IRG Law Ltd (“IRG Law”, “we”, “us” or “our”) is a specialist legal recruitment consultancy. We are committed to protecting your privacy and handling your personal data in an open, honest and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains what personal data we collect when you engage with us as a candidate, a client, or a visitor to this website, how we use it, the legal basis on which we rely, how long we keep it, and the rights available to you.
Who we are
IRG Law Ltd is the data controller responsible for your personal data. We are registered in England & Wales (company number 14442820). Our registered address is 68 Highmoor Road, Caversham, Berkshire RG4 7BG, United Kingdom. You can contact us about any privacy matter at info@irglaw.co.uk.
The personal data we collect
Depending on how you interact with us, we may collect and process:
- Candidates: your name, contact details (email, phone), CV and career history, qualifications and PQE, current and desired remuneration, references, right-to-work information, and notes relating to your job search and the roles you are interested in.
- Clients and prospective clients: the names and business contact details of individuals at hiring firms, details of your recruitment requirements, and correspondence relating to our engagement.
- Website visitors: any information you submit through our contact or registration forms (name, email, phone, message, and any CV or document you upload), plus limited technical data such as your IP address and basic analytics about how the site is used.
How we collect your data
We collect personal data directly from you (for example when you contact us, register with us or send us your CV), from your interactions with this website, and, where relevant and lawful, from publicly available professional sources such as LinkedIn, law firm websites and regulatory registers as part of our market research and search activity.
How we use your data and our legal basis
We use personal data to:
- respond to your enquiries and provide our recruitment services;
- match candidates to suitable roles and present shortlists to clients;
- manage placements, offers and onboarding;
- keep you informed about relevant opportunities and market insight; and
- meet our legal, regulatory and contractual obligations.
We rely on the following lawful bases: our legitimate interests in providing recruitment services and operating our business (balanced against your rights and interests); the performance of a contract with you or steps taken at your request before entering into one; your consent where required (for example certain marketing or the onward sharing of your details); and compliance with a legal obligation where applicable.
Sharing your data
We do not sell your personal data. As a recruitment consultancy, the core of our service involves introducing candidates to clients. We will never share your details with a hiring firm without your prior consent. We may also share data with trusted service providers who support our operations (for example IT, email and applicant-tracking providers such as JobAdder), who act on our instructions and are bound to protect your data. We may disclose data where required by law or to protect our legal rights.
How long we keep your data
We keep personal data only for as long as necessary for the purposes set out above and to meet our legal and regulatory obligations. For candidates, we typically retain data for the duration of our relationship and for a reasonable period afterwards so we can consider you for future opportunities, unless you ask us to delete it sooner. We review the data we hold periodically and securely delete information that is no longer needed.
Cookies and analytics
This website may use a limited number of cookies and similar technologies to help it function and to understand how visitors use it. Where any non-essential cookies are used, we will seek your consent. You can control cookies through your browser settings.
Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure, and we keep those measures under review.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data in certain circumstances;
- restrict or object to our processing of your data;
- request the portability of your data; and
- withdraw any consent you have given, at any time.
To exercise any of these rights, please email info@irglaw.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk, although we would welcome the chance to address your concerns first.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.