Privacy Policy

This privacy policy explains how and why Maximus IT Limited uses personal data, and what we do to ensure that your information is kept safe and secure in accordance with applicable data protection and privacy laws including the General Data Protection Regulation (Data Protection Laws).

This policy explains:

  1. Who we are and how to contact us
  2. How we collect and process personal data:
  3. Cookies and website visitors
  4. Recipients of personal data
  5. How long we store personal data for
  6. How we keep personal data safe
  7. International transfers
  8. Your rights as a data subject
  9. Updates to this policy


We are Maximus IT, a limited company with registered number 04118933, having our registered office and main place of business at Maximus IT, 1 Fore Street, London, England, EC2Y 9DT. You can contact us by writing to us at our office address, telephoning us on +44 207 422 6000 or emailing

For the purposes of applicable data protection law, we are a controller in relation to much of the personal data we collect and process. This means that we are responsible for deciding how and why we use personal data, and for keeping it safe. We are registered as a data controller with the Information Commissioner’s Office (ICO) with registration number ZA322528.




We collect and process personal data (meaning information which relates to an identifiable individual) relating to our candidates. This information is typically:

  • provided by you through the application process (such as in CVs, application forms, and through correspondence);
  • collected in the process of providing recruitment services (such as through correspondence);
  • provided to us by third parties (such as recommendations from other candidates or clients);
  • obtained from external sources (such as LinkedIn, Google, or Xing).
  • obtained from previous employers and referees;
  • received as a result of our carrying out background checks (such as checks for criminal convictions with the Disclosure and Barring Service).


The categories of personal data we collect will vary, but may include some or all of the following:

  • contact information (such as name, address, telephone and email address);
  • your CV and photograph (to understand your experience)
  • a copy of your passport or driving licence (to verify your ID if we place you in a role)
  • your right to work in the EU (if required by clients)
  • links to your professional profiles in the public domain (such as LinkedIn, Xing, etc…); and
  • bank details (to pay you, if we place you in a contract role);

We may process other types of personal information, including sensitive personal data outside of the above if requested specifically by a client (such as background checks like CRB or Disclosure) though this will depend on specific requests and you will be informed of such requests ahead of the data being collected.


We use the personal data we collect about you to:

  • assess your skills, qualifications, and suitability for a role;
  • carry out background and reference checks;
  • communicate with you about your application;
  • keep records related to our clients hiring process(es); and
  • comply with legal or regulatory requirements.

We do all of this because either it is a necessary part of providing recruitment services to you or because we have a legitimate interest in ensuring that you are suitable for a particular role.


We use personal data because we need to for one or more of the following reasons:

  • assess your skills, qualifications, and suitability for a role;
  • carry out background and reference checks;
  • communicate with you about your application;
  • keep records related to our clients hiring process(es); and
  • comply with legal or regulatory requirements.
  • to provide recruitment services to you (namely, to enable us to place an you in a role); and
  • to pursue our legitimate interests in operating and promoting the success of our company, or to pursue the interests of our clients and candidates in receiving recruitment advice.

If you do not provide the personal data which we need in order to enter into or to perform a contract with you, then we may not be able to provide you the recruitment services which you have requested.

In limited circumstances, we may use personal data on the basis of your consent. If so, we will always clearly ask for your agreement to this. You are, of course, free to refuse this and we will inform you as to what (if any) consequences this might have.


We normally retain personal data about candidates and applicants indefinitely. We retain personal data for the ongoing provision of support or further recruitment services and advice. We will also need to retain copies of certain data, such as financial data, for the purposes of legal and regulatory purposes. If you do not wish for us to retain your data you can request that we remove it from our CRM by emailing requesting deletion. Please note that in some cases we will need to retain some information in order to comply with regulatory and legal reporting purposes (such financial reporting, where we have paid you as a contractor)


We process personal data about individual business and professional contacts. These people include individual (or representatives from corporate) intermediaries, service providers, job boards, and potential clients.

The types of personal data we hold about these individuals typically consists of basic personal details and contact information, such as position title, name, email, address, telephone and the person’s employer. Depending on the circumstances, and the nature of our relationship with the people involved, we may use this information to:

  • provide recruitment services or advice;
  • fulfil our contractual obligations or exercise contractual rights;
  • communicate with other organisations, professional advisers or intermediaries; or
  • send marketing and promotional communications (usually by email).

We use this personal data because it is in our legitimate interests to promote our services and build business relationships.

If you receive news or marketing communications from us, it is because we think you might be interested in our company or our services (usually on the basis of previous dealings with you or a recommendation from a third party).

You can unsubscribe from marketing at any time by clicking the “unsubscribe” link on any of our emails, or by emailing with the subject line “unsubscribe.”


We collect, store and use personal data about individuals who apply to join us. This may include information:

  • you provide to us (such as in CVs, application forms, and through correspondence);
  • you provide during an interview;
  • obtained from previous employers and referees;
  • provided to us by other recruitment agencies; and
  • received as a result of our carrying out background checks (such as checks for criminal convictions with the Disclosure Service).

The information we collect might include sensitive personal data, such as information about your health and sickness records. If we need to process sensitive personal data then we will ask for your explicit consent before doing so.

If you apply for a position with us, we may carry out a check for criminal convictions in order to satisfy ourselves that there is nothing in your history which makes you unsuitable for the role. We do this because working with us involves a high degree of trust (as you may have access to confidential information).

We only carry out criminal records checks and ask for references at the last stage of the application process, when making an offer of employment.


We use the personal data we collect about you to:

  • assess your skills, qualifications, and suitability for a role;
  • carry out background and reference checks;
  • communicate with you about your application;
  • keep records related to our hiring process; and
  • comply with legal or regulatory requirements.

We do all of this because either it is a necessary part of entering into a contract of employment with you or because we have a legitimate interest in ensuring that you are suitable for a particular role.

If you fail to provide personal data when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully.


We normally retain personal data about unsuccessful candidates for 24 months from the time we inform them of our hiring decision. We retain personal data for this period so that we can demonstrate, in the event of a legal claim, we have not discriminated against an applicant and that the recruitment process was fair and transparent. After this period, we will securely destroy this applicant’s personal data. If we wish to retain personal data on file, in case future opportunities arise, we will contact the applicant and ask for his or her consent to do so.

If you are successful, the personal data your provided in the application process will be stored as part of your personnel file.


We do not normally collect personal data about visitors to our website unless they choose to provide such information (such as by filling in a website form).

We collect anonymous information about visitors to our website in order to optimise and improve the website. This might include IP addresses, browser or device details and the connection type (for example, the Internet service provider used). However, none of this information will by itself directly identify any particular user.


Web browsers place cookies on hard drives for record-keeping purposes and sometimes to track information (such as repeat visits). Our website uses Google Analytics cookies to enable us to measure how users interact with our website. Further information on the cookies and how they work can be found here:

You can prevent these cookies by installing the Google Analytics opt-out browser extension by by adjusting your browser settings or by visiting;


Our website may occasionally contain hyperlinks to third-party websites (such as LinkedIn). We are not responsible for the content or functionality of any of those external websites.  If an external website requests personal information from you, the information you provide will not be covered by this policy. We suggest you read the privacy policy of any website before providing any personal information.


Personal data you provide to us will be kept private and confidential, and we will not disclose or share it with other data controllers without your permission. The only exception to this is where we are legally required to disclose personal data. We may also be required to share personal information with regulatory authorities in the event of an audit or investigation.

We share personal data with some of the third parties who provide services to our firm. This includes software providers (such as Microsoft), cloud service providers and IT support services. However, these third parties will only process personal data (which may include your information) on our behalf for specified purposes and in accordance with our strict instructions.

We only use third party service providers who have provided sufficient guarantees, as required by Data Protection Laws, that your personal data will be kept safe. We always ensure there is a written contract in place which protects your personal data and prevents it from being used for any purpose other than providing services to our firm, in accordance with Data Protection Laws.


We only retain personal data for as long as is necessary for the specific purpose(s) it was collected for (or for related compatible purposes such as complying with applicable legal, accounting, or record-keeping requirements). For example, we are required us to retain records of financial payments and transactions for a period of at least 7 years.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from its unauthorised use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We typically retain candidate information on our secure CRM indefinitely, as we typically maintain a business relationship on an ongoing basis. Should you wish for your data to be removed from our records, please email and we will respond within 7 days to your request to show removal of personal data, except any data we are required to keep for previously mentioned legal purposes.

We understand our legal duty to retain accurate data and we do the following to ensure our data is accurate;

  • we have a candidate portal at which enables you to manage your data and to review whether the details we hold about you are accurate. Should you wish to do so, please email using the subject line “Request portal access” and include your full name;
  • Prior to making an introduction to a client, we will check we have accurate information about you; and
  • We keep in touch so you can let us know of changes to your personal data


We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, damaged or destroyed, altered or disclosed. This includes both physical security measures (such as keeping paper files in secure, access-controlled premises) and electronic security technology (such as digital back-ups and sophisticated anti-virus protection).

We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to legal and contractual confidentiality obligations.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable supervisory authority of a breach when we are legally required to do so.


We normally only store personal data within the European Economic Area (EEA). However, some of the technology and support services we use are provided by international organisations and/or companies which are based outside the EEA. Before using such service providers, we take steps to make sure that any personal data they process is adequately protected and transferred in accordance with Data Protection Laws, usually by one or more of the following methods:

  • ensuring the recipient is in a country which the EU Commission has deemed provides adequate protection for personal data;
  • implementing appropriate safeguards such as requiring the recipient to enter into Standard Contractual Clauses approved by the appropriate data protection supervisory authorities; or
  • (if the recipient is based in the USA) transferring personal data to recipients who are certified under the EU-US Privacy Shield scheme. For example, both MailChimp (which is operated by the Rocket Science Group LLC and provides us with email management services) and the Microsoft Corporation (which provides us with software services) are registered under the Privacy Shield scheme.


Data Protection Laws provide you with certain rights in relation to your personal data. These are as follows:

  • The right to access your personal data. This enables you to receive a copy of the personal data we hold about you.
  • The right to request correction or completion of personal data. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • The right to request erasure of your personal data. This enables you to ask us to delete or remove personal data (though this may not apply where we have a good, lawful reason to continue using the information in question). You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
  • The right to object to processing of your personal data. You can object to us processing personal data for legitimate interests purposes or for direct marketing.
  • The right to restrict how your personal data is used. You can limit how we use your information (primarily to storage or for use in legal claims).
  • The right to have a portable copy or transfer your personal data. We will provide you, or (where technically feasible) a third party, with a copy of your personal data in a structured, commonly used, machine-readable format. Note this only applies to automated information we process on the basis of your consent or in order to perform a contract.
  • The right to withdraw consent. If we are relying on consent to process your personal data you have the right to withdraw that consent at any time.


We try to respond to all personal data requests within 7 days. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. Please also bear in mind that there are exceptions to the rights above and some situations where they do not apply.

We may need to request additional information from you to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you to clarify your request.


You will not normally have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.


If you want to exercise any of the rights described above, please email using the subject line ‘Data Protection Requests’ or write to Data Protection Requests, Maximus IT Limited, 1 Fore Street, London, England, EC2Y 9DT.


You have the right to complain to a data protection supervisory authority (which, in the UK, is the ICO) if you are not satisfied with our response to a data protection request or if you think your personal data has been mishandled. For further information on how to make a complaint, please visit


We will update this policy from time to time. The current version will always be posted on our website. This policy was last updated on 21 May 2018.


Find out why you should use the experts for recruitment, and how they can save you money...

Claim your free guide now…

Claim Your Guide