Privacy Policy
Last updated: 11 September 2026
This Privacy Policy explains how Purpose+Impact collects, uses and protects personal data through our recruitment activities, our website and our professional relationships with candidates, clients and other contacts. We are committed to handling personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and other applicable data protection law.
Who We Are
Purpose+Impact provides recruitment services to charities and other not for profit organisations.
For the purposes of data protection law, Purpose+Impact is the Data Controller in relation to the personal data described in this policy.
We use third party service providers to support our work, including Recruitly, which we use to manage candidate, client and recruitment information, and Hostinger, which provides services associated with our website. Where these providers process personal data on our behalf, they act as Data Processors.
What Data We Collect
Depending on your relationship with us, we may collect and process:
your name, contact details and location;
your CV or résumé, employment history, qualifications and other professional information;
information about your eligibility to work;
information provided during applications, interviews or screening conversations;
references and other information relevant to a recruitment process;
information about your organisation and professional role;
communications between you and Purpose+Impact;
information you provide when contacting us through our website, by email, by telephone or through other communication channels;
technical information generated when you use our website, where applicable; and
other information reasonably necessary for recruitment or professional collaboration.
We do not ask candidates to provide information that is not reasonably relevant to our recruitment activities.
Where We Obtain Your Data
We may obtain personal data directly from you when you apply for a position, send us your CV, contact us, communicate with one of our consultants or submit information through our website.
We may also obtain professional information from other sources. For example, when searching for potential candidates, we may identify people through publicly available professional sources, professional networks, referrals or information provided by organisations for which we are recruiting.
Where we obtain personal data about you from another source, we will provide the information required under applicable data protection law within the required timeframe, unless an exemption applies.
How We Use Your Data
We may use personal data:
to assess suitability for positions for which we are recruiting;
to identify and contact people who may be suitable for relevant opportunities;
to manage applications and recruitment processes;
to communicate with candidates, clients and professional contacts;
to provide recruitment and related services to clients;
to maintain records of applications, assignments and relevant communications;
to respond to enquiries submitted through our website or other communication channels;
to maintain and develop professional relationships;
to administer and protect our website, systems and services;
to fulfil legal or regulatory requirements; and
to establish, exercise or defend legal claims where necessary.
Legal Basis for Processing
We process personal data only where we have a lawful basis for doing so. Depending on the circumstances, this may include:
Legitimate interests: We process personal data where this is reasonably necessary to provide recruitment services, identify and communicate with potential candidates, respond to enquiries, maintain professional relationships, operate our business and protect our legitimate interests, provided those interests are not overridden by your rights and interests.
Contract: We may process personal data where this is necessary to take steps at your request before entering into a contract or to perform a contract to which you are a party.
Legal obligations: We may process or retain information where this is necessary to comply with an obligation imposed by law.
Consent: In circumstances where consent is the appropriate lawful basis, we will ask for your permission. Where processing is based on consent, you may withdraw that consent at any time.
Recruitment Search and Sourcing
Not everyone we contact about a position will have applied for a vacancy or previously contacted Purpose+Impact.
As part of our recruitment search activities, we may identify people whose professional experience appears relevant to a position for which we are recruiting. Information used for this purpose may come from publicly available professional sources, professional networks, referrals or other lawful sources.
We normally process this information on the basis of our legitimate interests in providing recruitment services and identifying potential candidates for our clients. You may object to this processing at any time.
Sharing Your Data
We may share personal data with:
organisations for which we are conducting recruitment, where sharing the information is appropriate to the recruitment process;
service providers that support our recruitment, communications, website and business systems;
professional advisers where reasonably necessary; and
public authorities, regulators or other parties where disclosure is required by law.
We do not sell personal data and do not provide personal data to third parties for their own unrelated marketing purposes.
Where appropriate, we will discuss the disclosure of a candidate's information to a prospective employer with the candidate before making that disclosure.
Service Providers
We use third party technology providers to support our work. These include Recruitly for recruitment and contact management and Hostinger for services associated with our website.
Other providers may be used for email, communications, document storage and other business functions. We require providers processing personal data on our behalf to handle that information appropriately and in accordance with applicable data protection requirements.
International Transfers
Some of the service providers we use may process or store personal data outside Ireland or the European Economic Area.
Where personal data is transferred to a country outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection law. Depending on the circumstances, these safeguards may include a European Commission adequacy decision, approved Standard Contractual Clauses or another legally recognised transfer mechanism.
You may contact us if you would like further information about safeguards applying to your personal data.
How Long We Keep Your Data
We retain personal data only for as long as reasonably necessary for the purposes for which it is processed.
As a general rule, we retain candidate and professional contact records for up to two years following the most recent meaningful interaction with us, unless:
you ask us to delete your information sooner and we have no legal or other valid reason to retain it;
we are required or permitted by law to retain particular information for longer; or
you have agreed to a longer retention period where consent is the appropriate basis.
Different retention periods may apply to information that we are required to retain for legal, contractual, accounting or regulatory purposes.
Website Enquiries
If you contact us through our website, we will use the information you provide to respond to your enquiry and, where relevant, to provide or discuss our services.
Information submitted through the website may be processed by service providers involved in operating the website and delivering communications to us.
We retain enquiries for as long as reasonably necessary to respond to them and to maintain an appropriate record of subsequent professional communications.
Cookies and Website Technologies
Our website may use cookies and similar technologies that are necessary for its operation.
Where we use analytics, advertising or other technologies that require consent under applicable law, we will obtain that consent before those technologies are activated. Where applicable, further information and controls will be provided through the website's cookie settings.
Automated Decision Making
Purpose+Impact does not make recruitment decisions about candidates solely through automated processing where those decisions would produce legal or similarly significant effects.
Technology may be used to assist with aspects of recruitment administration or candidate identification, but recruitment decisions involve human judgement.
Your Rights
Depending on the circumstances and the lawful basis on which your personal data is processed, you may have the right to:
obtain information about how your personal data is processed;
access personal data we hold about you;
request correction of inaccurate or incomplete information;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent at any time where processing is based on consent; and
exercise rights relating to automated decision making where applicable.
These rights are subject to the conditions and exemptions contained in data protection law and do not apply in every circumstance.
To exercise your rights or ask us about the processing of your personal data, contact dataprotection@purposeandimpact.org.
You also have the right to lodge a complaint with Ireland's Data Protection Commission if you believe that your personal data has been processed in breach of data protection law.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
These measures include appropriate access controls, secure systems and the use of service providers that are required to protect personal data processed on our behalf.
Changes to This Policy
We may update this Privacy Policy when our services, technology or data processing activities change, or where changes are required to reflect applicable law. The date at the top of this page indicates when the policy was last updated.
Contact
If you have questions about this Privacy Policy, want to exercise your data protection rights or have concerns about how your personal data is handled, please contact:
Purpose+Impact
Email: dataprotection@purposeandimpact.org
77 Camden Street Lower
Dublin D02 XE80
Ireland
