Progress Lane← Back to site
Legal
Privacy PolicyTerms of ServiceCookie PolicyData ProtectionAcceptable UseModern SlaveryEqual OpportunitiesComplaintsEU AI Act & Responsible AI
Legal · 01

Privacy Policy

Last updated: 2 July 2026

Progress Lane Recruitment Agency Ltd ("Progress Lane", "we", "us") is an international specialist recruitment practice operating across AI, cyber security and Product & Engineering. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have in relation to that data.

1. Who we are

Progress Lane Recruitment Agency Ltd is the data controller for personal data processed in connection with our recruitment services. You can contact us at privacy@progresslane.co.

2. Personal data we collect

Candidates

  • Identity and contact data: name, email, phone, location, nationality where relevant to right-to-work.
  • Professional data: CV/resume, employment history, education, certifications, references, portfolios, GitHub / publications.
  • Compensation preferences, notice period, work authorisation and relocation preferences.
  • Interview feedback, assessment outcomes and correspondence with us and prospective employers.
  • Sensitive data only where lawful and necessary (e.g. accessibility requirements for interviews) with your consent.

Clients

  • Business contact details of hiring managers and stakeholders.
  • Role requirements, compensation bands, engagement terms, invoicing and payment data.

Website visitors

  • Device, browser and IP data, and cookie identifiers - see our Cookie Policy.

3. How we use personal data

  • Identifying and assessing candidates for current and future roles.
  • Introducing candidates to clients under NDA and terms of business.
  • Managing search assignments, contracts, invoicing and compliance.
  • Communicating relevant market updates, mandates and industry insight (where lawful).
  • Meeting legal, regulatory and audit obligations across the jurisdictions we operate in.

4. Lawful bases

  • Legitimate interests - running a recruitment practice, sourcing talent, and contacting professionals in the AI, cyber and Product & Engineering markets.
  • Contract - where we are entering into or performing a contract with you or your employer.
  • Consent - where required (e.g. sharing your CV with a specific client, sensitive data, direct marketing where mandated).
  • Legal obligation - tax, right-to-work, anti-money-laundering and other statutory duties.

5. Who we share data with

  • Prospective employers (only after we discuss the opportunity with you).
  • Reference providers you have nominated.
  • Trusted service providers (hosting, CRM, applicant tracking, background screening) under appropriate contracts.
  • Professional advisors, regulators and authorities where legally required.

We do not sell personal data.

6. International transfers

Because we operate internationally, personal data may be transferred outside your country of residence - including to the UK, EEA, United States and Middle East. Where required we rely on adequacy decisions, Standard Contractual Clauses, the UK IDTA or equivalent safeguards.

7. Data processing & retention

This section sets out, at a glance, what data we process, why, how long we keep it, and who to contact. It complements the details above.

Data categoryPurposeLawful basisRetention
Candidate profile (CV, contact, career history)Assess and introduce to relevant rolesLegitimate interests / ConsentUp to 6 years from last meaningful contact
Interview & assessment notesManage search process and client submissionsLegitimate interestsUp to 3 years post-placement or process close
Right-to-work & ID documentsStatutory compliance for placementsLegal obligationDuration of engagement + 2 years
Client contact & engagement recordsDeliver services, invoicing, auditContract / Legal obligation7 years (tax & contractual)
Marketing preferencesMarket insight & role alertsConsentUntil withdrawn
Website analytics (aggregated)Improve site performanceConsent (see Cookie Policy)Up to 14 months

At the end of the applicable period we securely delete or anonymise records, unless a longer period is required by law or to establish, exercise or defend legal claims.

8. Your rights

  • Access, rectification, erasure and portability of your personal data.
  • Restriction of, or objection to, certain processing.
  • Withdrawal of consent where processing is consent-based.
  • Right to lodge a complaint with your local supervisory authority (e.g. the UK ICO).

To exercise any of these, email privacy@progresslane.co.

9. Security

We use administrative, technical and physical safeguards including encryption in transit, access controls, least-privilege, MFA on internal systems, and vendor due diligence appropriate to a firm operating in the security industry.

10. Changes

We may update this policy from time to time; the "Last updated" date reflects the most recent change.

11. Contact us

Progress Lane Recruitment Agency Ltd - Data Protection
  • Email (privacy & rights requests): privacy@progresslane.co
  • Data Protection Officer: dpo@progresslane.co
  • Security & incident reports: security@progresslane.co
  • Postal: Progress Lane Recruitment Agency Ltd, 128 City Road, London EC1V 2NX, United Kingdom
  • UK supervisory authority: Information Commissioner's Office - ico.org.uk
© 2026 Progress Lane Recruitment Agency Ltd.Powered by The Progress Lane Group
Edit with