Privacy Policy
Last updated: 2 July 2026
Progress Lane Recruitment Agency Ltd ("Progress Lane", "we", "us") is an international specialist recruitment practice operating across AI, cyber security and Product & Engineering. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have in relation to that data.
1. Who we are
Progress Lane Recruitment Agency Ltd is the data controller for personal data processed in connection with our recruitment services. You can contact us at privacy@progresslane.co.
2. Personal data we collect
Candidates
- Identity and contact data: name, email, phone, location, nationality where relevant to right-to-work.
- Professional data: CV/resume, employment history, education, certifications, references, portfolios, GitHub / publications.
- Compensation preferences, notice period, work authorisation and relocation preferences.
- Interview feedback, assessment outcomes and correspondence with us and prospective employers.
- Sensitive data only where lawful and necessary (e.g. accessibility requirements for interviews) with your consent.
Clients
- Business contact details of hiring managers and stakeholders.
- Role requirements, compensation bands, engagement terms, invoicing and payment data.
Website visitors
- Device, browser and IP data, and cookie identifiers - see our Cookie Policy.
3. How we use personal data
- Identifying and assessing candidates for current and future roles.
- Introducing candidates to clients under NDA and terms of business.
- Managing search assignments, contracts, invoicing and compliance.
- Communicating relevant market updates, mandates and industry insight (where lawful).
- Meeting legal, regulatory and audit obligations across the jurisdictions we operate in.
4. Lawful bases
- Legitimate interests - running a recruitment practice, sourcing talent, and contacting professionals in the AI, cyber and Product & Engineering markets.
- Contract - where we are entering into or performing a contract with you or your employer.
- Consent - where required (e.g. sharing your CV with a specific client, sensitive data, direct marketing where mandated).
- Legal obligation - tax, right-to-work, anti-money-laundering and other statutory duties.
5. Who we share data with
- Prospective employers (only after we discuss the opportunity with you).
- Reference providers you have nominated.
- Trusted service providers (hosting, CRM, applicant tracking, background screening) under appropriate contracts.
- Professional advisors, regulators and authorities where legally required.
We do not sell personal data.
6. International transfers
Because we operate internationally, personal data may be transferred outside your country of residence - including to the UK, EEA, United States and Middle East. Where required we rely on adequacy decisions, Standard Contractual Clauses, the UK IDTA or equivalent safeguards.
7. Data processing & retention
This section sets out, at a glance, what data we process, why, how long we keep it, and who to contact. It complements the details above.
| Data category | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Candidate profile (CV, contact, career history) | Assess and introduce to relevant roles | Legitimate interests / Consent | Up to 6 years from last meaningful contact |
| Interview & assessment notes | Manage search process and client submissions | Legitimate interests | Up to 3 years post-placement or process close |
| Right-to-work & ID documents | Statutory compliance for placements | Legal obligation | Duration of engagement + 2 years |
| Client contact & engagement records | Deliver services, invoicing, audit | Contract / Legal obligation | 7 years (tax & contractual) |
| Marketing preferences | Market insight & role alerts | Consent | Until withdrawn |
| Website analytics (aggregated) | Improve site performance | Consent (see Cookie Policy) | Up to 14 months |
At the end of the applicable period we securely delete or anonymise records, unless a longer period is required by law or to establish, exercise or defend legal claims.
8. Your rights
- Access, rectification, erasure and portability of your personal data.
- Restriction of, or objection to, certain processing.
- Withdrawal of consent where processing is consent-based.
- Right to lodge a complaint with your local supervisory authority (e.g. the UK ICO).
To exercise any of these, email privacy@progresslane.co.
9. Security
We use administrative, technical and physical safeguards including encryption in transit, access controls, least-privilege, MFA on internal systems, and vendor due diligence appropriate to a firm operating in the security industry.
10. Changes
We may update this policy from time to time; the "Last updated" date reflects the most recent change.
11. Contact us
- Email (privacy & rights requests): privacy@progresslane.co
- Data Protection Officer: dpo@progresslane.co
- Security & incident reports: security@progresslane.co
- Postal: Progress Lane Recruitment Agency Ltd, 128 City Road, London EC1V 2NX, United Kingdom
- UK supervisory authority: Information Commissioner's Office - ico.org.uk