Who we are. This policy covers entities trading as “Shortlist Works” or “Shortlist”. We are the data controller for the personal data described in this policy. Contact us using our contact form for more information.
We collect personal data in two contexts: from hiring companies who use our service, and from candidates we identify and contact during a search.
From hiring companies, we may collect:
From candidates, we may collect:
We use personal data only for legitimate purposes connected to our recruitment service. For hiring companies, that means managing the search, delivering candidates and handling invoicing. For candidates, that means assessing suitability, making introductions and keeping records of the process.
We do not sell personal data. We do not share it with third parties except where necessary to deliver the service — for example, sharing a candidate profile with a hiring company or using a payment processor to handle invoices.
We rely on the following legal bases under UK GDPR:
We keep client data for as long as the relationship is active and for up to six years after, in line with standard contractual and accounting obligations.
We keep candidate data for up to two years from the last point of contact. If a candidate asks us to delete their record sooner, we will do so unless we have a legal reason to retain it.
Under UK GDPR, you have the right to:
To exercise any of these rights, use our contact form. We will respond within 30 days.
Our website uses essential cookies to function. We may also use analytics cookies to understand how visitors use the site. You can control cookie preferences through your browser settings.
We use a small number of third-party tools to operate our service, including a form provider (Tally), a payment processor and standard email services. Each is bound by their own privacy terms and, where required, a data processing agreement with us.
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be communicated directly where appropriate.
For any privacy questions, use our contact form.