Privacy Policy 

Last updated: 5 August 2026
 

1. About this privacy policy

​​

RS Consulting is committed to protecting your privacy and handling your personal information responsibly.

This privacy policy explains how we collect, use, store and share personal information when you:

​​

• use our website;

• register with us as a candidate;

• apply for a vacancy;

• communicate with one of our consultants;

• engage us to provide recruitment services;

• work with us as a client, supplier, contractor or business contact;

• apply to work for RS Consulting; or

• otherwise interact with us.

​

It also explains your rights in relation to your personal information.

​​​

2. Who we are

​​

RS Consulting is the trading name of Raiyan & Suhayb Consulting Ltd, a company registered in England and Wales.

For the purposes of applicable data protection law, Raiyan & Suhayb Consulting Ltd is generally the data controller responsible for the personal information described in this policy.

​​

For privacy enquiries or to exercise your data protection rights, please contact:

Email: info@rsconsulting.uk

Please use the subject line “Data Protection Enquiry” or “Data Protection Complaint”, as appropriate.

​​​

3. Who this policy applies to

​​

This policy applies to personal information relating to:​​

• candidates and prospective candidates;

• contractors and interim professionals;

• individuals applying to work for RS Consulting;

• client contacts and prospective client contacts;

• referees and emergency contacts;

• suppliers, service providers and professional advisers;

• website visitors;

• people who contact us by email, telephone, social media or through our website; and

• other individuals whose information we process in connection with our recruitment services.

​

​

4. Personal information we collect

​​

The personal information we collect depends on your relationship with us and may include the following.

​​

Identity and contact information​

This may include:​

• your name;

• postal address;

• email address;

• telephone number;

• date of birth;

• nationality;

• professional and social media profiles; and

• other contact or identification information.

​

Professional and employment information​

This may include:​

• your CV or résumé;

• employment history;

• job titles and responsibilities;

• education, qualifications and professional certifications;

• technical and professional skills;

• current and previous employers;

• career preferences and objectives;

• salary, compensation and rate information;

• notice period and availability;

• preferred working arrangements and locations;

• interview notes and feedback;

• references and referee details;

• job applications and submission history; and

• information about offers, placements and assignments.

​

Compliance and eligibility information​

Where relevant, this may include:

• proof of identity;

• right-to-work or immigration information;

• work permits and visa status;

• professional registrations;

• background screening information;

• references;

• tax and payroll information;

• company and insurance details for contractors;

• information required for onboarding or compliance checks; and

• criminal-record information where a lawful and proportionate check is required.

 

Client and business-contact information​

This may include:

• your name and job title;

• company name;

• business contact details;

• recruitment requirements;

• hiring plans and preferences;

• communications with us;

• contract and commercial information;

• meeting notes;

• payment and invoicing information; and

• information about previous or prospective recruitment assignments.

 

Website and technical information​

When you use our website, we may collect:

• your IP address;

• browser and device information;

• pages visited;

• dates and times of visits;

• referring websites;

• interactions with our website;

• cookie preferences; and

• information submitted through website forms.

 

Communications​

We may retain records of communications with you, including:

• emails;

• telephone notes;

• text messages;

• Microsoft Teams or other messaging-platform communications;

• LinkedIn and social-media messages;

• meeting notes; and

• enquiries submitted through our website.

 

5. Special category and criminal-record information

​

Some personal information is considered particularly sensitive under data protection law.

​​

This may include information about your:

• health or disability;

• racial or ethnic origin;

• religious or philosophical beliefs;

• political opinions;

• trade-union membership;

• sexual orientation;

• biometric or genetic information; or

• criminal convictions and offences.

 

We do not generally require this information for our standard recruitment services. However, we may process limited special category information where it is necessary, for example:

​

• to arrange reasonable adjustments during a recruitment process;

• to comply with employment, equality or other legal obligations;

• to assess your suitability for a role where a particular legal requirement applies;

• to conduct permitted diversity monitoring;

• to protect your or another person’s vital interests; or

• where you have explicitly asked or authorised us to use the information.

 

We will only process special category or criminal-record information when permitted by law and where appropriate safeguards are in place.

You should avoid including unnecessary sensitive information in your CV or correspondence with us.

​

6. How we obtain your information

​

We may collect personal information directly from you when you:​

• send us your CV;

• apply for a vacancy;

• complete a form on our website;

• speak with one of our consultants;

• communicate with us by email, telephone or social media;

• attend an interview or meeting;

• enter into an agreement with us; or

• provide information during an onboarding or compliance process.

​

We may also obtain information from other sources, including:​

• professional networking websites such as LinkedIn;

• online job boards and CV databases;

• publicly available websites and professional profiles;

• recommendations and referrals;

• clients and prospective employers;

• current or previous employers;

• referees;

• recruitment technology and sourcing platforms;

• screening and compliance providers;

• professional bodies;

• Companies House and other public registers; and

• information already held in our internal recruitment systems.

 

Where someone else recommends or refers you to us, they may provide basic information such as your name, contact details, occupation and potential suitability for an opportunity. Where we obtain your information from another source, we will provide or direct you to this privacy policy within the period required by applicable law.

​

7. How and why we use your information

​

We may use your personal information for the following purposes.

 

Providing recruitment services

​We use candidate information to:

• assess your experience, skills and suitability;

• discuss career opportunities with you;

• match you with permanent, contract or interim opportunities;

• represent you in relation to agreed opportunities;

• communicate with clients about your potential suitability;

• arrange interviews and meetings;

• manage applications, offers, placements and assignments;

• provide interview preparation and feedback;

• maintain our relationship with you; and

• inform you about relevant future opportunities.

​

Our lawful bases will usually be our legitimate interests in providing recruitment services, taking steps at your request before entering into a contract, or performing a contract with you. We will normally inform you and obtain your agreement before sending your identifiable CV or professional profile to a prospective employer or client.

 

Client and business services

​We use client and business-contact information to:

• understand recruitment requirements;

• identify and introduce suitable candidates;

• provide permanent, contract and executive-search services;

• prepare proposals and recruitment agreements;

• manage recruitment assignments;

• communicate about interviews, candidates and hiring processes;

• manage our commercial relationship;

• issue and process invoices;

• maintain business records; and

• develop our services.

 

Our lawful bases will usually be performing a contract, taking steps before entering into a contract, complying with legal obligations or pursuing our legitimate business interests.

 

Compliance and verification

​We may use personal information to:

• verify identity and eligibility to work;

• complete reference and background checks;

• assess professional qualifications;

• satisfy client compliance requirements;

• prevent fraud or misrepresentation;

• meet tax, accounting and regulatory obligations; and

• establish, exercise or defend legal claims.

 

Our lawful bases may include legal obligation, contract and legitimate interests.

 

Business development and professional communications

We may use professional contact information to:

• introduce our recruitment services;

• discuss potential hiring requirements;

• maintain professional relationships;

• provide relevant market information;

• contact businesses about suitable candidates; and

• send relevant business-to-business communications.

​

We generally rely on our legitimate interests in developing and operating our recruitment business. Where consent is legally required for a particular communication, we will rely on consent.

You can object to direct marketing or ask us to stop contacting you at any time.

​

Operating and improving our website and services

We may use information to:

• operate and secure our website;

• respond to enquiries;

• understand how visitors use our website;

• improve our content and services;

• prevent misuse, fraud and security incidents; and

• maintain appropriate business and technical records.

​​

Depending on the activity, we may rely on legitimate interests, consent or legal obligation.

​​

Legal and administrative purposes

​We may process personal information to:

• comply with laws, court orders and regulatory requirements;

• respond to data protection requests and complaints;

• maintain financial and accounting records;

• manage insurance and legal matters;

• investigate complaints or disputes;

• protect our business, systems and legal rights; and

• cooperate with regulators, law-enforcement bodies and public authorities.

 

The relevant lawful bases may include legal obligation, legitimate interests and the establishment, exercise or defence of legal claims.

 

8. Our legitimate interests

 

Where we rely on legitimate interests, those interests may include:

• operating and developing a specialist recruitment business;

• helping candidates identify suitable career opportunities;

• helping clients identify and recruit suitable professionals;

• maintaining accurate professional and business records;

• communicating with relevant candidates and business contacts;

• understanding recruitment markets and talent availability;

• improving our services;

• preventing fraud and protecting our systems;

• managing our commercial relationships; and

• establishing, exercising or defending legal claims.

 

We consider whether our interests are necessary and proportionate and balance them against your rights, interests and reasonable expectations. You have the right to object to processing based on legitimate interests in certain circumstances.

 

9. Who we share personal information with

 

Depending on the circumstances, we may share personal information with:

• prospective and existing clients;

• prospective employers and end clients;

• hiring managers and interviewers;

• companies to which you have agreed to be introduced;

• recruitment partners and approved second-tier suppliers;

• payroll, umbrella-company and contractor-management providers;

• reference, screening and compliance providers;

• website, email, CRM, recruitment-software and cloud-storage providers;

• IT, cybersecurity and technical-support providers;

• accountants, auditors, insurers, banks, lawyers and other professional advisers;

• government departments, regulators, law-enforcement bodies and courts;

• professional bodies;

• parties involved in a business sale, merger, restructuring or acquisition; and

• other parties where you have authorised the disclosure or where disclosure is required by law.

 

We require service providers that process information on our behalf to use it only for authorised purposes and to apply appropriate security and confidentiality measures. We do not sell personal information to third parties.

 

10. International transfers

 

RS Consulting operates across the United Kingdom, Europe, the United States and other international markets. This means that we may transfer personal information to clients, candidates or service providers located outside the United Kingdom. Some countries may not provide the same level of legal protection for personal information as the United Kingdom.​Where an international transfer is subject to data protection restrictions, we will use an appropriate transfer mechanism, which may include:

​

• transferring information to a country covered by an applicable adequacy regulation;

• using approved contractual safeguards, such as the UK International Data Transfer Agreement or an approved UK addendum;

• relying on another lawful transfer safeguard; or

• relying on a permitted exception in limited circumstances.

 

You can contact us for further information about the safeguards relevant to a particular transfer.

 

11. Direct marketing

​

We may contact candidates about relevant career opportunities and contact business professionals about recruitment services, suitable candidates, market developments or potential hiring requirements. ​Depending on the type of communication and recipient, we may rely on:

• your consent;

• our legitimate interests; or

• another basis permitted by applicable data-protection and electronic-marketing laws.

​

You can ask us to stop sending marketing or business-development communications at any time by:

• using an unsubscribe option included in a communication;

• replying to the person who contacted you; or

• emailing info@rsconsulting.uk.

 

Your objection to direct marketing will be respected. We may retain limited information on a suppression list so that we can ensure you are not contacted again for the purposes to which you objected. Stopping marketing communications will not necessarily prevent us from contacting you about an active application, placement, contract, enquiry or other ongoing business matter.

 

12. Cookies and website technologies

 

Our website may use cookies and similar technologies. Cookies are small files stored on your device that may be used to:

• make the website function;

• remember your preferences;

• maintain website security;

• understand website traffic and performance; and

• improve the website and user experience.

 

Strictly necessary cookies may be used where required to operate the website. Where consent is required for analytics, advertising or other non-essential cookies, those cookies should not be activated unless you choose to accept them through our cookie-consent tool. You can review or update your cookie choices through the cookie settings available on our website. You can also control cookies through your browser settings, although disabling certain cookies may affect website functionality. Further information about the specific cookies used on our website may be provided through our cookie banner or separate cookie notice.

 

13. How long we retain personal information

 

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, contractual, tax, accounting and reporting requirements. Our usual retention periods are as follows:

 

Candidate information

Where you have not been placed by us, we will generally retain your candidate record for up to 24 months after our last meaningful contact with you. We may contact you during this period to check whether your information remains accurate and whether you would like to remain registered with us.

​

Placement and assignment records

Where we place you in a permanent position or contract assignment, relevant records may normally be retained for up to six years after the placement or assignment ends. This is to maintain appropriate contractual, accounting and legal records and to manage any potential disputes or claims.

​

Client, supplier and commercial records

Contracts, invoices, placement records and other significant commercial information may normally be retained for up to six years after the relevant relationship or transaction ends, unless a longer period is legally required.

​

Prospective-client and professional-contact information

Business-development records will generally be retained while the information remains relevant and for up to 24 months after the last meaningful interaction, subject to periodic review.

​

Website enquiries

General website enquiries may normally be retained for up to 24 months, unless they result in an ongoing candidate, client or contractual relationship.

​

Marketing suppression records

Where you opt out of marketing, we may retain limited information for longer so that we can continue to respect your preference.

We may retain information for longer where:

• legal proceedings or a dispute are ongoing or reasonably anticipated;

• we are required to do so by law;

• a regulator or public authority requires it;

• the information is needed to investigate fraud or misconduct; or

• you have asked us to retain your information for future opportunities.

 

When personal information is no longer required, we will delete it, anonymise it or securely restrict its use.

 

14. Information security

​

We use appropriate technical and organisational measures intended to protect personal information against:

• unauthorised access;

• accidental loss;

• improper use;

• alteration;

• disclosure; and

• destruction.

 

These measures may include access controls, password protection, multi-factor authentication, secure cloud systems, staff confidentiality obligations, software updates, backups and appropriate contractual protections with service providers. Access to personal information is limited to people who reasonably require it for their work. However, no online system or method of transmission can be guaranteed to be completely secure. You should take appropriate care when sending personal information electronically.

​​

15. Keeping your information accurate

​

It is important that the personal information we hold is accurate and current.

Please let us know when your:

• contact details;

• employment status;

• CV;

• availability;

• work authorisation;

• compensation expectations; or

• career preferences

change materially.

​​

We may periodically contact candidates and business contacts to confirm that the information we hold remains accurate and relevant.

 

16. Your data protection rights

 

Depending on the circumstances and the law that applies, you may have the right to:

 

Access your information

You may request a copy of the personal information we hold about you and information about how we use it.

 

Correct inaccurate information

You may ask us to correct information that is inaccurate or complete information that is incomplete.

​

Request deletion

You may ask us to delete personal information where there is no continuing lawful reason for us to retain it. The right to deletion is not absolute. We may need to retain certain information for legal, contractual, regulatory or dispute-resolution purposes.

 

Restrict processing

You may ask us to temporarily restrict how we use your information in certain circumstances.

 

Object to processing

You may object to processing based on legitimate interests. Your right to object to direct marketing is absolute. When you object to direct marketing, we will stop using your information for that purpose.

 

Data portability

In certain circumstances, you may ask us to provide personal information you gave us in a structured, commonly used and machine-readable format or transfer it to another organisation.

 

Withdraw consent

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

 

Rights concerning automated decisions

You may have rights relating to decisions made solely through automated processing where those decisions have legal or similarly significant effects.

 

Make a complaint

You may complain to us about how we have handled your personal information. You may also complain to the relevant data-protection supervisory authority. These rights are not absolute and may be subject to legal restrictions or exemptions. To exercise a right, email info@rsconsulting.uk with the subject line “Data Protection Request.” We may ask for information reasonably necessary to confirm your identity and understand your request. We will not normally charge a fee, although the law may allow us to charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive.

 

17. Data protection complaints

 

You can make a complaint about our use of your personal information by emailing info@rsconsulting.uk with the subject line “Data Protection Complaint.”

​

Please include:

• your name and contact details;

• a description of your concern;

• the relevant dates, communications or individuals involved; and

• the outcome you are seeking.

​

We will acknowledge a data protection complaint within 30 days and will investigate and respond without undue delay. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data-protection supervisory authority. Where the EU GDPR applies, you may also have the right to complain to the data-protection authority in the country where you live or work or where the alleged infringement took place.

​

18. Automated decision-making and artificial intelligence

​

We may use technology to help organise information, identify potentially relevant experience, search professional profiles, prepare communications or support our recruitment processes. However, we do not currently make recruitment decisions about candidates based solely on automated processing where that decision would produce legal or similarly significant effects. Recruitment decisions and candidate assessments involve human review and judgement. Where we introduce automated decision-making that has a legal or similarly significant effect, we will provide appropriate information about the processing and the rights available to affected individuals.

​

19. Information about other people

 

Where you provide personal information about another person, such as a referee, emergency contact, colleague or hiring manager, you should ensure that:

• you are authorised to provide the information;

• the information is accurate;

• the person understands why their information is being provided; and

• they are directed to this privacy policy where appropriate.

 

20. Third-party websites

​

Our website may contain links to websites operated by other organisations, including social-media platforms, job boards and client websites. We are not responsible for the privacy practices, content or security of third-party websites. You should review the privacy information provided by the relevant organisation before submitting personal information.

 

21. Changes to this privacy policy

 

We may update this privacy policy from time to time to reflect:

• changes to our services;

• changes to how we use personal information;

• changes to our systems or service providers;

• changes to legal or regulatory requirements; or

• feedback from individuals and regulators.

 

The current version will be published on our website and the “Last updated” date will be amended.

Where a change materially affects how we use personal information, we may take additional steps to bring the change to the attention of affected individuals.

​