Privacy Policy

Last Updated: October 2026 | Effective Date: October 2026

---

At Crank Flex ("we", "our"), we respect your privacy and are committed to protecting candidate and client personal data in compliance with the UK Data Protection Act 2018 and UK GDPR. This policy details how we collect, process, and safeguard your information across our recruitment services.

1. Information We Collect

Depending on whether you are a job applicant, candidate, or employer, we collect:

• Candidate & Applicant Data: Full name, email, phone number, work history, CV/resume details, qualifications, right-to-work documentation, and reference details.
• Client & Employer Data: Contact details, job vacancy specifications, organization names, and billing records.
• Technical & Usage Data: IP address, browser type, and site navigation details collected via standard server logs and cookies.

2. How We Use Your Recruitment Data

We process your personal data under the following legal bases:

• Contract & Placement Services: To match candidates with suitable job opportunities, present profiles to potential employers, and arrange interviews.
• Legitimate Interests: To maintain candidate databases, verify identity, prevent fraud, and optimize our recruitment platform.
• Consent: To send job alerts, career marketing emails, or retain your CV for future relevant vacancies (only when you explicitly opt-in).

3. Data Sharing & Employer Disclosures

We never sell your personal data. As part of core recruitment operations, candidate profiles and CVs are shared strictly with prospective employers or clients with your consent or knowledge. We also use vetted technical providers (such as secure cloud hosting, applicant tracking software, and website analytics).

4. Data Retention

Candidate profiles and CV records are kept on file only as long as necessary to fulfill active recruitment placements, or as permitted under legal/tax retention periods. You may request deletion of your talent profile at any time.

5. Your UK GDPR Rights

You have statutory rights to access, modify, correct, or erase your personal details and recruitment history, as well as object to direct marketing.