UK Privacy Policy
Privacy policy for users in the United Kingdom under UK GDPR and Data Protection Act 2018
Last Updated: March 30, 2026 | ICO Registration: ZB123456
UK-Specific Privacy Notice
This UK Privacy Policy supplements our Global Privacy Policy and applies specifically to UK residents. In case of conflicts, this UK-specific policy prevails for UK users. We are registered with the Information Commissioner's Office (ICO) under registration number ZB123456.
Contents
1UK Data Controller & Representative
Data Controller
DAKDAN Talent LLC
UK Representative: DAKDAN Talent UK Ltd
Registered Address: [UK Office Address]
Company Number: [UK Company Number]
ICO Registration: ZB123456
Data Protection Officer (UK)
UK Data Protection Officer
DAKDAN Talent UK Ltd
Email: uk-dpo@dakdantalent.com
Phone: +44 (0) 20 XXXX XXXX
Post: DPO, DAKDAN Talent UK Ltd, [UK Address]
Our DPO is available Monday-Friday, 9:00-17:00 GMT. We respond to all inquiries within 30 days as required by UK GDPR.
2Lawful Basis for Processing
Under UK GDPR Article 6, we process your personal data based on the following lawful grounds:
(a) Consent - Article 6(1)(a)
You have given clear consent for us to process your personal data for specific purposes.
Examples: Marketing communications, optional profile enhancements, cookies (non-essential)
(b) Contract - Article 6(1)(b)
Processing is necessary for a contract we have with you, or to take steps at your request before entering a contract.
Examples: Account creation, job applications, candidate-employer matching, payment processing
(c) Legal Obligation - Article 6(1)(c)
Processing is necessary for compliance with UK or EU legal obligations.
Examples: Tax reporting, employment law compliance, HMRC requirements, anti-money laundering
(f) Legitimate Interests - Article 6(1)(f)
Processing is necessary for our legitimate interests or the legitimate interests of a third party (unless your interests or fundamental rights override those interests).
Examples: Fraud prevention, platform security, analytics, service improvement, direct marketing to B2B contacts
We have conducted Legitimate Interests Assessments (LIAs) which are available upon request.
3Personal Data We Collect
We collect the following categories of personal data from UK users:
| Data Category | Examples | Lawful Basis |
|---|---|---|
| Identity Data | Name, username, date of birth, gender | Contract, Consent |
| Contact Data | Email, phone, postal address | Contract, Legitimate Interests |
| Financial Data | Payment card details, bank account, NI number | Contract, Legal Obligation |
| Transaction Data | Payment history, subscription details | Contract, Legal Obligation |
| Technical Data | IP address, browser type, device ID | Legitimate Interests, Consent |
| Profile Data | CV/resume, work history, skills, education | Contract, Consent |
| Usage Data | Platform activity, job views, applications | Legitimate Interests |
| Marketing Data | Communication preferences, opt-ins | Consent |
4Special Category Data
UK GDPR Article 9 - Special Categories
We process special category data (sensitive personal data) only with your explicit consent or where permitted under UK GDPR Article 9(2) exceptions.
Special Categories We May Process
Racial or Ethnic Origin
Purpose: Equal opportunities monitoring, diversity initiatives (anonymized)
Legal Condition: Explicit consent + Schedule 1 Part 1 para 8 DPA 2018 (equality of opportunity)
Optional: Yes - you can decline without affecting service access
Health Data
Purpose: Reasonable adjustments for disabilities, occupational health
Legal Condition: Explicit consent + Schedule 1 Part 1 para 2 DPA 2018 (employment, social security)
Optional: Yes - only collected when you request accommodations
Criminal Convictions Data
Purpose: DBS checks for regulated positions (when required by employers)
Legal Condition: Article 10 + Schedule 1 Part 1 para 1 DPA 2018 (employment purposes)
Optional: Only for specific roles requiring background checks
You can withdraw consent for special category processing at any time by contacting our UK DPO. Withdrawal does not affect the lawfulness of processing before withdrawal.
5Your Rights Under UK GDPR
As a UK data subject, you have the following rights under UK GDPR:
1Right to be Informed
Know how your data is used (this policy)
2Right of Access (SAR)
Request a copy of your personal data (free)
3Right to Rectification
Correct inaccurate or incomplete data
4Right to Erasure
Request deletion of your data (right to be forgotten)
5Right to Restrict Processing
Limit how we use your data temporarily
6Right to Data Portability
Receive your data in machine-readable format
7Right to Object
Object to processing based on legitimate interests or direct marketing
8Rights re Automated Decisions
Not be subject to solely automated decisions with legal/significant effects
How to Exercise Your Rights
Submit requests via:
- • Email: uk-dpo@dakdantalent.com
- • Online Portal: /legal/data-requests
- • Post: UK DPO, DAKDAN Talent UK Ltd, [UK Address]
Response Time: Within 1 month (extendable by 2 months for complex requests - we'll notify you)
6International Data Transfers
Your data may be transferred outside the UK to countries that may not provide the same level of data protection. We ensure appropriate safeguards are in place:
Adequacy Decisions
We transfer to countries with UK adequacy decisions (EU, EEA, plus countries granted adequacy by UK Secretary of State).
Standard Contractual Clauses (SCCs)
We use UK International Data Transfer Agreement (IDTA) and UK Addendum to EU SCCs for transfers to third countries.
Transfer Impact Assessments (TIAs) conducted for all third-country transfers.
Binding Corporate Rules
Our international group companies operate under ICO-approved Binding Corporate Rules (BCRs).
For a copy of the safeguards we use for international transfers, contact uk-dpo@dakdantalent.com
7Data Retention Periods
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account data (active) | Duration of account + 6 months | Contract |
| Application records | 6 months post-application | Legitimate interests |
| Financial records | 7 years | Legal obligation (HMRC) |
| Marketing data | Until consent withdrawn + 30 days | Consent |
| CCTV (if applicable) | 30 days | Legitimate interests (security) |
| Litigation data | Duration of claim + 6 years | Legal claims |
8Automated Decision-Making & Profiling
UK GDPR Article 22 Rights
You have the right not to be subject to decisions based solely on automated processing (including profiling) which produces legal effects or similarly significantly affects you.
Our Use of Automated Systems
AI-Powered Candidate Matching
Process: AI suggests job matches based on your profile
Solely Automated: No - suggestions only; you control applications
Legal Effect: None - no automatic acceptance/rejection
Your Rights: Opt out in Privacy Center
Resume Screening (Employer Side)
Process: AI ranks candidates for employer review
Solely Automated: No - employers make final decisions
Transparency: Employers must disclose if used
Your Rights: Request human review, contest decision
See our AI Terms of Service for detailed information about AI systems.
9Complaints to the ICO
You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not complied with UK data protection law.
Information Commissioner's Office
Address:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
We encourage you to contact us first: We'd like the opportunity to address your concerns directly before you approach the ICO. Contact our UK DPO at uk-dpo@dakdantalent.com
10Contact Information
UK Data Protection Officer
Email: uk-dpo@dakdantalent.com
Phone: +44 (0) 20 XXXX XXXX
Address:
UK DPO
DAKDAN Talent UK Ltd
[UK Office Address]
Privacy & Legal Team
Privacy: uk-privacy@dakdantalent.com
Legal: uk-legal@dakdantalent.com
Security: security@dakdantalent.com
This UK Privacy Policy was last updated on March 30, 2026. For our global privacy policy, see Privacy Policy.