Privacy
Privacy Notice — Customers, Suppliers & Their Employees
Class Recruitment Ltd · Last updated: 26/08/26
At Class we are committed to protecting your privacy. This notice explains how we handle personal data relating to customers, suppliers, self-employed individuals and people who work for or represent our customers and suppliers.
It applies when we act as a controller of your personal data — that is, where we decide how and why it is processed.
The personal data we collect
Depending on your relationship with Class, we may collect:
- your name, job title, role and contact details, such as your business email address and telephone number;
- information about the organisation you work for or represent;
- information about services supplied to or provided by Class;
- information about recruitment, staffing or service requirements;
- details of communications and correspondence between you and Class;
- information needed to manage our business relationship with you or your organisation;
- information relating to orders, invoices, payments or other business transactions, where relevant; and
- information from publicly available business sources or information provided to us by your organisation or another business contact.
We aim to collect and use only the personal data that is relevant and necessary for the purposes described in this notice.
How we obtain your personal data
We normally collect your personal data directly from you when you contact Class, become a customer or supplier, request or provide services, or communicate with us in the course of your work.
We may also obtain personal data about you from other sources where this is necessary for our business activities. This may include:
- your employer or organisation;
- colleagues or other business contacts;
- publicly available business websites, directories or professional sources;
- referrals or introductions;
- suppliers, customers or other organisations with whom we have a business relationship; and
- other sources where permitted by law.
Where we obtain your personal data from another source, we will provide you with the privacy information required by applicable data protection law.
How we use your data, and our lawful basis
We use your personal data to communicate with you and your organisation, provide and receive services, manage our business relationships, respond to enquiries and requests, maintain accurate business records and ensure that services provided by or to Class meet agreed requirements.
We rely on our legitimate interests in operating our recruitment business, providing and receiving services, managing customer and supplier relationships, maintaining appropriate business records and ensuring the effective operation of our business.
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, we may rely on the appropriate contractual lawful basis.
Where we are required to process information to comply with a legal obligation, we will rely on the applicable legal obligation as our lawful basis.
Where we rely on legitimate interests as our lawful basis, we carry out a balancing test to make sure our interests do not override your rights and freedoms. You can ask us for more information about this assessment by contacting info@classrecruit.com.
Direct marketing
We may use your personal data for direct marketing where this is permitted by applicable data protection and electronic marketing laws.
Where we rely on legitimate interests for direct marketing, we will consider whether the marketing is proportionate, whether you would reasonably expect to receive it, and whether your interests, rights and freedoms override our legitimate interest.
We will also comply with the Privacy and Electronic Communications Regulations (PECR) where they apply.
The rules for electronic marketing can differ depending on whether we are contacting a corporate subscriber, such as a limited company, or an individual subscriber, such as a sole trader or certain types of partnership
Where PECR requires consent, we will obtain consent before sending direct marketing. Where consent is not required, we will ensure that we have an appropriate lawful basis under data protection law and comply with applicable opt-out and objection requirements.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object, we will stop using your personal data for direct marketing.
Who we share your data with
We do not sell your personal data, and we do not share it with third parties for their own marketing or other independent purposes.
Where necessary, we share personal data with trusted service providers who process it on our behalf and under our instructions. These may include providers of email, communications, accounting, payroll, IT, website hosting, customer relationship management and other business-support services.
We may also share relevant information with customers, suppliers, employees or other business contacts where this is necessary to provide or receive services, manage our business relationship or fulfil contractual or operational requirements.
We only share the personal data that is relevant and necessary for the particular purpose.
We may also share information where we are required or permitted to do so by law, including where this is necessary to comply with a legal obligation.
International transfers
We do not routinely transfer personal data outside the UK.
Where a service provider processes personal data outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law and will provide further information where required.
How long we keep your data
We keep your customer, supplier and business-contact information for as long as it is reasonably necessary for the purposes for which it was collected and for an appropriate period afterwards.
The length of time we retain your information depends on the type of information, the purpose for which it was collected, our ongoing relationship with you or your organisation, and any legal, accounting, regulatory or contractual requirements that apply.
Some financial, contractual or other business records may need to be retained for longer where this is necessary to meet legal or regulatory requirements.
We regularly review the personal data we hold and delete or securely dispose of information when it is no longer required.
Our internal data retention procedures set out the applicable retention periods and criteria for different categories of customer, supplier and business-contact information.
Where you have objected to direct marketing, we may retain limited information on a suppression or "do not contact" list so that we can respect your objection and avoid contacting you again for direct marketing purposes.
Your rights
You have the following rights in relation to the personal data we hold about you:
- to be provided with a copy of the personal data we hold about you;
- to ask us to correct any personal data that is inaccurate or incomplete;
- to ask us to erase your personal data, or to restrict how we use it, in certain circumstances;
- to object to our processing of your personal data on grounds relating to your particular situation;
- to object at any time to our processing of your personal data for direct marketing;
- where our processing is based on your consent, to withdraw that consent at any time;
- where applicable, to receive the personal data you gave us in a portable format.
You can exercise any of these rights by contacting us using the details below. If you are unhappy with how we have handled your personal data or a request to exercise a right, you can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Your right to object to direct marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes.
If you object, we will stop processing your personal data for direct marketing purposes. We may retain limited information on a suppression or "do not contact" list so that we can ensure your preference is respected.
Who we are and how to contact us
Class Recruitment Ltd is the controller of your personal data.
Class is incorporated and registered in England and Wales with company number 06938289, and its registered office is at 20-22 The Mall, 2nd Floor, Bristol, England, BS8 4DR.
For any privacy question, or to exercise your rights, contact us at
info@classrecruit.com