Privacy Policy | Evari Talent Partners

EVARI Talent Partners Last updated: 1 st April 2026

1. Who We Are

EVARI Talent Partners is a specialist recruitment and HR consultancy operating in the United Kingdom and the Republic of Ireland, with services extending to the United States.

Company details: EVARI Talent Partners Ashby-de-la-Zouch, England Email:

craig.ellis@evaritalentpartners.co.uk Website: www.evaritalentpartners.co.uk

We are registered with the Information Commissioner's Office (ICO) under registration number CSN2243110

For the purposes of UK GDPR and the Data Protection Act 2018, EVARI Talent Partners is the data controller in respect of personal data collected through this website and in the course of our recruitment and consultancy services.

2. The Personal Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

From candidates and job seekers:

Full name, address, email address and telephone number
CV, employment history, qualifications and professional credentials
Right to work documentation and nationality information
Salary history, salary expectations and benefits preferences
References and referee contact details
Career aspirations, motivations and availability
Results of psychometric, EQ or competency assessments where applicable and consented to
Any other information you voluntarily provide to us during the recruitment process

From clients and hiring organisations:

Contact names, job titles, business email addresses and telephone numbers
Organisational information including headcount, salary structures, job descriptions and hiring plans
Pay transparency and compensation data where provided as part of a consultancy engagement
Billing and invoicing information

From website visitors:

IP address and browser information collected via cookies and analytics tools
Contact form submissions including name, email address, phone number and enquiry details

Special category data: We do not routinely seek to collect special category data (such as health information, ethnicity or disability status). If such data is shared with us voluntarily by a candidate in the context of an application, we will handle it with the highest level of care and will only process it where we have a lawful basis to do so. Where we process sensitive data (such as disability information for interview adjustments), we do so under Article 9(2)(b) (Employment, social security and social protection law) or Article 9(2)(g) (Reasons of substantial public interest).

2a.

Is provision of data mandatory? For candidates, providing your name, contact details, and right-to-work documentation is a statutory and/or contractual requirement to enter a recruitment process. Failure to provide this information may mean we are unable to represent you or process your application.

3. How We Collect Your Personal Data

We collect personal data in the following ways:

Directly from you when you submit an enquiry via our website contact form
Directly from you when you submit your CV, application or register interest in our services
From publicly available sources including LinkedIn, professional directories and company websites
From third parties such as referees, previous employers or other recruitment platforms where relevant to a specific role or assignment
From client organisations in the course of managing a recruitment assignment or consultancy engagement
Through cookies and website analytics tools when you visit our website

Why We Process Your Personal Data and Our Lawful Basis

We process personal data for specific purposes and always on the basis of a lawful ground under UK GDPR. The list below sets out our purposes and the lawful basis for each.

To match candidates to suitable roles and present them to clients - Legitimate interests / Performance of a contract
To communicate with you about relevant opportunities - Legitimate interests / Consent (where applicable)
To carry out candidate screening, assessment and reference checks - Legitimate interests / Performance of a contract
To deliver recruitment consultancy services to clients - Performance of a contract
To deliver HR and pay transparency consultancy services -Performance of a contract
To manage billing, invoicing and business administration - Legal obligation / Performance of a contract
To comply with our legal obligations including right to work checks - Legal obligation
To respond to enquiries submitted via our website - Legitimate interests
To improve our website and understand how visitors use it - Legitimate interests / Consent (where applicable)
To send relevant market updates, insights or service information - Legitimate interests / Consent (where applicable)

Where we rely on legitimate interests as our lawful basis, we have assessed that our interests are not overridden by your rights and freedoms, and you may object to this processing at any time (see Section

Where we rely on consent as our lawful basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How We Share Your Personal Data

We will only share your personal data where there is a legitimate and necessary reason to do so. We do not sell personal data to any third party.
With client organisations: With your knowledge and where appropriate, we may share your CV and candidate profile with prospective employers as part of a recruitment assignment. We will always discuss this with you before presenting your details to any client.
With our service providers: We work with a small number of trusted third-party suppliers who process data on our behalf, including:
IT and cloud storage providers
Website hosting and analytics providers
Email and communication platforms
Assessment tool providers (where applicable)
All third-party processors are subject to data processing agreements and are required to handle your data securely and in accordance with UK GDPR.
For legal and regulatory purposes: We may disclose personal data where required to do so by law, by court order, or by a regulatory authority including the ICO.
In the Republic of Ireland: Where we process data in connection with services delivered in Ireland, we comply with the requirements of the EU GDPR as transposed into Irish law, and our processing is subject to the oversight of the Data Protection Commission (DPC).

5. International Transfers
Where we transfer personal data outside of the UK or the European Economic Area — including in connection with our US-facing services — we ensure that appropriate safeguards are in place in accordance with UK GDPR Chapter V. This includes reliance on adequacy decisions, Standard Contractual Clauses or other approved transfer mechanisms as appropriate. If you would like further information about the safeguards in place for international transfers, please contact us using the details in Section 1. We use the UK International Data Transfer Agreement (IDTA) or the UK Extension to the Data Privacy Framework for transfers to the US."

6. How Long We Keep Your Personal Data

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by law.

Candidate CV and application data (active) - Duration of the recruitment process plus 12 months
Candidate CV and application data (talent pool) - 2 years from date of last contact, subject to consent
Placed candidate records - 7 years from date of placement
Right to work documentation - 2 years from date of placement
Client contact and engagement records - 7 years from the end of the commercial relationship
Consultancy project records - 7 years from project completion
Website contact form enquiries - 2 years from date of submission
Financial and invoicing records - 7 years in accordance with HMRC requirements

At the end of the relevant retention period, personal data is securely deleted or anonymised.

Candidates held in our talent pool will be contacted at the 12-month point to confirm whether they wish to remain on our database. If no response is received within 30 days, their data will be deleted.

When personal data reaches the end of its retention period, EVARI Talent Partners follows a strict secure disposal process:

Electronic Data: Data is permanently deleted from our primary CRM, cloud storage (e.g., SharePoint/OneDrive), and local drives. We use industry-standard software to ensure data is overwritten and unrecoverable.
Email Archives: Relevant correspondence is purged from mail servers.
Third-Party Platforms: We issue deletion requests to any third-party processors (e.g., psychometric testing providers) where we are the data controller.
Hard Copies: Any physical documentation is shredded using cross-cut shredding to P-4 security standards.
Anonymisation: In specific instances (such as for salary benchmarking or market insights), we may choose to anonymise data rather than delete it. Once data is fully anonymised (meaning you can no longer be identified), it is no longer considered personal data and may be kept indefinitely.

7. Cookies

Our website uses cookies to improve your experience and to help us understand how the site is used.

What are cookies? Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit.

The cookies we use:

Strictly necessary cookies — required for the website to function. These cannot be disabled.
Analytics cookies — help us understand how visitors use the site so we can improve it. These are only set with your consent.
Functional cookies — remember your preferences to improve your experience. These are only set with your consent.
You can manage your cookie preferences at any time using the cookie settings tool on our website. You can also control cookies through your browser settings, though disabling certain cookies may affect your experience of the site.
For more information about cookies generally, visit www.allaboutcookies.org.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 1.

Right of access You have the right to request a copy of the personal data we hold about you and information about how we process it. We will respond within one calendar month.
Right to rectification You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and will be balanced against our legal obligations and legitimate interests.
Right to restrict processing You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is contested.
Right to data portability Where processing is based on consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to object You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately. Where you object to processing based on legitimate interests, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
Rights related to automated decision-making We do not use solely automated decision-making processes that produce legal or similarly significant effects on individuals.
Right to withdraw consent Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9. How to Make a Complaint

If you are unhappy with how we have handled your personal data, we encourage you to contact us in the first instance so we can try to resolve the matter.If you remain unsatisfied, you have the right to lodge a complaint with the relevant supervisory authority:

In the United Kingdom: Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: www.ico.org.uk
In the Republic of Ireland: Data Protection Commission (DPC) 21 Fitzwilliam Square South, Dublin 2, D02 RD28 Website: www.dataprotection.ie

We will acknowledge any data protection complaint within 30 days of receipt and provide a substantive response without undue delay.

10. Changes to This Policy

We review this Privacy Policy regularly and will publish any updates on this page. Where changes are material, we will take reasonable steps to notify affected individuals. The date at the top of this policy reflects when it was last updated.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us: Craig Ellis EVARI Talent Partners Email: craig.ellis@evaritalentpartners.co.uk Website: www.evaritalentpartners.co.uk

This policy applies to personal data processed by EVARI Talent Partners in connection with our recruitment, consultancy and website services. It does not apply to third-party websites linked from our site, which have their own privacy policies.