Overview 

Strat-Bridge is committed to protecting personal data and ensuring that it is handled lawfully, fairly, transparently and securely. 

This Privacy Policy explains how Strat-Bridge collects, uses, stores, shares and otherwise processes personal data when individuals interact with Strat-Bridge, whether through the website, by email, by telephone, through professional networking platforms, through social media, via online forms, or in connection with recruitment services more generally. 

This Privacy Policy is intended to give clear information about the categories of personal data processed, the reasons that personal data is processed, the legal bases relied upon, the circumstances in which data may be shared, the rights available to individuals, and the steps taken by Strat-Bridge to protect personal data. 

This Privacy Policy may be updated from time to time to reflect changes in business practices, legal requirements or regulatory guidance. The latest version will be made available on the Strat-Bridge website. 

Stratbridge Ltd (trading as Strat-Bridge) is a company registered in England and Wales (Company No. 13734497), with its registered office at 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX. 

Scope 

This Privacy Policy applies to personal data relating to: 

• candidates 
• clients 
• suppliers 
• website users 
• other business contacts and relevant third parties 

It applies to personal data obtained directly from individuals and to personal data obtained indirectly in the course of providing recruitment services or operating the business. 

This includes, for example, personal data provided by an individual directly, data received from a client in connection with a role, data sourced from publicly available professional profiles, and data collected through use of the website. 

What This Policy Covers 

This Privacy Policy explains: 

• what personal data Strat-Bridge collects 
• how personal data is collected 
• the purposes for which personal data is used 
• the lawful bases relied upon for processing 
• when and why personal data may be shared 
• whether personal data may be transferred internationally 
• how long personal data is retained 
• how personal data is protected 
• the rights individuals have under data protection law 
• how requests, concerns and complaints can be raised 

The purpose of this Privacy Policy is to ensure that individuals understand how their personal data is handled and what rights they have in relation to that data. 

Personal Data Collected 

• Strat-Bridge may collect and process personal data relating to candidates, clients, suppliers, website users and other business contacts. 
• Depending on the nature of the relationship or interaction, the personal data processed may include: 
• contact details such as name, email address, telephone number, postal address and business contact information 
• CVs, employment history, qualifications, professional experience and career background 
• interview notes, feedback, assessment information and role-related observations 
• compensation details, salary expectations, notice period, availability and role preferences 
• records of communications, including emails, telephone calls, meeting notes and other correspondence 
• business-related information relating to clients, suppliers and professional contacts 
• technical data such as IP address, browser type, device information and website usage information collected through cookies or similar technologies 

In some cases, Strat-Bridge may also process more sensitive information where relevant to the recruitment process or where required for lawful business purposes. This may include special category data, for example health information or diversity-related information, but only where there is an appropriate legal basis and condition for doing so. 

Only personal data that is relevant and necessary for the relevant purpose will be collected and processed. 

How Personal Data Is Collected 

Personal data may be collected in a number of ways. 

This may include data collected: 

• directly from individuals, including where an individual submits a CV, applies for a role, completes a form, contacts Strat-Bridge, subscribes to updates, or otherwise communicates directly 
• from clients in connection with recruitment assignments or hiring requirements 
• from publicly available sources, such as professional networking platforms and other public professional sources 
• through referrals, recommendations or third-party introductions 
• through interaction with the Strat-Bridge website, including through cookies and similar technologies 
• may include personal data obtained from publicly available sources, professional networking platforms, or third parties involved in recruitment processes. 

Where personal data is obtained indirectly, Strat-Bridge will process that data in accordance with applicable data protection law and, where required, provide appropriate privacy information to the individual. 

Where personal data is obtained indirectly, Strat-Bridge will, where required, provide individuals with relevant privacy information within a reasonable timeframe in accordance with applicable data protection law. 

Use of Personal Data 

Personal data is processed to provide recruitment services and to support related business activities. 

This includes processing personal data for purposes such as: 

• assessing the suitability of candidates for specific roles 
• identifying potential candidates for current or future assignments 
• introducing candidates to clients in connection with defined recruitment assignments 
• arranging and managing recruitment processes, including interviews, assessments, feedback and communication 
• maintaining candidate, client and business relationships 
• contacting individuals regarding opportunities that may be relevant to their experience, background or stated preferences 
• maintaining internal records, systems and business administration 
• complying with contractual, legal and regulatory obligations 

Where an individual has previously engaged with Strat-Bridge, personal data may be used to assess suitability for future opportunities, including where that individual is not actively seeking a new role, provided such use remains consistent with the original purpose of collection and is supported by an appropriate lawful basis. 

Personal data obtained indirectly may also be used to assess potential suitability for roles and, where appropriate, to initiate contact in connection with recruitment services. 

Strat-Bridge processes only the minimum amount of personal data necessary for the relevant purpose and does not process personal data in a manner that is incompatible with the purposes for which it was collected. 

Individuals are not under a statutory or contractual obligation to provide personal data. However, failure to provide certain information may limit the ability of Strat-Bridge to provide recruitment services or progress applications. 

Lawful Basis for Processing 

Strat-Bridge processes personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation. 

Strat-Bridge determines the appropriate lawful basis depending on the nature of the processing activity and the relationship with the individual. 

Depending on the circumstances, personal data may be processed on one or more of the following lawful bases. 

Consent 

Consent is relied upon where required, including: 

• before sharing candidate data or a Curriculum Vitae (CV) with clients 
• where more detailed or sensitive personal data is processed 
• where an individual provides personal data for the purpose of being considered for roles and consent is the appropriate basis in the circumstances 

Where consent is relied upon, it may be withdrawn at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, but it may affect the ability of Strat-Bridge to continue providing recruitment services to that individual. 

Legitimate Interests 

Personal data may be processed where necessary for the legitimate interests of Strat-Bridge. This may include: 

• sourcing and identifying potential candidates 
• assessing suitability for roles 
• contacting individuals regarding opportunities that may be relevant 
• maintaining candidate and client relationships 
• administering and managing recruitment processes 
• maintaining appropriate business records and communications 

Where legitimate interests are relied upon, Strat-Bridge considers whether the processing is proportionate, necessary, and balanced against the rights and freedoms of the individual. 

Contractual Necessity 

Personal data may be processed where necessary to take steps at the request of an individual before entering into a contract, or where necessary for the performance of a contract. 

This may include processing required to progress recruitment processes, facilitate placements, or manage contractual arrangements with clients, suppliers or other business contacts. 

Legal Obligation 

Personal data may be processed where necessary for compliance with legal or regulatory obligations. This may include obligations relating to record-keeping, compliance, reporting, or responding to lawful requests. 

Special Category Data 

Where special category data is processed, Strat-Bridge ensures that an appropriate condition for processing is satisfied in addition to the relevant lawful basis, in accordance with applicable legislation. 

Sharing of Personal Data 

Personal data may be shared where necessary for recruitment and business purposes. 

Depending on the circumstances, personal data may be shared with: 

• clients, for the purpose of presenting candidates in connection with specific roles or assignments 
• service providers supporting business operations, systems or administration 
• professional advisers, including legal, financial or compliance advisers 
• other third parties where disclosure is required by law or is otherwise lawful and necessary 

Personal data is only shared where there is a legitimate and appropriate reason to do so and where appropriate safeguards are in place. 

Candidate data will only be shared with clients with explicit consent and in connection with a specific assignment. Candidate data will not be submitted on a speculative basis or outside agreed processes. 

Strat-Bridge does not disclose personal data more widely than is reasonably necessary for the relevant purpose. 

Where third parties process personal data on behalf of Strat-Bridge, appropriate contractual arrangements are in place to ensure that personal data is processed in accordance with applicable data protection legislation. 

International Transfers 

In certain circumstances, personal data may be transferred outside the United Kingdom. 

Where this occurs, Strat-Bridge will ensure that appropriate safeguards are implemented so that personal data remains protected in accordance with applicable data protection law. This may include the use of recognised transfer mechanisms or other legally appropriate safeguards. 

Data Retention 

Personal data is retained only for as long as necessary for the purpose for which it was collected and to comply with legal, contractual or regulatory obligations. 

In a recruitment context, personal data relating to candidates may be retained to allow consideration for current and future opportunities. Unless otherwise requested, candidate data is typically retained for up to 24 months from the last meaningful interaction. 

Where there is ongoing engagement, an active business relationship, or a reasonable expectation of future recruitment activity, personal data may be retained for longer, provided that this remains proportionate and consistent with the original purpose of collection. 

Retention periods are determined by reference to factors including: 

• business need and the nature of the relationship 
• contractual obligations 
• legal and regulatory requirements 
• applicable limitation periods 
• requests for deletion or restriction 

Individuals may request deletion of their personal data at any time. 

Where personal data is no longer required, it will be securely deleted or anonymised. Where personal data must be retained for legal or contractual reasons, access will be restricted and the data will not be used for further operational purposes beyond what is necessary. 

Retention periods are applied consistently and reviewed periodically to ensure they remain appropriate. 

Data Security 

Strat-Bridge implements appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. 

These measures include, where appropriate: 

• restricting access to personal data to authorised individuals 
• using secure systems, access controls and password protection 
• maintaining safeguards for secure storage and processing 
• limiting retention and use of data outside approved systems 
• securely deleting or disposing of personal data when no longer required 
• Strat-Bridge recognises that recruitment data may contain sensitive personal or professional information and ensures that such data is handled with an appropriate level of care and confidentiality. 

No system can be guaranteed to be completely secure in all circumstances, but appropriate steps are taken to reduce risk and protect personal data in line with legal and business requirements. 

Strat-Bridge regularly reviews its technical and organisational security measures to ensure that they remain appropriate to the risks associated with processing personal data. 

Individual Rights 

Under applicable data protection law, individuals have rights in relation to their personal data. These include: 

• the right to be informed 
• the right of access 
• the right to rectification 
• the right to erasure 
• the right to restrict processing 
• the right to object to processing 
• the right to data portability 

The availability of these rights may depend on the circumstances and the lawful basis relied upon for the processing. Strat-Bridge will consider and respond to requests in accordance with applicable legal requirements. 

Requests may be made via: 

📧 info@strat-bridge.com 

Requests for Deletion 

Individuals may request deletion of their personal data. 

Where a valid request is received, Strat-Bridge will take appropriate steps to delete personal data within a reasonable timeframe, subject to any legal, regulatory or contractual obligations that require retention. 

Where personal data has been shared with third parties, reasonable steps will be taken to notify those parties where appropriate and where this is reasonably possible. 

A request for deletion does not necessarily require the deletion of all records in all circumstances, particularly where certain limited information must be retained for legal, compliance or contractual purposes. 

Data Breaches 

In the event of a personal data breach, Strat-Bridge will take appropriate steps to assess and manage the incident.

This may include: 

• assessing the nature, scope and impact of the breach 
• taking steps to contain and mitigate the issue 
• notifying the Information Commissioner’s Office where required 
• notifying affected individuals where there is a risk to their rights and freedoms 

Strat-Bridge takes data breaches seriously and handles them in accordance with applicable legal obligations. 

Cookies 

Strat-Bridge uses cookies and similar technologies to support website functionality, improve user experience, and analyse how the website is used. 

Cookies may include essential cookies required for the operation of the website, as well as analytics cookies used to understand user behaviour and improve services. 

Non-essential cookies are used only where consent has been obtained, where required under applicable law. Users are provided with options to manage cookie preferences through cookie controls or browser settings. 

Complaints 

Any concerns regarding the handling of personal data should be raised with Strat-Bridge in the first instance so that the matter can be reviewed and, where appropriate, addressed. 

Strat-Bridge is subject to the supervision of the UK Information Commissioner’s Office (ICO). 

If an individual is not satisfied with the handling of a concern, they have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if they consider that personal data has been processed in a manner that does not comply with applicable data protection law. 

Information Commissioner’s Office:  Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom 

Contact 

For any questions relating to this Privacy Policy or the processing of personal data, including the exercise of data protection rights, contact: 

📧 info@strat-bridge.com 

Updates to This Policy 

This Privacy Policy may be updated from time to time to reflect changes in business practice, legal requirements or regulatory expectations. Any updated version will be published on the Strat-Bridge website.