Privacy Policy

Who We Are

We are a recruitment service provider based in Ireland. We use Recruitly to manage applications, contacts, and related recruitment activity. For the purposes of data protection law, we act as the Data Controller in relation to your personal data, and Recruitly acts as a Data Processor on our behalf.

Our recruitment activities comply with Irish employment legislation and are regulated by the Workplace Relations Commission (WRC). We also comply with the General Data Protection Regulation (GDPR), under the oversight of Ireland’s Data Protection Commission (DPC).

What Data We Collect

We may collect and process the following personal data:

• Name, contact details, and location

• CV or résumé, work history, qualifications, and references (for candidates)

• Notes from interviews or screening calls (for candidates)

• Information about your organisation and role (for clients and professional contacts)

• Communications between you and our team

• Other information relevant to recruitment and professional collaboration (for example, work eligibility for candidates)

How We Use Your Data

We use your data for the following purposes:

• To assess your suitability for roles we are recruiting (candidates)

• To contact you about relevant job opportunities (candidates)

• To maintain a record of applications, assignments, and communication history

• To communicate with you in your professional capacity about recruitment, collaboration, or sector-related matters (clients and professional contacts)

• To fulfil legal or regulatory requirements (for example, right-to-work checks)

Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Legitimate interests: to match candidates with job vacancies, to provide recruitment and related services to clients, to maintain professional relationships, and to improve our recruitment processes, where these interests are not overridden by your rights and interests.

• Legal obligations: where we are required to retain or share certain records in order to comply with the law.

• Consent: in specific situations where we ask for your explicit permission for a particular use of your data (for example, to retain your details beyond our standard retention period or to send certain optional updates). Where we rely on consent, you may withdraw it at any time.

How Long We Keep Your Data

We retain your personal data for as long as it is reasonably necessary for the purposes described in this policy. As a general rule, we keep candidate and contact records for up to two years from your last interaction with us, unless:

• you ask us to delete your data sooner;

• we are required by law to retain it for longer; or

• you have given explicit consent for us to retain it for a longer period.

You can request deletion at any time (see below).

Sharing Your Data

We may share your data with:

• Employers or clients we are recruiting on behalf of, where this is necessary for a recruitment process and consistent with what you would reasonably expect

• Technology providers, such as our CRM and email service providers, who support our recruitment and contact management processes

These third parties are required to handle your data securely and in accordance with data protection law. We do not sell your data or share it with third parties for their own marketing purposes.

Your Rights

Under data protection law, you have the right to:

• access the personal data we hold about you;

• request correction of any inaccurate or incomplete data;

• request deletion of your data (“right to be forgotten”) in certain circumstances;

• object to or restrict certain types of processing, including processing based on legitimate interests;

• withdraw consent at any time, where processing is based on your consent.

To exercise these rights, please contact our data protection officer at: dataprotection@purposeandimpact.org

• You also have the right to lodge a complaint with the Data Protection Commission if you are unhappy with how your data is handled.

Security Measures

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. This includes secure storage, access controls, and the use of trusted systems such as Recruitly, which processes personal data on our behalf under contract.

Contact
If you have any questions or concerns about this policy or how your data is handled, please contact us at:

Purpose+Impact
Email: dataprotection@purposeandimpact.org

Address: 77 Camden Street Lower, Dublin D02 XE80, Ireland