Privacy Policy

Privacy Policy
Crestwood Partners
Last updated: 2025

1. Introduction
Crestwood Partners ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect
We may collect and process the following types of personal data:

• Candidates: Name, contact details, CV, employment history, education, references, salary expectations, and other job-related information.
• Clients: Contact names, job role, company details, and recruitment needs.
• Website Visitors: IP address, browser type, and cookies (see our Cookie Policy for more information)

3. How We Use Your Information
We use personal data for the following purposes:

• Recruitment services: Matching candidates with job opportunities.
• Client relationship management.
• Compliance with legal and regulatory requirements.
• Marketing communications (where consent has been given).
• Website analytics and improvements.

4. Legal Basis for Processing
We process personal data under the following legal bases:

• Consent: When individuals opt in to marketing communications.
• Legitimate Interests: For recruitment services and business operations.
• Contractual Necessity: To fulfill our recruitment services.
• Legal Obligations: Compliance with employment laws and regulations.

5. Data Sharing
We may share personal data with:

• Prospective employers for recruitment purposes.
• Service providers (e.g., IT support, payroll providers) under contractual agreements.
• Legal or regulatory authorities if required by law.

We do not sell personal data to third parties.

6. Data Retention
We retain personal data for as long as necessary to fulfill our business purposes and comply with legal obligations. Candidate information is typically retained for 2 years, subject to review.

7. Data Security
We implement technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

8. Your Rights
Under the UK GDPR, individuals have the following rights:

• Access, rectify, or erase personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent (where applicable).
• Lodge a complaint with the Information Commissioner's Office (ICO).

9. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on our website.