Legal
Privacy notice.
Last updated 25 September 2026.
Who we are
Vando is a trading name of [COMPANY NAME] Ltd, a company registered in England and Wales, company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS]. We are the data controller for the personal data described here. We are registered with the Information Commissioner's Office under number [ICO NUMBER].
For anything about your data, email george@vandopartners.com.
What we collect, and why
| Who you are | What we hold | Why | Lawful basis |
|---|---|---|---|
| Candidate who contacted us | Name, email, phone, CV, work history, salary expectation, location, interview notes | To consider you for roles and represent you to employers | Consent, which you gave on the form and can withdraw |
| Candidate we approached | Name, job title, employer, professional profile, business contact details, all from publicly available professional sources such as LinkedIn and company websites | To tell you about roles relevant to your profession | Legitimate interests — recruitment in a market where you have published your professional details |
| Client contact | Name, job title, business contact details, records of what we discussed | To provide recruitment services and manage the relationship | Contract, and legitimate interests |
| Newsletter subscriber | Name, email | To send the market newsletter you asked for | Consent |
Scroll the table sideways →
We do not collect special category data — health, ethnicity, religion, sexual orientation, trade union membership — and you should not send it to us. If a role genuinely requires a disclosure such as a DBS check, we will tell you separately at the time and ask for it then.
Where it goes
Your data is held in our own recruitment database, hosted on Supabase in the [REGION] region. We use the following processors, each under a data processing agreement:
- Supabase — database and CV file storage
- Cloudflare — website hosting and email routing
- [EMAIL PROVIDER] — email
- [NEWSLETTER PROVIDER] — newsletter delivery, if you subscribed
We share your CV and details with a prospective employer only after telling you which employer and getting your agreement. We never sell your data, and we never share it for advertising.
Transfers outside the UK
Some of the providers above process data in the United States. Where that happens, transfers are made under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or under the UK Extension to the EU–US Data Privacy Framework.
How long we keep it
- Candidates: two years from our last meaningful contact with you, then deleted. If you are placed, six years from the end of the placement, because we need it for tax and for any claim.
- Clients: six years from the end of our last engagement.
- Newsletter: until you unsubscribe.
- Unsuccessful applications for a specific role: twelve months, unless you asked to stay on the list.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of what we hold about you
- correct anything that is wrong
- delete it
- stop or limit how we use it
- send it to you or someone else in a portable format
- stop using it where we rely on legitimate interests, including for any direct marketing
Email george@vandopartners.com and we will respond within one month. There is no charge.
If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you came to us first.
Cookies
This site sets no cookies and runs no advertising or tracking scripts. We use Cloudflare Web Analytics, which counts page views without cookies and without identifying you. Fonts are served by Google Fonts, which receives your IP address in order to deliver the font files.
Automated decisions
Where you take our assessment, it produces a score. That score is never the decision on its own — a person reads every assessment before anything is sent to an employer, and you can ask us to explain your score or to be considered without it.
Changes
If we change this notice we will update the date at the top. If the change is significant and we hold your data, we will email you.