Candidate privacy notice
Last updated 1 October 2026
This notice is for anyone we represent, approach or consider for a role. It explains what we collect about you, where it comes from, how we use it and the choices you have. We will point you to it when we first contact you, and in any case within one month of collecting your details.
Who we are
Sourcefully Ltd is the data controller. We are registered in England and Wales (company number 17044361). We act as an employment agency, finding permanent roles for candidates with our clients. We never charge candidates a fee. Contact us about your information at info@sourcefully.co.uk.
What we collect
- Contact details: name, email address, phone number and where you live (town or postcode).
- Your CV and career history: employers, roles, practice areas, caseloads, qualifications and professional memberships, such as SRA, CILEx or CLC status.
- What you are looking for: salary, benefits, notice period, preferred locations and working pattern.
- Notes from our conversations and interviews, feedback from clients, and references if you reach that stage.
- Right-to-work documents, when you are offered a role and the law requires them to be checked.
We do not ask for sensitive information such as health, ethnicity, religion or sexual orientation. If you choose to tell us something like this, for example to request an adjustment at interview, we will only use it for that purpose and with your agreement. We do not collect criminal records information; if a client needs a check for a particular role, they will arrange it with you directly.
Where it comes from
- From you, when you apply for a role, send us your CV or speak to us.
- From job boards where you have posted a CV or applied to our adverts, such as Indeed, Reed, CV-Library and Totaljobs.
- From professional networking sites such as LinkedIn, and other publicly available professional information such as regulator registers.
- From people who recommend you to us, and from our clients and your referees.
How we use it, and why we are allowed to
- To contact you about roles that may suit you. Our lawful basis is our legitimate interest in connecting candidates with employers. You can ask us to stop at any time.
- To represent you to clients: we will always tell you about the role and the client, and get your agreement, before we send your details to anyone.
- To arrange interviews, pass on feedback, manage offers and collect references. Our lawful basis is taking steps at your request, and our legitimate interests.
- To check your right to work and keep the records the law requires of employment agencies. Our lawful basis is legal obligation.
We may use software, including tools that help organise and summarise information, to manage our work. Decisions about whether to put you forward for a role are always made by a person, never by automated decision-making.
Who we share it with
- Clients you have agreed we can introduce you to.
- Your referees, when you have given us their details for that purpose.
- Service providers who help us run the business, such as our recruitment database, email, job board and website providers. They act on our instructions only.
- Regulators, law enforcement or other authorities, if the law requires it.
Some providers may process information outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. We never sell your information.
How long we keep it
We keep your details for two years after our last meaningful contact with you, then delete or anonymise them, unless you ask us to remove them sooner. If you are placed through us, we keep the records of that placement for six years for legal, tax and contract purposes.
Your rights
You can ask for a copy of your information, ask us to correct it or delete it, object to us using it (including to being contacted about roles), ask us to restrict how we use it, or ask for it in a portable format. Where we rely on your agreement, you can withdraw it at any time. Email info@sourcefully.co.uk and we will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.
Changes to this notice
We will update this page if anything changes. The date at the top shows the latest version.