Eventus Recruitment Group Privacy Notice
Last updated: August 2026
Eventus Recruitment Group is committed to protecting and respecting your privacy and to handling your personal information fairly, transparently and securely.
This Privacy Notice explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it and the rights you have in relation to your information.
It applies to candidates, prospective candidates, placed candidates, clients, prospective clients, business contacts, suppliers and other individuals whose personal information we process as part of our recruitment and business activities.
Who we are
Eventus Recruitment Group is a recruitment agency and recruitment business providing permanent and other recruitment services.
For the purposes of applicable data protection legislation, the data controller is:
Eventus Recruitment Group
Ribby Hall Village
Ribby Road
Wrea Green
Preston
PR4 2PR
Our Data Protection Lead is:
Siobhan Courtney
siobhan.courtney@eventuslegal.com
If you have any questions about this Privacy Notice or how we use your personal information, please contact our Data Protection Lead.
Who we collect information about
We may process personal information relating to:
- Prospective, current and previously registered candidates.
- Candidates we identify as potentially suitable for career opportunities.
- Candidates we have previously placed into employment.
- Prospective and existing client contacts.
- Individuals working within organisations that use or may use our recruitment services.
- People who refer or recommend candidates or clients to us.
- Professional and business contacts.
- Supplier and service provider contacts.
- Other individuals who communicate with us in connection with our recruitment or business activities.
- Our employees and workers are provided with separate privacy information relating to the processing of their employment information.
Information we may collect about candidates
The information we collect will depend on our relationship with you and the recruitment services we provide.
It may include:
- Your name.
- Home address and location.
- Personal and business email addresses.
- Telephone numbers.
- Your curriculum vitae.
- Employment and career history.
- Current and previous employers.
- Job titles, duties and responsibilities.
- Qualifications and training.
- Professional memberships.
- Salary, remuneration and benefits information.
- Career preferences and aspirations.
- Preferred locations.
- Working pattern and flexible working preferences.
- Notice periods and availability.
- Reasons for seeking or considering a new position.
- Information about organisations and opportunities that may interest you.
- Job applications.
- Details of opportunities we have discussed with you.
- Interview arrangements.
- Interview notes and feedback.
- Job offers and placement information.
- References.
- Links to professional or publicly available profiles, including LinkedIn and professional body records.
- Photographs where included within information provided to us.
- Records of our correspondence with you.
- Telephone and video call recordings.
- Call transcripts, summaries and notes.
- Consultant notes relating to our conversations and recruitment activity.
- Information created or summarised using approved artificial intelligence or automation tools.
- Right to work, identity or other compliance information where this has been provided to us.
- Other information that you choose to provide in connection with your career or our recruitment services.
Sensitive personal information
During the course of providing recruitment services, we may occasionally process information that is subject to additional protection under data protection law.
This may include information relating to:
- Health or medical conditions.
- Disability
- Reasonable adjustments.
- Pregnancy or maternity.
- Racial or ethnic origin.
- Religious or philosophical beliefs.
- Trade union membership.
- Sexual orientation.
- Other special category personal information.
We do not generally ask candidates to provide information of this nature unless it is relevant and necessary.
Candidates may also choose to disclose sensitive information during conversations with our consultants.
Where we process special category personal information, we will only do so where we have an appropriate lawful basis and an additional condition allowing us to process that type of information.
Depending on the circumstances, this may include processing relating to employment rights or obligations, legal claims, substantial public interest conditions or explicit consent where consent is appropriate.
We do not routinely request information relating to criminal convictions or DBS checks. Where criminal offence information is provided to us or is genuinely required, we will only process it where this is lawful and necessary and appropriate safeguards are in place.
Identity and right to work information
Eventus does not routinely require candidates to provide copies of passports, identity documents or right to work documentation where responsibility for the relevant checks sits with the employing client.
However, candidates or clients may occasionally provide this information to us.
Where we receive copies of identity or right to work documentation, we will only retain them where there is a genuine reason to do so and will delete them when they are no longer required, subject to any legal or regulatory obligation requiring their retention.
Identity and right to work documentation must not be processed using general purpose artificial intelligence tools unless the particular system and use have been specifically approved for that purpose.
Information we collect about clients and business contacts
Where you are a client, prospective client or other business contact, we may collect information including:
- Your name.
- Job title.
- Organisation.
- Business address.
- Telephone numbers.
- Email addresses.
- Professional profile information.
- Information about your organisation.
- Recruitment requirements and vacancies.
- Information about teams, practice areas and organisational structure.
- Recruitment preferences.
- Previous recruitment activity.
- Commercial and fee arrangements.
- Records of meetings, calls and correspondence.
- Telephone or video call recordings.
- Call transcripts, summaries and notes.
- Information relating to candidates introduced to your organisation.
- Consultant notes relating to our business relationship.
- Other relevant information concerning our professional relationship with you or your organisation.
How we obtain personal information
We may obtain information directly from you when you:
- Send us your CV.
- Apply for a vacancy.
- Register with Eventus.
- Speak to one of our consultants.
- Respond to an email, SMS, telephone call or other communication.
- Attend an interview or meeting.
- Subscribe to job alerts, newsletters or other communications.
- Complete a form or survey.
- Contact us through our website.
- Contact us through LinkedIn or another social media platform.
- Otherwise communicate with Eventus.
We also identify and source candidates as part of our recruitment activities.
We may obtain information from sources including:
- LinkedIn.
- Reed.
- Indeed.
- CV-Library.
- Other job boards and CV databases.
- The Law Society.
- Other professional bodies.
- Corporate and law firm websites.
- Publicly available professional information.
- Recommendations and referrals.
- Personal and professional networks.
- Business cards and networking events.
- Existing relationships.
- Clients and prospective employers.
- Other people who recommend or refer you to us.
Where we obtain your information from another source, we will provide appropriate privacy information within the period required by data protection legislation unless an applicable exemption applies.
Why we use personal information
We process personal information for purposes including:
- Providing recruitment and work finding services.
- Understanding a candidate’s career history, experience, aspirations and requirements.
- Identifying potential career opportunities.
- Identifying candidates who may be suitable for client vacancies.
- Contacting candidates about relevant career opportunities.
- Supporting candidates with career development and progression.
- Discussing vacancies and employers with candidates.
- Introducing candidates to clients where authorised.
- Arranging interviews.
- Preparing candidates for interviews.
- Obtaining and communicating interview feedback.
- Managing job offers and placements.
- Keeping accurate recruitment records.
- Maintaining records of our previous relationship and recruitment activity.
- Communicating with candidates and clients.
- Providing job alerts and other relevant recruitment communications.
- Supporting clients with their recruitment requirements.
- Maintaining and developing client relationships.
- Carrying out appropriate business development activity.
- Preparing recruitment documentation.
- Creating candidate and vacancy summaries.
- Improving the quality and consistency of our recruitment services.
- Training and supporting our consultants.
- Recording relevant conversations and agreed actions.
- Maintaining evidence of instructions, discussions or agreements where appropriate.
- Complying with our legal and regulatory responsibilities.
- Responding to complaints or disputes.
- Establishing, exercising or defending legal claims.
- Protecting our systems and information.
- Operating and improving our technology and business processes.
Our lawful bases for using personal information
The lawful basis we rely on depends on what information we are processing and why.
Legitimate interests
Much of our recruitment processing is carried out because it is necessary for the legitimate interests of Eventus, candidates, clients or a combination of those parties.
Our legitimate interests include:
- Operating a professional recruitment service.
- Helping candidates identify and secure suitable career opportunities.
- Helping clients identify suitable candidates.
- Maintaining candidate and client relationships.
- Keeping accurate records of recruitment activity.
- Understanding the legal and professional markets in which we operate.
- Developing our recruitment business.
- Providing relevant career and recruitment information.
- Improving the quality of our services.
- Maintaining appropriate business and information security.
- Protecting and exercising our legal rights.
Where we rely on legitimate interests, we consider the purpose and necessity of the processing and balance our interests against the rights and reasonable expectations of the individual concerned.
Contract and steps before entering into a contract
We may process personal information where this is necessary to enter into or perform a contract with you or your organisation, or where you ask us to take steps before entering into a contract.
Legal obligation
We process information where necessary to comply with legal or regulatory obligations applying to our recruitment business.
Consent
There may be circumstances where consent is the appropriate lawful basis and we will ask for your consent where necessary.
Where we rely on consent, you can withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Permission to introduce candidates to clients
Candidate confidentiality is an important part of our recruitment service.
Eventus will not send an identifiable candidate CV or present identifiable candidate details to a particular prospective employer without first obtaining the candidate’s permission to make that introduction.
The fact that we obtain your permission before introducing you to a particular organisation does not necessarily mean that consent is our lawful basis under data protection law for all of the associated recruitment processing.
Call recording and transcription
Calls made or received through our business calling systems are recorded and may be transcribed and summarised.
This includes relevant calls with candidates, clients and other business contacts.
We use recordings, transcripts and summaries for purposes including:
- Maintaining accurate records of conversations.
- Recording important recruitment information.
- Creating consultant notes and actions.
- Creating call transcripts.
- Creating AI assisted call summaries.
- Updating our recruitment CRM.
- Supporting follow up correspondence and actions.
- Improving the consistency and quality of our service.
- Training and supporting our consultants.
- Quality monitoring.
- Maintaining appropriate evidence of information, instructions or agreements.
We use approved specialist technology to provide call recording, transcription and artificial intelligence supported summarisation.
Information derived from a call may be transferred into our recruitment CRM and retained as part of the relevant candidate or client record.
Our lawful basis for this processing will normally be our legitimate interests in maintaining accurate recruitment records, providing and improving our services, supporting our consultants and protecting the legitimate interests of Eventus, candidates and clients.
Call recordings can sometimes capture sensitive information that a person chooses to discuss with us. Where this happens, we will only retain or use that information where it is genuinely relevant and we have an appropriate lawful condition for doing so.
We will tell people when calls are being recorded and explain why we record them.
Original call recordings and full transcripts are not intended to be retained indefinitely.
As a general rule, original recordings and full transcripts are retained for up to twelve months, unless there is a specific reason for a longer period, for example an ongoing complaint, dispute, legal claim, regulatory matter or other justified requirement.
Important recruitment information, notes or summaries transferred into our CRM may be retained for longer in accordance with the retention period applying to the relevant candidate or client record.
Our use of artificial intelligence and automation
Eventus uses approved artificial intelligence and automation technology to support aspects of our recruitment and business processes.
AI is used to support our consultants rather than replace their professional judgement.
Our uses of AI and automation may include:
- Processing and structuring information contained within CVs.
- Creating candidate summaries.
- Assisting with vacancy and job advert preparation.
- Producing or improving recruitment documentation.
- Transcribing telephone and video calls.
- Creating call summaries and actions.
- Supporting consultant follow up.
- Preparing candidate or interview information.
- Organising and searching recruitment information.
- Supporting candidate and vacancy matching.
- Supporting research.
- Drafting or improving business communications.
- Supporting administrative processes.
Depending on the particular function being used, an approved AI system may process identifiable personal information.
For example, when an approved AI candidate summary function within our recruitment CRM is used, the candidate’s processed CV may be provided to the relevant AI service so that the summary can be created.
We require staff to use approved systems when processing identifiable candidate information, client information or confidential Eventus information.
Staff must not upload identifiable candidate or client information into unapproved personal or public AI services.
Our approved technology providers are subject to appropriate data protection, confidentiality and security arrangements.
We also consider whether information submitted to an AI provider may be used to train external AI models as part of our assessment and approval of systems.
For example, AI functionality currently provided within our Firefish recruitment CRM uses Microsoft Azure OpenAI. Firefish has confirmed to us that information processed through this service is not made available to the public OpenAI service and is not used to train OpenAI, Microsoft or other foundation models without explicit permission.
We periodically review the AI systems we use because the technology, services and processing arrangements may change.
Human involvement and automated decisions
AI and automation may assist our consultants by:
- Extracting information.
- Structuring information.
- Summarising information.
- Identifying relevant information.
- Supporting searches and matching.
- Preparing documents.
- Providing suggestions.
These tools do not replace our consultants’ professional judgement.
Eventus does not currently make decisions which have legal or similarly significant effects on candidates solely by automated means without appropriate human involvement.
Our consultants remain responsible for considering candidate suitability and for reviewing relevant AI generated output.
If we introduce significant solely automated decision making in the future, we will assess the legal and data protection implications before doing so and provide appropriate information and safeguards.
Accuracy of AI generated information
Artificial intelligence can produce incomplete, inaccurate or misleading information.
Our staff are therefore required to review AI generated information before relying upon it for recruitment purposes or communicating it externally.
We do not treat AI generated summaries or recommendations as automatically correct.
If you believe information we hold about you is inaccurate, please contact us so that we can review and correct it where appropriate.
Job alerts, newsletters and other communications
We may contact candidates about matters including:
- Specific career opportunities.
- Potential future opportunities.
- Job alerts.
- Career and recruitment market information.
- News / Newsletters.
- Events.
- Relevant Eventus services.
- Other recruitment related communications.
These communications may be made by:
- Telephone.
- Email.
- SMS.
- Other appropriate communication channels.
We may contact existing and prospective client contacts about matters including:
- Our recruitment services.
- Potential candidates.
- Market information.
- Vacancies.
- Newsletters.
- Events.
- Business development.
- Other relevant professional services.
Where the Privacy and Electronic Communications Regulations apply to electronic marketing, we will only send communications where we have an appropriate permission under those rules, such as consent or another applicable permitted basis.
You can opt out of marketing communications at any time by using an unsubscribe facility where one is provided or by contacting us.
Opting out of marketing does not prevent Eventus from contacting you where necessary about an active recruitment process, interview, placement, contract or other non marketing matter.
Where necessary, we may retain limited information on a suppression list so that we continue to respect your communication preferences.
Who we share your information with
Depending on the services we are providing, we may share personal information with:
- Clients and prospective employers.
- Candidates where necessary to arrange recruitment activity.
- Relevant Eventus group companies.
- Recruitment CRM and software providers.
- Call recording and transcription providers.
- Artificial intelligence and automation service providers.
- Cloud storage providers.
- Microsoft 365 and communications providers.
- Job boards and CV database providers.
- Telephone and SMS providers.
- Website and IT providers.
- Professional advisers, including solicitors, accountants and insurers.
- Compliance and verification providers where appropriate.
- Regulators, law enforcement bodies or public authorities where required.
- Other suppliers necessary for the operation of our recruitment business.
Some recipients process personal information on our behalf as data processors.
Others, such as prospective employers receiving an authorised candidate introduction, may become independent data controllers responsible for their own use of the information.
We only share personal information where there is an appropriate reason to do so.
Sharing candidate information with prospective employers
We will not send your identifiable CV or present your identifiable details to a particular prospective employer without first obtaining your permission.
Once you have authorised an introduction, we may provide relevant personal information to the prospective employer so that they can consider you for employment and progress the recruitment process.
The prospective employer will normally become an independent data controller for the information it receives and is responsible for its own data protection obligations.
Our technology providers
Our business uses technology including:
- Firefish recruitment CRM.
- Co-Recruit call recording and transcription services.
- Microsoft 365.
- Microsoft Outlook.
- Onedrive.
- Approved artificial intelligence and automation services.
- Reed.
- Indeed.
- CV-Library.
- Other systems required to operate our recruitment services.
Some providers use specialist subprocessors to provide functions such as cloud hosting, telephone communications, transcription or artificial intelligence.
For example:
Information generated through Co-Recruit can be transferred into Firefish as part of a candidate or client record.
Firefish uses Microsoft Azure OpenAI for certain AI functions, including candidate summaries and advert generation.
Co-Recruit uses specialist providers to support recording, transcription and AI summarisation.
We assess relevant providers and keep our technology arrangements under review.
International processing of information
Some of our technology providers and their subprocessors may store, process or access information outside the United Kingdom.
For example, our Firefish recruitment CRM stores core customer information within Microsoft Azure data centres in the Netherlands and Ireland.
Some technology suppliers may also permit limited access to information from other countries for purposes such as technical support.
Where a transfer of personal information outside the UK is subject to restrictions under UK data protection legislation, we require an appropriate transfer mechanism and safeguards.
Depending on the circumstances, this may include:
- UK adequacy regulations.
- Appropriate contractual safeguards.
- Approved corporate transfer mechanisms.
- Other legally recognised safeguards.
We also require our service providers to apply appropriate security and confidentiality protections.
How long we keep personal information
We do not keep personal information indefinitely simply because it might be useful in the future.
The period for which information is retained depends on:
- The nature of the information.
- Why it was collected.
- Our relationship with you.
- Whether recruitment activity remains ongoing.
- When we last had meaningful contact with you.
- Whether you have been introduced to or placed with a client.
- Our legal and regulatory obligations.
- Contractual requirements.
- The need to establish, exercise or defend legal claims.
- Our internal data retention schedule.
Candidate records
Candidate records may remain active while there is an ongoing or reasonably current recruitment relationship.
Where a candidate is no longer active, their record may be archived.
Archiving does not mean the information has been deleted.
Archived candidate records are subject to periodic retention review, generally after a period of two years, at which point we consider whether the information should be:
- Retained.
- Updated.
- Reactivated.
- Anonymised.
- Deleted.
There may be legitimate reasons to retain particular information for longer, including previous placements, ongoing professional relationships, legal or regulatory obligations, disputes or other justified business reasons.
Call recordings and transcripts
Original call recordings and full transcripts are normally retained for up to twelve months.
Relevant recruitment notes or summaries transferred into our CRM may be retained for longer as part of the candidate or client record.
Placement, contractual and financial information
Certain records relating to job offers, placements, contracts, fees, financial transactions, legal obligations or regulatory requirements may need to be retained for a longer period.
Client and business contacts
Client and other business contact information is reviewed periodically.
We consider matters such as the date of our last meaningful contact, the continuing professional relationship and whether there remains a legitimate reason to hold the information.
Sensitive information
Special category, identity, compliance and other particularly sensitive information should not be retained simply because the wider candidate record continues to exist.
We review whether this information remains necessary and delete it when the purpose for retaining it has ended, subject to any applicable legal obligation.
Deleted information and backups
When information is deleted from a live system, copies may remain within secure system backups for a limited period before those backups are overwritten in accordance with the relevant provider’s backup arrangements.
Keeping your information accurate
Recruitment information can change quickly.
We therefore take reasonable steps to keep information accurate and may contact you periodically to confirm information including:
- Your current employment.
- Contact details.
- Location.
- Salary.
- Career preferences.
- Availability
- Other relevant recruitment information.
Please tell us if information we hold about you changes or if you believe it is inaccurate.
Security
We use appropriate technical and organisational measures designed to protect personal information from:
- Unauthorised access.
- Accidental loss.
- Misuse.
- Alteration.
- Inappropriate disclosure.
- Our measures include, where appropriate:
- Access controls and permissions.
- Secure cloud infrastructure.
- Destruction.
- Security controls provided by our technology suppliers.
- Staff training.
- Internal data protection policies.
- Responsible AI rules.
- Supplier assessment and due diligence.
- Data retention processes.
- Procedures for handling information security incidents.
No information system can be guaranteed to be completely secure, so we regularly review our security and information handling arrangements.
Your rights
Depending on the circumstances and the lawful basis on which we process your information, you may have rights including the right to:
- Ask whether we process your personal information.
- Request access to the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase your information in certain circumstances.
- Ask us to restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Object at any time to processing for direct marketing purposes.
- Request the transfer of certain information where the right to data portability applies.
- Withdraw consent where we rely on consent.
Exercise applicable rights relating to significant automated decision making.
Not every right applies in every situation.
We may need to verify your identity before responding to a request.
To exercise any of your data protection rights, please contact:
Siobhan Courtney
siobhan.courtney@eventuslegal.com
Complaints
If you are concerned about the way Eventus has collected, used, shared, retained or otherwise processed your personal information, we would encourage you to contact us in the first instance.
Please contact:
Siobhan Courtney
Data Protection Lead
siobhan.courtney@eventuslegal.com
We will provide a clear route for your complaint, acknowledge a data protection complaint within 30 days and investigate it appropriately and without undue delay.
We will keep you informed where appropriate and communicate the outcome of our investigation.
You also have the right to complain to the Information Commissioner’s Office, the UK’s independent data protection regulator.
Links to other websites
Our website may contain links to external websites, including clients, professional organisations and other third parties.
These organisations operate their own privacy practices and Eventus is not responsible for how they process information you provide directly to them.
We recommend reviewing the relevant privacy information before providing personal information to another organisation.
Changes to this Privacy Notice
We review this Privacy Notice periodically.
We may update it where:
- Our recruitment services change.
- We introduce significant new technology.
- Our use of artificial intelligence changes.
- Our suppliers or processing arrangements materially change.
- Data protection legislation or regulatory guidance changes.
- Our internal practices change.
Where a change materially affects the way we use personal information, we will take appropriate steps to bring the change to the attention of affected individuals.
The date shown at the beginning of this notice indicates when it was last updated.
Contact us
Questions, comments, requests or complaints relating to this Privacy Notice or Eventus’s use of personal information should be sent to:
Siobhan Courtney
Data Protection Lead
Eventus Recruitment Group
Ribby Hall Village
Ribby Road
Wrea Green
Preston
PR4 2PR