Cyberdata Technology — Privacy Statement
Last updated: 16 September 2026
Introduction
Cyberdata Technology Ltd ("Cyberdata", "we", "us", "our") is an IT and SAP contract recruitment agency based in London. This statement explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it, in line with the UK GDPR and the Data Protection Act 2018.
It applies to candidates, clients, and anyone who contacts us through cyberdata-technology.com or otherwise gets in touch with Cyberdata.
Who we are
Cyberdata Technology is the data controller for the personal data described in this statement.
Registered office: 167-169 Great Portland Street, 5th Floor, London W1W 5PF
Company registration number: 17089550
ICO registration number: to be added once registered with the Information Commissioner's Office
Privacy contact: privacy@cyberdata-technology.com
Robin Gilby, Technical Director, is the point of contact for data protection queries.
What personal data we collect
From candidates: name and contact details, CV and work history, skills and certifications (including SAP module expertise), right-to-work status, availability and rate expectations, references, and — only where you volunteer it — details relevant to reasonable adjustments.
From clients and other contacts: name, job title, company, and correspondence with us.
From website visitors: anything submitted through our contact form (name, email address, message), plus standard technical data collected by our hosting provider (e.g. IP address, browser type).
How we collect it: directly from you (forms, CV submission, phone, email), from third parties (referrals, professional networking sites, publicly available profiles), and automatically through our website.
How we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Matching candidates to roles and managing placements | Legitimate interests / performance of a contract |
| Communicating with clients about vacancies and candidates | Legitimate interests |
| Marketing and outreach to prospective candidates and clients | Legitimate interests, subject to your right to opt out |
| Right-to-work and other compliance checks | Legal obligation |
| Responding to enquiries submitted through our website | Legitimate interests / consent |
We rely on legitimate interests where the processing is proportionate and expected, and we balance this against your rights. Where we rely on consent — for example, some marketing communications — you can withdraw it at any time.
Who we share your data with
- Clients, when putting forward a candidate for a role (with the candidate's knowledge)
- Service providers who support our operations, including Google Workspace (email and calendar) and Netlify (website hosting and contact-form processing)
- Recruitment partners and associates involved in specific placements, such as our SAP practice collaborators
We do not sell your personal data, and we only share what's necessary for the purpose in question.
International transfers
Some of the people who process data on our behalf are based outside the UK — for example, associates working from France, and global service providers such as Google. Where data leaves the UK, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
How long we keep your data
Candidate data is typically kept for up to 24 months from your last contact with us, in line with recruitment-industry practice, unless you ask us to delete it sooner or we need to keep it longer for legal reasons.
Client and contact data is kept for the duration of our business relationship, plus a further period as required for accounting and legal purposes.
Website enquiries are kept only as long as needed to respond, unless a business relationship develops.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Ask us to delete your data
- Restrict or object to our processing, including direct marketing
- Receive your data in a portable format
- Withdraw consent at any time, where we rely on it
To exercise any of these rights, contact us at privacy@cyberdata-technology.com. If you're unhappy with how we've handled your data, you can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Cookies and website tracking
Our website is hosted on Netlify. Our contact form uses a hidden "honeypot" field to catch spam submissions — this doesn't track you and isn't a cookie. We do not currently use analytics or marketing cookies. If we introduce basic website analytics in future, we will update this statement and, where required, obtain your consent in line with the Privacy and Electronic Communications Regulations (PECR).
Security, changes, and how to contact us
We use appropriate technical and organisational measures to protect your data, including restricted access to systems holding personal data and secure hosting.
We may update this statement from time to time; the date at the top shows when it was last revised.
For any questions about this statement or how we handle your data, contact us at privacy@cyberdata-technology.com or write to us at 167-169 Great Portland Street, 5th Floor, London W1W 5PF.