Skip to Content
IntroductionWho we arePersonal information we collect How we use your personal informationWho we share your personal data with How long we retain your data Your data protection rights  Marketing preferences International data transfers Security measures Region-specific privacy terms Contacting us and complaintsChanges to this privacy policy

Introduction

At Shining People, we respect your privacy and are committed to protecting your personal information. This privacy policy explains:

  • Who we are
  • What personal data we collect
  • How we collect, store, use, and share your personal data
  • Your rights regarding your personal data
  • How to contact us and relevant authorities if you have concerns

We ask that you read this privacy policy carefully as it contains important information about your data rights and how we handle your information in accordance with applicable data protection laws.

Who we are

Shining People is a recruitment agency specializing in connecting neurodivergent professionals with inclusive employers. We act as a data controller, meaning we determine how and why we collect, use, and store your personal data.

Shining People operates across multiple regions. Where applicable, our European entity serves as our representative for international data protection compliance.

When processing your personal data, we comply with:

  • The General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA)
  • The UK GDPR & Data Protection Act 2018 for individuals in the United Kingdom

For regional-specific privacy information, please refer to Section 11.

Personal information we collect

We collect different types of personal data depending on whether you are a candidate (seeking job opportunities) or a client (using our recruitment services to find talent).

3.1 Information we collect from clients

If you are a client, we may collect:

  • Your name, job title, and role within your company
  • Your business contact details (email, phone number, office address)
  • Information about your company’s hiring needs

We may also obtain data from:

  • Public sources (such as your company’s website or LinkedIn)
  • Business networking events or industry publications
  • Referrals from professional contacts
3.2 Information we collect from candidates

If you are a candidate, we may collect:

  • Your name, contact details (email, phone, address)
  • Your CV/resume, work history, qualifications, and skills
  • Any references from previous employers or recruiters
  • Your right-to-work documentation (if required for employment)
  • Any additional information you provide during the recruitment process

We may also collect candidate data from:

  • Job boards and publicly available professional social media (e.g., LinkedIn)
  • Previous employers or educational institutions (for reference checks)
  • Third-party recruitment platforms

For a detailed breakdown of candidate data collection, please refer to Section 12 – Schedule of Candidate Data Collection.

How we use your personal information

We use your personal data to provide recruitment and staffing services, including:

For clients:

  • To provide recruitment solutions and match you with suitable candidates
  • To negotiate and manage recruitment contracts
  • To communicate with you regarding recruitment needs

For candidates:

  • To find and match you with job opportunities
  • To arrange interviews, job offers, and employment contracts
  • To provide career guidance and recruitment support

We will only use your data for the purposes stated and in compliance with applicable laws.

Who we share your personal data with

We may share your personal data with:

5.1 Clients and candidates
  • Candidate data is shared with prospective employers only with your consent.
  • Client data is shared with candidates when presenting job opportunities (e.g., company details, job descriptions).
5.2 Group companies and trusted partners
  • We may share data with our affiliated companies or partner organizations that assist us in providing recruitment services.
5.3 Service providers

We may use third-party service providers (e.g., cloud storage, IT security, or legal consultants) to process data securely.

5.4 Legal and compliance obligations

We may disclose data to regulatory authorities, law enforcement, or other official entities if required by law.

How long we retain your data

We only keep your personal data for as long as necessary to fulfill recruitment services and comply with legal obligations.

  • Clients: We retain client data for up to 6 years after our last meaningful interaction.
  • Candidates: We keep candidate data for up to 3 years, after which we will check if you wish to remain in our database.

If legal or contractual requirements apply, we may keep certain records longer.

Your data protection rights 

Under GDPR and other privacy laws, you have the right to:

  • Access your personal data
  • Correct inaccurate or outdated data
  • ​Request deletion of your data (in certain cases)
  • ​Restrict processing of your data
  • Object to data processing for marketing purposes
  • Withdraw consent at any time

To exercise your rights, contact us at [email protected].

Marketing preferences

We may send you recruitment updates and industry news if you have:

  • Expressed interest in our services
  • Previously worked with us as a client or candidate

You can opt out of marketing communications anytime by clicking “unsubscribe” in emails or by contacting us.

International data transfers

If we transfer your data outside the UK/EEA, we will ensure that adequate safeguards (such as Standard Contractual Clauses) are in place to protect your privacy.

For specific details on international data transfers, see Section 11 – Region-Specific Privacy Terms.

Security measures 

We implement strict security measures to prevent unauthorized access, including:

  • Encryption and secure storage of personal data
  • Restricted access to authorized personnel only
  • Regular security audits to ensure compliance

In the event of a data breach, we will notify affected individuals and authorities where required by law.

Region-specific privacy terms

If you are located in:

  • European Economic Area (EEA) or UK – Your data is protected under GDPR and UK GDPR.

If additional data protection laws apply, we will inform you and ensure compliance.

Contacting us and complaints

If you have questions or concerns about your personal data, please contact us:

  • Email: [email protected]
  • Address: 31 Alto, Exhibition Way, Wembley Park, HA9 0GS, Wembley, Greater London, UK

If you are dissatisfied, you also have the right to lodge a complaint with your national Data Protection Authority (DPA).

Changes to this privacy policy

This policy was last updated on 12/03/2025. We may update this policy periodically, and any changes will be posted on our website. For the latest version, visit: https://shining-people.com.