feedback on your application or CV.

Prospective candidates

We collect your name, contact details and professional background from publicly available sources such as LinkedIn, job boards and social media, so that we can get in touch if we believe our services may be of interest to you in future. We may also learn about you through another candidate or an employer who suggests you as a contact. In these cases, the Cesium Group entity to which the consultant who identified you belongs acts as controller of your data.

Prospective business clients

We collect contact details and information about your role or position in order to establish a commercial relationship with your organisation. Cesium Group acts as controller of this data.

Website visitors

We collect information such as your IP address and details about your device, which we need in order to deliver our online content to you. We also collect data about how you use our website, such as the pages you view, and any information you provide when you contact us.

Clients

We collect personal data such as your name, job title and contact details. We also keep records of our communications with you, including whether you have opened or forwarded content we have sent, together with any feedback you give us about our candidates. If you provide information about a candidate (for example, confirming they worked with you or giving a reference), we obtain your details from the candidate and keep a record of what you tell us. We may also process information about you from public sources such as LinkedIn, or because you attended one of our events, or an event whose organiser is permitted to share attendee details with us.

Suppliers

We usually collect your name and contact details as a business contact for your organisation.

Providing your personal data

In some cases we need certain personal data in order to work together. If you choose not to provide the information we ask for, we may be unable to provide you with our services.

How we use your personal data

Candidates

We use your personal data to:

• provide work-finding services;
• communicate with you;
• enable you to upload your CV and apply for roles;
• create a candidate profile to personalise your experience;
• monitor equality and diversity;
• give you interview and salary guidance; and
• send you marketing about job opportunities, industry insights, events, promotions and similar content, in line with your preferences.

Prospective candidates and business clients

We use your personal data to assess whether our services may be of interest to you and how we can help, and to contact you to find out.

Website visitors

We use your personal data to improve and personalise your experience when you use our website, and to tailor the content you receive from us.

Clients

We use your personal data to provide recruitment services; to communicate with you; to gather feedback through satisfaction surveys so we can improve and develop our services; to maintain our business relationship with you; to respond to your enquiries; to meet our contractual obligations; to establish, exercise or defend legal claims; and for direct marketing.

Suppliers

We use your personal data to communicate with you, maintain our business relationship, respond to your enquiries, meet our contractual obligations, handle legal claims, and for direct marketing.

You can opt out of marketing at any time using the unsubscribe link in our messages or by contacting us directly.

Legal grounds for processing

Under the UK GDPR, we rely on one or more of the following legal bases to process your personal data:

• Contract – where we need to process your data to perform a contract with you, or to take steps at your request before entering into one.
• Legal obligation – where processing is necessary for us to comply with our legal or regulatory duties.
• Legitimate interests – ours or those of a third party, including: providing our services; responding to your enquiries (staying in regular contact with candidates and clients is part of any commercial relationship); improving our website and your experience; telling you about relevant services such as roles, insights and events; running our operations efficiently; carrying out satisfaction surveys; and approaching prospective business clients to build commercial relationships. We have carried out a legitimate-interests assessment to confirm that our interests are not overridden by your rights and freedoms; you can request a copy using the contact details below.
• Consent – in some cases we will ask for your consent, particularly to manage your marketing preferences (for example, offering you job alerts when you register). Where we rely on consent, you can withdraw it at any time by contacting us.

Who we share your personal data with

Third parties

If you are a candidate, we share your personal data with clients who have roles you are interested in. We also share data (including special category data where necessary) with service providers who carry out functions on our behalf, such as:

• conducting employment reference checks;
• conducting qualification checks;
• carrying out criminal-record checks where required;
• verifying details you have provided from third-party sources;
• conducting psychometric or skills assessments;
• hosting data for us;
• providing professional advice to us;
• providing data analytics to us;
• testing and developing our business systems;
• administering surveys or competitions on our behalf;
• helping us communicate with you; and
• providing mailing house or other direct-marketing services.

We require these providers to meet appropriate standards of confidentiality and data protection. Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or Standard Contractual Clauses.

Other disclosures

We may also disclose your personal data where we are legally required to do so; to law enforcement agencies, regulators or other government bodies; and to a buyer and its advisers in connection with any reorganisation, merger, sale, joint venture or other transfer of all or part of our business.

Keeping your personal data secure

We have put in place appropriate technical and organisational measures to protect your personal data against accidental or unlawful loss, destruction, alteration, or unauthorised disclosure or access. Only authorised staff and service providers can access personal data, on a need-to-know basis, and they are bound by confidentiality obligations.

How long we keep your personal data

We keep your personal data for as long as necessary to fulfil the purpose we collected it for, which may be an ongoing purpose. For candidates, for example, we may retain your data throughout our relationship and beyond, as we often support people across many years of their careers. When deciding how long to keep data, we consider the purpose of the processing, any legal, regulatory, accounting or reporting requirements, the nature and volume of the data, and the potential risk of harm from unauthorised use or disclosure.

Where we hold data for direct marketing, we keep it until you ask us to stop (and for a short period afterwards to action your request), and we keep a record of any opt-out so that we can respect it. We also periodically remind candidates to review and, if they wish, update or remove the data we hold about them.

Your rights

Under UK (and, where applicable, EU) data protection law you have a number of rights, including the right to: request a copy of your personal data; have inaccurate data corrected; have your data erased or its processing restricted; receive the data you provided to us (under a contract or with your consent) in a portable format and ask us to transfer it to another controller; and object to our processing in certain circumstances (in particular for direct marketing, or where we do not need the data to meet a legal or contractual requirement).

These rights may be limited – for example, where meeting your request would reveal another person's data, infringe a third party's rights, or where we are required by law to keep the information. We will explain any exemption we rely on when we respond to your request.

How to contact us and complain

To exercise your rights, withdraw your consent, or unsubscribe from marketing, you can email us at info@cesiumgroup.com, or write to us at:

If you are unhappy with how we have handled your personal data, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We would, however, appreciate the chance to address your concerns first.