GDPR Policy
Last updated: January 2025
Dynamite Search Group is committed to protecting the personal data of our clients, candidates, and contacts in full compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Who we are
Dynamite Search Group Ltd is the data controller for personal information collected through our website and recruitment activities. Our registered address is 3rd Floor, 207 Regent Street, Mayfair, London W1B 3HH, United Kingdom. You can contact us at info@dynamitesearchgroup.com.
What data we collect
We collect and process the following categories of personal data:
- Contact information (name, email address, telephone number)
- Professional information (CV, employment history, skills, qualifications)
- Communication records (emails, notes from calls and meetings)
- Website usage data (via cookies β see our Privacy Policy)
We do not collect sensitive personal data (as defined under Article 9 GDPR) unless you voluntarily provide it and give explicit consent for its processing.
Why we collect it
We process personal data for the following legitimate purposes:
- Candidates: To assess suitability for roles, introduce you to prospective employers, and maintain a record of our relationship and previous searches.
- Clients: To manage recruitment mandates, communicate about search progress, and maintain commercial relationships.
- Website visitors: To improve website functionality and understand how our site is used.
Our lawful basis for processing is legitimate interests (for recruitment activities) and consent (for marketing communications). You may withdraw consent at any time.
How long we keep your data
We retain candidate data for a maximum of two years from last contact, unless you request deletion sooner or consent to a longer retention period. Client data is retained for the duration of our commercial relationship and seven years thereafter for accounting and legal purposes.
Who we share data with
We do not share your personal data with third parties for marketing purposes. We may share candidate data with prospective employers only with your explicit consent. We use a small number of trusted third-party service providers (CRM systems, email platforms) who process data only on our instruction and under GDPR-compliant data processing agreements.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to processing or withdraw consent
- Request data portability
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email us at info@dynamitesearchgroup.com. We will respond within 30 days.
Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to authorised personnel only.
Changes to this policy
We may update this policy periodically. Material changes will be communicated via our website. The current version is always available at this URL.