Legal and compliance · v1.0

Privacy and data policy

What personal data we collect, why, our lawful bases, how long we keep it and the rights you have under UK GDPR.

Last updated 6 September 2026

This policy explains how we handle personal data. It is written for the UK GDPR and the Data Protection Act 2018. Where the EU GDPR applies to you, the same rights and processes apply.

Controller

KnowQaunt Ltd (trading as KnowQaunt), registered in England and Wales, company number TBC. Registered office: TBC, London, United Kingdom. ICO data protection registration TBC.

For any data protection question, contact our Data Protection Lead at privacy@know-quant.com.

The data we collect

Site visitors. Pages viewed, referring page, approximate location derived from IP, device and browser type, and interaction events. Analytics only run if you accept analytics cookies.

Saved searches and preferences. Filters, watchlists, theme and alert settings. These are stored in your browser unless you create an account, in which case they are stored against your account.

Candidates and applicants. Name, email address, phone number, current job title and employer, years of experience, location, right to work confirmation, CV file and any notes you add. If you upload a CV it may contain further information you have chosen to include.

Enquiries. Anything you send us by email or through a form.

We do not deliberately collect special category data. Please do not include health, ethnicity, religion, political opinion or similar details in a CV or a message. Where such data reaches us inside a CV, we process it only as necessary for the recruitment purpose and on the basis of your explicit consent, and we delete it on request.

The site is not intended for anyone under 16 and we do not knowingly collect their data.

Why we use it, and our lawful basis

  • Running and securing the site. Legitimate interests in operating a safe, working service.
  • Presenting market intelligence. Legitimate interests in publishing aggregated, anonymised market data. Published listings and benchmarks do not identify individuals.
  • Handling applications and introducing candidates to employers. Steps taken at your request before a contract, and legitimate interests in matching you to relevant roles. We only share your details with a named employer with your specific agreement.
  • Alerts and marketing emails. Your consent, which you can withdraw at any time using the unsubscribe link or by emailing us.
  • Analytics and performance measurement. Your consent, given through the cookie banner.
  • Legal and regulatory compliance. Legal obligation, including record keeping under employment agency law and tax law.

We do not sell personal data and we do not use automated decision making that produces legal or similarly significant effects about you. Relevance scoring on the site ranks vacancies; it never decides an outcome about a person.

Who we share it with

  • Employers and their hiring teams, only where you have agreed to be put forward for a specific role.
  • Service providers who host the site and database, store CV files, send email, and provide analytics and error monitoring. Each acts under a written processing agreement.
  • Professional advisers, insurers and authorities, where we are required to disclose or need to establish or defend a legal claim.

International transfers

Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Agreement, or the EU standard contractual clauses with the UK Addendum, together with a transfer risk assessment. You can ask us for details of the safeguards in place.

How long we keep it

  • Candidate profiles and CVs: 24 months from your last interaction, then deleted or re-permissioned.
  • Application records: 24 months, so we can evidence fair and lawful handling.
  • General enquiries: 12 months.
  • Analytics data: up to 14 months.
  • Accounting and tax records: six years, as required by law.

Security

CV files are held in private storage that is not publicly reachable. Database access is restricted by row level security so records are only visible to the person who created them and to authorised staff. Access is limited to those who need it, transfers are encrypted, and we log administrative access. No system is perfectly secure, so please do not send us material you would not want stored.

We report qualifying personal data breaches to the Information Commissioner within 72 hours and tell affected individuals where the risk is high.

Your rights

You have the right to be informed, and rights of access, rectification, erasure, restriction, portability and objection, plus the right to withdraw consent at any time and the right to object to direct marketing at any time.

To exercise any of these, email privacy@know-quant.com. We respond within one month and we do not charge unless a request is manifestly unfounded or excessive. We may need to verify your identity first.

If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk, by phone on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to put things right first.

Changes

We update this policy as the service changes. The date at the top shows the current version, and material changes are highlighted on the site.

KnowQaunt Ltd · company number TBC · TBC, London, United Kingdom. Questions about this document: legal@know-quant.com.