Privacy & GDPR notice

Who we are (the controller)

The controller is GRT Consulting Limited, a company registered in England and Wales under company number 09162170. Our registered office is The Retreat, 406 Roding Lane South, Woodford Green, Essex, IG8 8EY. Our main trading address is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

For privacy questions, to exercise your rights, or to withdraw consent, email us at info@grtconsult.com.

What we collect

• Account details: name, email address and a hashed password.
• Your CV file and the text in it, and the profile you confirm: work history, education, certifications, skills, sectors, rank and years of experience, and any phone number or LinkedIn URL you provide.
• Right to work in the UK, availability, notice period, day rate and location preferences.
• Notes and tags GRT staff add when considering you for roles.
• Technical data needed to run the portal, such as login session cookies and security logs (for example IP address used to prevent abuse).

Why we use it, and our lawful bases

We hold your details and CV in our candidate database so we can search and put you forward for consultancy and other roles within GRT Consulting Limited and its affiliates, and with clients when we are proposing you for a specific role. We also use your data to run your account, contact you about roles and your profile, and improve the portal.

• Consent (UK GDPR Article 6(1)(a)), given when you tick the mandatory box on registration, CV upload or profile submission, for holding your data in the candidate database and using it to search and put you forward for roles within GRT Consulting and its affiliates.
• Legitimate interests (Article 6(1)(f)), in operating a consultant network, keeping the portal secure, and administering your account.
• Legal obligation (Article 6(1)(c)), where we need right-to-work or similar information to meet our legal duties when placing you in a role.

You can withdraw consent at any time by deleting your account from your profile page or by emailing info@grtconsult.com. Withdrawal does not affect processing already carried out. If you withdraw consent for the candidate database, we will stop using your profile to search or put you forward for roles and will delete your account, profile and CV, unless we must keep a limited record to meet a legal obligation.

AI pre-fill of your profile

If you choose AI pre-fill when you upload your CV, we remove your email address, phone numbers, postcodes and web links from the text and send the rest to an AI model (hosted by our processor) to suggest your work history, education and skills. The suggestions are shown to you to check and edit. Nothing is submitted until you press Submit. No decision about you is made solely by automated means. You can switch AI pre-fill off and complete your profile yourself.

Who we share it with

Only authorised GRT staff can see your profile and CV in the portal. We may share your details, CV and GRT-branded profile with:

• affiliates of GRT Consulting Limited, so they can consider you for roles in their businesses; and
• clients, only when we are proposing you for a specific role.

We also use service providers who process data for us (for example website and application hosting, email delivery if enabled, and the AI model used for optional CV pre-fill). They may only use your data on our instructions. CV files are stored privately and are never published on the website. We may disclose data if the law requires it.

International transfers

GRT places consultants in the United Kingdom, India, Germany, Hong Kong, Japan and Australia. If we put you forward for a role, your personal data may be accessed or received in those countries by our affiliates or by the relevant client. Some of our processors may also be located, or may store data, outside the UK.

Where we transfer personal data outside the UK to a country that is not covered by a UK adequacy regulation, we use appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for more information about these safeguards using the contact details above.

How long we keep it

We keep your account, profile and CV for 72 months (six years) after your last sign-in or profile update. This period is aligned with the six-year limitation period under the Limitation Act 1980 for potential legal claims, and allows us to match you to future roles over a similar horizon. After that we delete your account, profile and CV automatically. You can withdraw consent or ask us to delete your data at any time from your profile page, or by emailing us. We may keep a minimal record of a deletion request or of legal compliance for a short additional period if we are required to do so.

Your rights

You have the right to access, correct, download (port) or delete your data, to withdraw consent, to restrict or object to certain processing, and not to be subject to a solely automated decision with legal or similarly significant effects (we do not make such decisions). Use the options on your profile page, or email info@grtconsult.com.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.

Cookies

The portal uses strictly necessary cookies to keep you signed in and to protect the service (session and security cookies set by our sign-in system). These are allowed under PECR without a consent banner. We do not use advertising or analytics cookies on the portal. The marketing website at grtconsult.com has a separate cookie policy.

Security

We protect your data with HTTPS, hashed passwords, access limited to authorised staff, and private storage of CV files. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to reduce the risk of unauthorised access, loss or misuse.

Changes

If we change this notice we will update the version number and date on this page. If the change is material we may also ask you to review it and tick the consent box again the next time you submit data.

Back to the portal