Legal
Privacy Notice
Your data, your rights — plain English.
Last updated 11 July 2026
How we handle your personal data
Privacy Notice
Forma Talent Limited (“we”, “us”) is a specialist recruitment company placing candidates in Salesforce, Business Applications and Revenue Operations roles across the UK and Europe. This notice explains what personal data we collect, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.
Data controller
Forma Talent Limited is the data controller of the personal data we process about you. We are registered with the Information Commissioner’s Office (ICO), registration number [ZC213128]. For any privacy question or request, contact Ryan Eastwood at ryan.eastwood@formatalent.co.uk.
What data we collect
• Contact details: name, email address, phone number, location and LinkedIn URL.
• Candidate data: CV, career history, qualifications, certifications, current and previous salary and benefits, salary or rate expectations, availability, and the types of roles you’re interested in.
• Right to work information: nationality and visa status where relevant, and copies of right to work documents when you’re placed.
• References and feedback from interviews or assessments.
• Notes from conversations we’ve had with you.
• Client and hiring manager data: name, job title, work email, phone number, company, and records of roles briefed, candidates submitted and hiring decisions.
• Technical data: IP address, browser and pages visited (see our Cookie Policy).
How we collect it
Directly from you, when you email us, speak to us or subscribe to job alerts; from your LinkedIn profile or other professional profiles you’ve made public; and from referees and clients during a recruitment process.
Why we use it (lawful basis)
• Matching candidates to relevant roles and contacting you about them: legitimate interests (UK GDPR Art. 6(1)(f)). We only contact you about roles we reasonably believe are relevant to your experience.
• Submitting your details to a client: we always discuss the role with you first and get your agreement before your CV or details are sent to any client.
• Managing an application, offer or placement: legitimate interests, and contract where you’re placed as a contractor (Art. 6(1)(b)).
• Providing recruitment services to clients and contacting prospective clients: legitimate interests (Art. 6(1)(f)).
• Meeting legal obligations, such as right to work checks, tax and employment law: legal obligation (Art. 6(1)(c)).
• Job alerts: consent (Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link.
Who we share it with
• Clients: prospective employers and hiring managers, only with your knowledge and agreement.
• Our technology providers, under data processing agreements: JobAdder (our recruitment CRM), Google Workspace (email and file storage) and Xero (accounting). We have opted out of JobAdder’s use of customer data for service development and AI training.
• Sonovate Limited, our invoice finance provider, for contractor placements. Sonovate receives the contractor and client details needed to fund invoices and pay contractors, and acts as an independent data controller. Sonovate is regulated by the Financial Conduct Authority (registration 613187).
• Umbrella companies and our Employer of Record: where you are engaged as a contractor through a UK umbrella company, or employed locally for a role in Poland, Romania or Spain through our Employer of Record, we share the details needed to employ you and run your payroll. You will be told which provider before any engagement starts.
• Regulators or law enforcement, where we’re legally required to share data.
We do not sell your data, and we do not use it for automated decision-making.
International transfers
Our systems are hosted in the UK and the European Economic Area (EEA). Where a role, client or provider is based outside the UK, we may transfer your data internationally. Transfers to the EEA are covered by the UK’s adequacy regulations. For any other country, we only transfer data with appropriate safeguards in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards.
How long we keep it
• Candidates not placed: 2 years from our last contact or activity, then deleted.
• Unsuccessful submissions to a client: submission details are deleted 6 months after the outcome.
• Placed candidates and contractors: 6 years from the placement or the end of the assignment, for legal and financial record-keeping.
• Right to work documents: 2 years after the placement or assignment ends.
• Client contacts: 6 years from the end of our working relationship. Prospective client contacts we haven’t worked with: 2 years from last contact.
• Enquiries that didn’t go further: 6 months.
• Cookie consent records: 6 months.
• Deletion requests: if you ask us to delete your data, we’ll do so within 30 days, unless we’re legally required to keep it.
Your rights
Under UK GDPR you have the right to:
• access the data we hold about you
• have inaccurate or incomplete data corrected
• have your data erased
• restrict or object to our processing, including objecting to processing based on legitimate interests
• receive your data in a structured, machine-readable format
• withdraw consent at any time, where we rely on consent
• complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
To exercise any of these rights, email ryan.eastwood@formatalent.co.uk. We’ll respond within one month.
Security
We hold personal data in secure, password-protected cloud systems, with access limited to authorised personnel. We use encrypted email for sensitive information where required. If a data breach puts your rights at risk, we’ll report it to the ICO within 72 hours and tell you directly if the risk to you is high.
Changes to this notice
We may update this notice from time to time. This version is dated 16 October 2026. Significant changes will be highlighted on this page, and we’ll tell active candidates directly about any material change.
Contact
Data protection queries: ryan.eastwood@formatalent.co.uk
Post: Forma Talent Limited, 124 City Road, London, EC1V 2NX
Forma Talent Limited is registered in England and Wales, company number [17375398].
Forma Talent Limited (“we”, “us”) is a specialist recruitment company placing candidates in Salesforce, Business Applications and Revenue Operations roles across the UK and Europe. This notice explains what personal data we collect, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.
Data controller
Forma Talent Limited is the data controller of the personal data we process about you. We are registered with the Information Commissioner’s Office (ICO), registration number [ZC213128]. For any privacy question or request, contact Ryan Eastwood at ryan.eastwood@formatalent.co.uk.
What data we collect
• Contact details: name, email address, phone number, location and LinkedIn URL.
• Candidate data: CV, career history, qualifications, certifications, current and previous salary and benefits, salary or rate expectations, availability, and the types of roles you’re interested in.
• Right to work information: nationality and visa status where relevant, and copies of right to work documents when you’re placed.
• References and feedback from interviews or assessments.
• Notes from conversations we’ve had with you.
• Client and hiring manager data: name, job title, work email, phone number, company, and records of roles briefed, candidates submitted and hiring decisions.
• Technical data: IP address, browser and pages visited (see our Cookie Policy).
How we collect it
Directly from you, when you email us, speak to us or subscribe to job alerts; from your LinkedIn profile or other professional profiles you’ve made public; and from referees and clients during a recruitment process.
Why we use it (lawful basis)
• Matching candidates to relevant roles and contacting you about them: legitimate interests (UK GDPR Art. 6(1)(f)). We only contact you about roles we reasonably believe are relevant to your experience.
• Submitting your details to a client: we always discuss the role with you first and get your agreement before your CV or details are sent to any client.
• Managing an application, offer or placement: legitimate interests, and contract where you’re placed as a contractor (Art. 6(1)(b)).
• Providing recruitment services to clients and contacting prospective clients: legitimate interests (Art. 6(1)(f)).
• Meeting legal obligations, such as right to work checks, tax and employment law: legal obligation (Art. 6(1)(c)).
• Job alerts: consent (Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link.
Who we share it with
• Clients: prospective employers and hiring managers, only with your knowledge and agreement.
• Our technology providers, under data processing agreements: JobAdder (our recruitment CRM), Google Workspace (email and file storage) and Xero (accounting). We have opted out of JobAdder’s use of customer data for service development and AI training.
• Sonovate Limited, our invoice finance provider, for contractor placements. Sonovate receives the contractor and client details needed to fund invoices and pay contractors, and acts as an independent data controller. Sonovate is regulated by the Financial Conduct Authority (registration 613187).
• Umbrella companies and our Employer of Record: where you are engaged as a contractor through a UK umbrella company, or employed locally for a role in Poland, Romania or Spain through our Employer of Record, we share the details needed to employ you and run your payroll. You will be told which provider before any engagement starts.
• Regulators or law enforcement, where we’re legally required to share data.
We do not sell your data, and we do not use it for automated decision-making.
International transfers
Our systems are hosted in the UK and the European Economic Area (EEA). Where a role, client or provider is based outside the UK, we may transfer your data internationally. Transfers to the EEA are covered by the UK’s adequacy regulations. For any other country, we only transfer data with appropriate safeguards in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards.
How long we keep it
• Candidates not placed: 2 years from our last contact or activity, then deleted.
• Unsuccessful submissions to a client: submission details are deleted 6 months after the outcome.
• Placed candidates and contractors: 6 years from the placement or the end of the assignment, for legal and financial record-keeping.
• Right to work documents: 2 years after the placement or assignment ends.
• Client contacts: 6 years from the end of our working relationship. Prospective client contacts we haven’t worked with: 2 years from last contact.
• Enquiries that didn’t go further: 6 months.
• Cookie consent records: 6 months.
• Deletion requests: if you ask us to delete your data, we’ll do so within 30 days, unless we’re legally required to keep it.
Your rights
Under UK GDPR you have the right to:
• access the data we hold about you
• have inaccurate or incomplete data corrected
• have your data erased
• restrict or object to our processing, including objecting to processing based on legitimate interests
• receive your data in a structured, machine-readable format
• withdraw consent at any time, where we rely on consent
• complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
To exercise any of these rights, email ryan.eastwood@formatalent.co.uk. We’ll respond within one month.
Security
We hold personal data in secure, password-protected cloud systems, with access limited to authorised personnel. We use encrypted email for sensitive information where required. If a data breach puts your rights at risk, we’ll report it to the ICO within 72 hours and tell you directly if the risk to you is high.
Changes to this notice
We may update this notice from time to time. This version is dated 16 October 2026. Significant changes will be highlighted on this page, and we’ll tell active candidates directly about any material change.
Contact
Data protection queries: ryan.eastwood@formatalent.co.uk
Post: Forma Talent Limited, 124 City Road, London, EC1V 2NX
Forma Talent Limited is registered in England and Wales, company number [17375398].