Privacy Policy

Privacy Policy


WOW Recruitment Limited, a company registered in England and Wales under company number 17344570, with its registered office at 5th Floor, 167-169 Great Portland Street, London W1W 5PF, United Kingdom (collectively “WOW Recruitment”, “WOW”, “we,” “us,” or “our” in this policy).


This Privacy Policy explains how we collect, use, share and protect personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”) (together, “UK Data Protection Law”). By submitting personal data to us, you acknowledge this Privacy Policy. Your use of our website www.wowrecruitment.com (“Website”) is also subject to our Terms of Use, available at www.wowrecruitment.com/terms-conditions


You can access our home page and browse parts of our site without disclosing personal data, although some non-identifiable information will be collected via cookies (see below).


Who we are and how to contact us

We are the data controller for the personal data described in this policy. If you have any questions about this policy or how we handle your personal data, please contact our Privacy Officer / Data Protection Lead at info@wowrecruitment.com or by post at 5th Floor, 167-169 Great Portland Street, London W1W 5PF, United Kingdom.


What is personal data?

“Personal data” means any information relating to an identified or identifiable living individual. This may include, but is not limited to, your name, address, telephone number, date of birth, employment and educational history, and email address.


Special category data. Special category data is a specific category of personal data under Article 9 of the UK GDPR, comprising information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (where used for identification), health data, and data concerning a person's sex life or sexual orientation. Criminal offence data is subject to similar additional protections under Article 10 of the UK GDPR and Schedule 1 of the DPA 2018.


We ask that you do not send us, and you do not otherwise disclose to us, any special category data or criminal offence data unless we have expressly requested it and explained the basis on which we are permitted to collect it.


We also collect some information that does not relate to an identified or identifiable individual and is therefore not personal data.


What personal data do we collect?

We may collect personal data through your application, CV or resume, and in the course of our dealings with you, including: your name, contact details, career history, qualifications, results of any competency or psychometric assessments, employment objectives, and references.


How we collect your personal data

We collect personal data directly from you wherever it is reasonable and practicable to do so. For example, when you contact us by telephone, email or post, via the Website, at events, or when you register with or apply for a role through us. We may also collect personal data from third parties, including:

  • our service providers;
  • business affiliates;
  • clients;
  • other third parties, such as previous employers, referees you nominate, credit reference agencies, and public bodies.


Where we collect special category data or criminal offence data about you (for example, information about a disability for reasonable adjustment purposes, or a criminal record check required for a role), we will identify a valid condition for processing under Article 9 or Article 10 of the UK GDPR and Schedule 1 of the DPA 2018 — which, in most cases, will be your explicit consent or a step necessary for employment, social security or social protection purposes.


Our lawful basis for processing your personal data

Under the UK GDPR, we must have a lawful basis for each use we make of your personal data. Depending on the circumstances, we rely on one or more of the following:

  • Consent – for example, for certain direct marketing communications or where you have specifically agreed to our use of sensitive information;
  • Performance of a contract – to provide recruitment services you have requested, or to fulfil a contract with a client or candidate;
  • Legitimate interests – to operate and improve our recruitment business, match candidates to roles, and manage our client relationships, provided this is not overridden by your interests or fundamental rights;
  • Legal obligation – where we must comply with a legal or regulatory requirement.


Where we rely on consent, you may withdraw it at any time by contacting us using the details above.


Cookies

Like many websites, we use cookies to enhance your experience and understand how visitors use our site, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) as they apply in the UK. Cookies are small files placed on your device that allow us to recognise your browser and remember certain information.


We will ask for your consent before placing any non-essential cookies (such as analytics or marketing cookies) on your device, other than cookies that are strictly necessary for the Website to function. You can manage or withdraw your cookie preferences at any time via our cookie banner or your browser settings.



We may use third-party service providers to help us understand how our Website is used. These providers are not permitted to use the information collected on our behalf for any purpose other than to help us operate and improve our business.


How we use your personal data

We will use your personal data only for the purpose for which it was collected, or as otherwise set out in this policy, and will not use it for any materially different purpose without first seeking your consent, unless we are otherwise authorised or required to do so by law. In general, we use and disclose personal data to:

  • establish and maintain your relationship with us as a client or candidate, including arranging interviews and providing reports, newsletters and workplace health and safety information;
  • provide the services you have requested from us;
  • respond to your enquiries;
  • register you for events, promotions or competitions;
  • improve our services to clients and candidates, including through statistical analysis of how our Website and content are used;
  • manage our client and business relationships;
  • send you direct marketing about our services and other developments we believe may interest you, in accordance with PECR and this policy;
  • share information with third parties engaged to assist us in providing services you have requested, such as skills or psychometric assessments, and, for candidates, with prospective employers with your prior knowledge and consent;
  • comply with any applicable law, regulation, or lawful request of a regulator or public authority.
  • We will not intentionally disclose your personal data to third parties for their own marketing purposes, or otherwise, except where we believe we are under a legal duty to do so, or as set out in this policy.


How long we keep your personal data

We keep personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Retention periods vary depending on the type of data and our relationship with you. For example, candidate records are typically retained for a defined period after our last meaningful contact with you, in line with our data retention schedule. Further detail is available on request from our Privacy Officer / Data Protection Lead.


International transfers of your personal data

We may share your personal data with our service providers and group companies located outside the UK, including in Australia and the Philippines. Where we transfer personal data outside the UK to a country that does not benefit from UK adequacy regulations, we put in place appropriate safeguards recognised under UK Data Protection Law, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures required to ensure your personal data receives an equivalent level of protection. You can request further details of these safeguards by contacting us.


Direct marketing

We may send you direct marketing communications about our services that we consider may be of interest to you, in accordance with PECR and UK Data Protection Law. You can opt out of marketing communications at any time by following the unsubscribe instructions in the communication, or by contacting us using the details above. We will not send you marketing communications where you have opted out or, where required, without your consent.


Your rights

Subject to certain exceptions and conditions under UK Data Protection Law, you have the right to:

  • be informed about how your personal data is used;
  • access the personal data we hold about you;
  • have inaccurate personal data corrected, or incomplete personal data completed;
  • have your personal data erased in certain circumstances (the “right to be forgotten”);
  • restrict or object to our processing of your personal data in certain circumstances;
  • receive a copy of certain personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller (“data portability”);
  • withdraw consent at any time, where we rely on consent to process your personal data;
  • not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, in certain circumstances.


To exercise any of these rights, please contact us using the details above. We will require sufficient information to confirm your identity before responding, and we will normally respond within one month. There is usually no charge to exercise these rights, although we may charge a reasonable fee, or decline to act, if a request is manifestly unfounded, excessive or repetitive.


Keeping your personal data up to date

If you believe any personal data we hold about you is inaccurate, incomplete or out of date, please contact us and we will take reasonable steps to correct it. We do not charge for correcting or deleting personal data. Where you ask us to delete your personal data, we will do so wherever lawful and practicable to do so; however, we may be required to retain certain records (such as payroll or tax records) for legal or regulatory reasons.


We may decline a request to amend or delete personal data in certain circumstances. If we do, we will explain our reasons and, where relevant, note that you dispute the accuracy of the information.


Security of your personal data

We take reasonable technical and organisational measures to protect your personal data from misuse, loss, unauthorised access, modification or disclosure. Personal data may be held in hard copy or electronic form, and access is restricted to authorised personnel.


As the Website operates over the internet, and the internet is inherently insecure, we cannot guarantee the security of information you transmit to us online. Any information you send us online is transmitted at your own risk.


Links to third-party sites

Our Website may contain links to third-party websites. We make no representations about the privacy practices of any third-party website, do not endorse them, and are not responsible for their content. We recommend you review the privacy policy and terms of use of any third-party site before providing your personal data to it.

How to make a complaint


If you have a concern about how we have handled your personal data, please contact us in the first instance at info@wowrecruitment.com and we will investigate promptly.

You also have the right to lodge a complaint with the UK's independent data protection regulator, the Information Commissioner's Office (ICO):

  • Website: ico.org.uk/make-a-complaint
  • Telephone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom


Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version will always be available on our Website. This policy was last updated on 16 September 2026.