Home About Industries Jobs

Privacy Notice

Data controller: Bigfoot BHX Limited (Company Number: 13360347) - trading as “evacy.eu”

Registered in England: 128 City Road, London, England, EC1V 2NX

Privacy Officer: nicholas@evacy.eu

Last Updated: 01/02/2025

Introduction:

evacy.eu is a recruitment consultancy which provides business-to-business (B2B) services to its clients, prospective candidates, and consultants. We process personal data to provide these services.

This notice has been developed in line with the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA18).

What personal data do we collect and how do we use it?

This privacy notice sets out how we collect and use your personal data:

Purpose (why we use your personal data) What personal data we collect The legal basis How long do we keep this personal data for?
To assess candidates for our clients’ contract opportunities. Candidate CVs, Application Data, Interview Notes, Job Preferences It is in our legitimate interest to improve our services and tailor recruitment strategies. We keep this data for 1 year for potential future opportunities.
To facilitate contract signing and enforce contractual obligations. Full Name, Email Address, Job Title, Company Name, Contract Details, Signature To fulfill our contract with you. We retain contract data for 6 years after the contract ends.
To process invoices for our services. Full Name, Company Name, Company Number, VAT Number, Company Address, Mobile Number, Email Address, Transaction Data To fulfill our contract with you. We are legally required to keep financial records for 7 years.
To respond to engage with our clients, candidates, and consultants. Full Name, Email Address, Conversation Data, LinkedIn Profile Data It is in our legitimate interest to engage with you and conduct business. We keep this data for 1 year.
To respond to and defend against legal claims. Company Name, Full Name, Email Address, Legal Claim Details It is in our legitimate interest to defend against legal claims. We retain records for 6 years after the legal case concludes.
To store and manage website user data via Google Firebase. User ID, Basic Device Information It is in our legitimate interest to ensure website functionality. We retain this data for 1 year.

Where do we get your personal data from?

Directly from you when you apply for one of our job listings or through your LinkedIn profile.

Sharing Personal Data

We share your personal data with the following third parties:

In some cases, we may be obliged to provide personal data to law enforcement agencies and legal courts.

International Transfers of Personal Data

Your personal data is hosted within the European Economic Area (EEA), but may be transferred to countries outside the EEA.

Where no adequacy decision is in place, our third-party partners use the European Commission’s standard contractual clauses to ensure that transfers comply with GDPR protection requirements.

A copy of these safeguards is available here:

Your Rights

You have certain privacy rights:

Your Rights Description of Rights Rights in Practice
Right of access You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and, where that is the case, access to that personal data. We will provide a copy of all personal data belonging to you, or specific personal data if you so require it. This will not include the personal data of any other individuals, or information regarding our operations. We will redact where necessary for the purposes of confidentiality.
Right to rectification You have the right to oblige us to rectify inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data corrected. This only applies to inaccurate personal data.
Right to deletion You have the right (under certain circumstances, but not all) to oblige us to delete personal data concerning you. The right only applies:
  • Where the personal data is no longer necessary;
  • If you withdraw consent;
  • If we unlawfully held your personal data;
  • If you successfully object to our processing;
  • If we have to follow a legal obligation to delete the personal data.
Right to restriction of processing You have the right (under certain circumstances, but not all) to oblige us to restrict the processing of your personal data. The right only applies:
  • Where you contend the accuracy of any personal data until it has been made accurate;
  • Where you have objected to any processing whilst we present our evidence;
  • If we are processing anything unlawfully and you do not wish for it to be erased;
  • If we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.
Right to data portability You have the right (under certain circumstances, but not all) to data portability. This right does not apply as we do not process your data by automated means.
Right to withdraw consent If the lawful basis for processing is consent, you have the right to withdraw that consent. This right does not apply, as we do not process your data under this legal basis. All cookies on our website are strictly necessary and based on legitimate interest.
Right to object to direct marketing You have the right to object at any time to processing of your personal data. This right does not apply, as we do not engage in direct marketing activities.
Rights in relation to automated decision making and profiling You have rights relating to automated decision-making based on personal data that produces legal effects or similarly significantly affects you. This right does not apply as we do not carry out any automated decision making based on profiling.

For more information about any of your rights, please visit here.

How to Contact Us

For all enquiries about data privacy or to exercise your rights, please contact our Privacy Officer: nicholas@evacy.eu