Privacy Policy

Policies

Privacy & Cookie Policy

Privacy & Cookie Policy

At Ambitions Travel Recruitment and Training Ltd (“Ambitions”, “we”, “us”, or “our”), your privacy matters. We are committed to protecting your personal data and respecting your rights.

This Privacy & Cookie Policy explains how we collect, use, share, and safeguard your personal data when you use our website www.ambitionstravelrecruitment.com, register with us, or interact with us as a candidate, client, prospective contact, supplier, or website user.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Scope of this Policy

This policy applies to:

  • Candidates – individuals who register with us for work-finding services, or whose details we source from third parties (e.g. LinkedIn, job boards, referrals).
  • Prospective candidates – individuals we may contact about potential opportunities in the future.
  • Clients and prospective clients – business contacts at organisations we work with or may work with.
  • Suppliers – contacts at organisations providing services to us.
  • Website users – anyone who uses our website or digital platforms.

    2. What Personal Data We Collect

    Candidates

    • Name, contact details, date of birth, job title, CV, career history, qualifications, skills, salary details, benefits, and work preferences.
    • For placements in South Africa only: race information, where required for compliance with South African employment equity and broad-based black economic empowerment (B-BBEE) legislation. We do not otherwise collect diversity information, health data, or details of unspent criminal convictions.
    • References, feedback from clients, or test results where applicable.

    Prospective candidates

    • Publicly available information such as LinkedIn profiles, professional networking details, referrals, or data from job boards.

    Clients and prospective clients

    • Name, job title, business contact details, communications with us, feedback on candidates, and information about recruitment requirements.
    • Records of invoicing and commercial transactions where relevant.

    Suppliers

    • Business contact details required for managing our commercial relationship.

    Website users

    • IP address, browser/device details, engagement with our website and marketing communications.
    • Cookies and similar technologies (see Section 10).

    3. How We Collect Data

    We may collect data from:

    • We may collect data from:

      1. Directly from you (e.g. when you register, apply for a role, engage our services, or contact us).
      2. Third parties such as referees, former employers, educational institutions, job boards, social media platforms (e.g. LinkedIn), or clients providing feedback.
      3. Publicly available sources (e.g. company websites, industry directories).

      We may identify potential candidates through job boards, professional networking sites and other public sources. We only add your details to our Candidate database if you respond and agree to be considered for opportunities.

    4. How We Use Your Data

    For candidates

    • To provide work-finding and recruitment services.
    • To assess suitability for roles, shortlist, and present you to clients.
    • To communicate with you about opportunities, updates, or insights.
    • To carry out reference checks, qualification checks, or compliance checks.
    • To send you relevant newsletters or job alerts (where you consent or where based on legitimate interest).

    For clients

    • To provide recruitment services.
    • To communicate with you about candidates, roles, and services.
    • To manage our commercial relationship, including invoicing.
    • To gather feedback on candidates and improve our services.
    • To send relevant updates, insights, or service information (with consent or legitimate interest).

    For suppliers

    • To manage our business relationship and the services you provide.

    For website users

    • To understand how our website is used and improve performance.
    • To manage your cookie preferences.
    • To monitor engagement with our digital communications.

    We do not make decisions solely by automated means. AI tools may assist in supporting recruitment processes, but all final decisions are made by human recruiters.

    5. Legal Basis for Processing

    We rely on one or more of the following:

    • Consent – e.g. sending marketing communications.
    • Contract – providing services under client agreements or candidate placements.
    • Legal obligation – compliance with law (e.g. right-to-work checks, accounting); and, for South African placements, collecting race information to comply with South African employment equity and B-BBEE legislation.
    • Legitimate interests – e.g. sourcing candidates, maintaining client relationships, improving our services (balanced against your rights).

    6. Sharing Your Data

    We may share personal data with:

    • Clients – when submitting candidates for roles (only with candidate consent first).

    Service providers/processors, including:

    • JobAdder (applicant tracking system, hosted in the UK and Australia).
    • Microsoft (Microsoft 365 / Business – email and file storage).
    • CookieYes (cookie consent management).
    • Google Analytics (website analytics).
    • Approved AI-assisted tools, used to support administrative and recruitment work (see Section 11).
    • Referees, qualification checkers, background screening providers – where required.
    • Suppliers and advisers – e.g. IT, hosting, compliance, legal, financial.
    • Regulators or authorities – where required by law.

    We advertise roles and search for candidates via third-party platforms including LinkedIn and Reed. These platforms act as independent data controllers of information you provide to them directly, and process it under their own privacy policies. We are not responsible for their processing of your data.

    Where we transfer data outside the UK/EEA, we ensure safeguards (e.g. adequacy decisions or Standard Contractual Clauses).

    7. Data Retention

    • Candidates – up to 60 months from last meaningful contact. “Last meaningful contact” means a response, application, updated CV, interview, placement activity, or your express confirmation that you wish to remain registered with us; the 60-month period restarts from that contact.
    • Prospective candidates/business contacts – while relevant, or until you opt out.
    • Clients and suppliers – for the duration of the relationship plus a reasonable period thereafter.
    • Marketing contacts – until you unsubscribe or withdraw consent.
    • Legal/financial records – as required by law.

    You may request earlier deletion at any time.

    8. Data Security

    We use secure servers and apply technical and organisational measures to protect data. Access is restricted to authorised staff and processors only.

    In the event of a breach likely to impact your rights, we will notify the ICO and affected individuals where required.

    9. International Transfers

    Some of our service providers may process personal data outside the UK. Where a restricted transfer occurs, we use an applicable lawful mechanism, such as UK adequacy regulations, the UK-US Data Bridge, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. You may contact us for further information about the safeguards relevant to your data.

    10. Cookies

    What Are Cookies?
    Cookies are small text files stored on your device when you visit a website.

    Types of Cookies We Use:

    • Necessary Cookies
        – cookieyes-consent – Stores your cookie preferences. Duration: 1 year.
    • Analytics Cookies
        – _ga – Google Analytics, tracks usage anonymously. Duration: 1 year 1 month 4 days.
      – _ga_* – Google Analytics, stores and counts page views. Duration: 1 year 1 month 4 days.

    Managing Cookies. You can manage or disable cookies via:

    • The cookie banner on our site (powered by CookieYes).
    • Your browser settings.

    Disabling certain cookies may affect site functionality.

      11. Use of AI Tools

      We use approved AI-assisted tools, including generative AI, to support administrative and recruitment work such as summarising information, comparing experience with role requirements and drafting communications. These tools support our recruiters and do not make final decisions. We do not use solely automated decision-making or profiling that produces legal or similarly significant effects. All Candidate assessments, shortlisting and submissions are reviewed and decided by a human recruiter. Where a provider processes personal data for us, we use appropriate contractual, security and international-transfer safeguards.

      12. Your Rights

      You have the right to:

      • Be informed about how we process your data.
      • Access the data we hold about you.
      • Request correction, deletion, or restriction.
      • Object to processing.
      • Request data portability.
      • Withdraw consent where given.
      • Challenge automated decisions and profiling.

      To exercise these rights, email info@ambitionstravelrecruitment.com.

      You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/concerns

      13. Contact Us

      Ambitions Travel Recruitment and Training Ltd
      Registered in England, company number 13834007
      Registered Office: First Floor, 7 High Street East, Glossop, England, SK13 8DA

      Email: info@ambitionstravelrecruitment.com

      14. Changes to This Policy

      We may update this Privacy & Cookie Policy from time to time. The latest version will always be available on our website.