Privacy Policy – LSA Recruit

Last Updated: 10 March 2026

LSA Recruit (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.lsarecruit.co.uk, engage our recruitment services, participate in our training programs, or utilize our cybersecurity consulting services.

We operate as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


1. Information We Collect

We collect personal data to provide the best possible service to candidates, clients, and students.

1.1 For Candidates
  • Identity Data: Name, date of birth, gender, nationality

  • Contact Data: Email address, telephone number, postal address

  • Professional Data: CV/Resume, employment history, qualifications, certifications, skills (Business Intelligence, AI, Data Science, Salesforce, SAP, Java, etc.)

  • Compliance Data: Right to work documentation, ID copies, background check results

  • Financial Data: Bank details and National Insurance number (for contract and offshore recruitment)

1.2 For Clients and Business Partners

  • Contact details of representatives (name, job title, business email, phone number)

  • Records of communications and business transactions

1.3 For Training Participants (LSA Training)

  • Registration details

  • Course progress

  • Assessment results

  • Certification records

1.4 For Cybersecurity Consulting Clients

  • Technical data required for:

    • Security assessments

    • Risk analysis

    • Incident response planning


2. How We Use Your Information

We use your information for the following purposes:

  • Recruitment Services: Matching candidates with permanent, contract, contract-to-hire, offshore, or executive opportunities

  • Career Support: CV advice, interview coaching, and career guidance

  • Training Services: Course enrollment management, training delivery, and certifications

  • Cybersecurity Consulting: Security assessments, threat monitoring, and compliance support

  • Communication: Responding to inquiries and sending relevant updates

  • Legal Compliance: Meeting tax, employment law, and right-to-work verification requirements


3. Legal Basis for Processing

We process your data under the following legal bases:

  • Legitimate Interests – Necessary for recruitment and staffing activities

  • Contractual Necessity – Required to perform a contract with you

  • Legal Obligation – Compliance with legal or regulatory requirements

  • Consent – Where explicit permission has been provided (e.g., marketing communications)


4. Sharing Your Information

We may share your personal data with:

  • Prospective Employers / Clients – Introducing candidates for job opportunities

  • Third-Party Service Providers – Payroll providers, IT services, background check agencies

  • Regulatory Authorities – Where required by law

  • Offshore Partners – For global recruitment services with proper safeguards


5. International Data Transfers

As LSA Recruit offers offshore recruitment services, your data may be transferred outside the UK or the European Economic Area (EEA).

We ensure appropriate safeguards are in place, including standard contractual clauses, to maintain the same level of data protection.


6. Data Security

We implement appropriate technical and organisational security measures to protect your personal data from:

  • Unauthorized access

  • Accidental loss

  • Misuse or disclosure

Access to personal data is restricted to employees and partners who require it for business purposes.


7. Data Retention

We retain personal data only as long as necessary to fulfill its intended purpose and comply with legal obligations.

Typically:

  • Candidate data is retained for two years from the last meaningful contact

  • Longer retention may apply if required by law


8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

  • Withdraw Consent – Withdraw consent where applicable
  • Request Access – Obtain a copy of the data we hold about you

  • Request Correction – Correct inaccurate or incomplete data

  • Request Erasure – Request deletion of your personal data

  • Object to Processing – Object to processing based on legitimate interests

  • Request Restriction – Restrict processing of your data

  • Request Transfer – Transfer your data to another party

9. Contact Us

To exercise your rights or ask questions about this Privacy Policy, please contact us:

LSA Recruit:
Telephone: +44 208 795 1200
Email: admin@lsarecruit.co.uk
Website: www.lsarecruit.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk