Privacy Policy
Last updated: September 2026
1. Introduction
Daniel Ernest Consulting Ltd, trading as Daniel Ernest ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our recruitment services, visit our website, or interact with us in any way.
As a recruitment agency, we process personal data of both candidates seeking employment and clients looking to hire. We take our responsibilities under applicable data protection laws seriously, including the UK GDPR and Data Protection Act 2018.
2. Information We Collect
2.1 Candidate Information
When you apply for positions or register with us, we may collect:
- Full name, contact details (email, phone, address)
- CV/resume, cover letters, and work history
- Educational qualifications and professional certifications
- Right to work documentation and identification
- References and referee contact details
- Salary expectations and availability
- Interview notes and assessment results
- Any information you voluntarily provide during the recruitment process
2.2 Client Information
From our business clients, we collect:
- Company name and business details
- Contact person names, job titles, and contact information
- Job specifications and hiring requirements
- Billing and payment information
2.3 Website Visitors
When you visit our website, we may collect:
- IP address and browser information
- Pages visited and time spent on site
- Referring website information
- Information submitted through contact forms or chatbots
3. How We Use Your Information
We use personal information for the following purposes:
- Recruitment Services: Matching candidates with suitable job opportunities, assessing suitability, and facilitating the hiring process
- Communication: Contacting you about relevant opportunities, updates, and recruitment-related matters
- Legal Compliance: Verifying right to work, conducting background checks where required, and meeting regulatory obligations
- Service Improvement: Analyzing data to improve our recruitment processes and services
- Marketing: With your consent, sending information about career opportunities and industry insights
- Business Operations: Managing our relationship with clients and processing payments
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have given explicit consent for specific processing activities
- Contract: Where processing is necessary to fulfil our contractual obligations to you
- Legitimate Interests: Where processing is necessary for our legitimate business interests in providing recruitment services
- Legal Obligation: Where we are required to process data by law
5. Information Sharing
We may share your information with:
- Prospective Employers: We share candidate information with clients who have relevant job opportunities, only with your knowledge
- Service Providers: Third parties who assist with our operations (IT systems, background check providers)
- Legal Authorities: Where required by law or to protect our legal rights
- Professional Advisors: Lawyers, accountants, and other professional advisors
We do not sell your personal data to third parties.
6. Email Marketing & Newsletter Subscriptions
We offer email updates about recruitment insights, the Space Curious Podcast, blog posts, and industry news. When you subscribe through a newsletter signup form, we collect:
- Your email address
- The page you signed up on (
source_page) - Whether you gave explicit consent to receive emails (
consent_given) - The date and time of your subscription
Consent: We only add you to our mailing list when you actively tick the required consent checkbox and click Subscribe. This is an affirmative opt-in. We do not pre-tick consent boxes, and we do not subscribe you automatically when you contact us for recruitment services.
How we store subscriber data: Newsletter subscriber information is stored in our secure Supabase database. Access is restricted to authorised Daniel Ernest administrators, protected by row-level security, and never shared with or sold to third parties for marketing purposes.
Unsubscribing: Every marketing email includes an unsubscribe link. You can also withdraw consent at any time by emailing us at admin@danielernest.com. Once you unsubscribe or request deletion, your email is removed from the active mailing list and retained only as long as necessary to demonstrate compliance with your consent history.
7. Data Retention
We retain candidate data for up to 2 years from our last meaningful contact, unless you request earlier deletion or we are required by law to retain it longer. Client data is retained for the duration of our business relationship and for 7 years thereafter for legal and accounting purposes.
Newsletter subscriber data is retained while you remain subscribed. If you unsubscribe or request deletion, we remove your email from active marketing lists. A minimal record of your consent may be retained for up to 2 years afterwards solely to demonstrate compliance with data protection and electronic marketing laws.
8. Your Rights
Under data protection law, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request limitation of processing in certain circumstances
- Portability: Request transfer of your data to another organisation
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at admin@danielernest.com.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.
10. International Transfers
Your data may be processed outside the UK/EEA where our clients or service providers are located. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
11. Cookies & Analytics
Our website uses cookies to enhance your browsing experience and analyse site traffic. When you first visit our site, a cookie consent banner will appear allowing you to choose your preferences.
10.1 Essential Cookies
These cookies are necessary for the website to function and cannot be switched off. They include cookies that remember your cookie consent preferences (stored in your browser's local storage).
10.2 Analytics Cookies
With your consent, we use Apollo.io, a third-party B2B analytics service, to help us understand how visitors interact with our website and to improve our recruitment services. Apollo.io may collect:
- Pages visited and time spent on site
- Referring website and browsing patterns
- Device type and browser information
- IP address (which may be used to approximate location)
Apollo.io analytics are only activated if you click "Accept All" on our cookie consent banner. If you choose "Essential Only", no analytics tracking will occur. You can learn more about Apollo.io's privacy practices at apollo.io/privacy.
10.3 Managing Your Preferences
You can change your cookie preferences at any time by clearing your browser's local storage or cookies for our site, which will cause the consent banner to reappear on your next visit. You can also manage cookies through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website with an updated effective date.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Daniel Ernest Consulting Ltd
Email: admin@danielernest.com
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.