Privacy notice
How we use your personal information
This notice explains what Shalala Recruitment collects, why we use it, who we share it with, how long we keep it, and the choices available to you.
Last updated: 2 August 2026
1. Who is responsible for your data
Shalala Recruitment is the controller of personal information collected through this website and through our recruitment work. Questions or data-rights requests can be sent to shalalarecruitment@gmail.com.
2. Information we collect
Candidates
We collect the CV you upload, your selected role type, and information contained in the CV such as your name, contact details, employment history, qualifications, skills and professional experience.
Please do not include information that is not needed for recruitment, such as your date of birth, full home address, passport details, financial information, or sensitive information about health, ethnicity, religion, political views, trade-union membership, sexual life or orientation. If unnecessary information is provided, we may remove it.
Employers and prospective clients
We collect your name, company, work email address, hiring needs, and any information you choose to include in your message.
Website use
Our hosting providers may process technical information needed to deliver and secure the website, such as IP address, browser details, request logs and timestamps. Google receives technical request information when your browser downloads the fonts used by the site. We do not currently use advertising or analytics cookies.
3. Why we use it and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Review candidate experience, discuss opportunities, and match candidates with relevant vacancies. | Our legitimate interests in providing recruitment services and, where applicable, taking steps requested before a contract. |
| Respond to employer enquiries and discuss recruitment services. | Our legitimate interests in operating our business and, where applicable, taking steps requested before a contract. |
| Protect the website, prevent misuse, keep records, and establish or defend legal claims. | Our legitimate interests in security and accountability, and compliance with legal obligations. |
Where the law requires a separate condition for sensitive or criminal-offence information, we process that information only when a valid condition applies. Please avoid sending this information unless we specifically request it and explain why it is needed.
4. AI-assisted CV analysis
Uploaded CVs are sent to Anthropic’s Claude service to extract a candidate’s name, contact details, skills and a short professional-experience summary. This helps organise candidate information for human review.
The AI service does not make the final decision to shortlist, reject or hire a candidate through this website. Recruitment decisions require human involvement. We do not ask the service to extract your date of birth or full home address.
5. Who receives information
We share personal information only where needed with:
- Netlify, which provides website hosting, form handling, file storage and database services;
- Anthropic, which provides the AI service used to extract information from CVs;
- employers or clients where we have discussed a relevant opportunity with the candidate;
- professional advisers, regulators, courts or public authorities where legally necessary; and
- a buyer or successor if the business is reorganised or transferred, subject to appropriate safeguards.
Service providers act under contractual terms and may process information in countries outside the UK. Where UK law restricts a transfer, we use an available lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards.
6. How long we keep information
- Candidate CVs and extracted candidate records are kept for no more than 12 months after upload, unless you request earlier deletion or a longer period is required for an active placement or legal claim.
- Employer enquiries are ordinarily kept for up to 24 months after the last meaningful contact, or longer where needed for an active client relationship, accounting, or a legal claim.
- Security and service logs are kept according to the relevant provider’s limited operational retention period.
At the end of the retention period, information is deleted from active systems. Limited residual copies may remain temporarily in protected backups or service-provider logs until their normal deletion cycle completes.
7. Your rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Send requests to shalalarecruitment@gmail.com. We may need to verify your identity before acting. You can also complain to the Information Commissioner’s Office, the UK data-protection regulator.
8. Is providing information required?
You do not have to submit a CV or enquiry through the website. However, we need enough contact and professional information to respond, assess relevant experience, and provide recruitment services. Please contact us by email if you want to discuss an alternative way to provide information.
9. Changes to this notice
We may update this notice when our services or legal obligations change. The latest version and its update date will remain available on this page.