Legal
Privacy Policy
Last updated: July 2026
Staar Partners is committed to protecting your privacy and handling your personal data responsibly. This policy explains what data we collect, why we collect it, and how we use it, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Staar Partners is a specialist recruitment agency operating in the UK housing and property sector. We act as a data controller in respect of the personal data we collect and process. If you have any questions about this policy or how we handle your data, please contact us using the form on our Contact page.
2. What Data We Collect
We may collect and process the following categories of personal data: • Identity data — your name, job title, and professional background. • Contact data — email address, telephone number, and location. • Career data — CV, cover letter, employment history, qualifications, and salary expectations. • Enquiry data — the content of messages you send us through our website forms. • Technical data — IP address, browser type, and pages visited (collected automatically via server logs).
3. How We Collect Your Data
We collect personal data directly from you when you: • Submit a candidate registration or CV through our website. • Complete a client enquiry or general contact form. • Correspond with us by telephone, email, or other means. We do not purchase data from third-party data brokers.
4. How We Use Your Data
We use your personal data for the following purposes: • To match candidates with suitable employment opportunities. • To respond to client enquiries and fulfil recruitment briefs. • To communicate with you about roles, vacancies, and our services. • To comply with our legal and regulatory obligations. • To improve our website and services. We will only use your data for the purpose for which it was collected unless we reasonably consider that we need to use it for another reason compatible with the original purpose.
5. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR: • Consent — where you have given us explicit consent to process your data (e.g. submitting a registration form). • Legitimate interests — where processing is necessary for our legitimate business interests, such as matching candidates to roles, provided those interests are not overridden by your rights. • Legal obligation — where we are required to process data to comply with a legal obligation.
6. Sharing Your Data
We may share your personal data with: • Prospective employers — only with your explicit consent, and only for the purpose of a specific recruitment opportunity. • Service providers — third parties who provide IT, hosting, and administrative services to us, under strict data processing agreements. • Regulatory authorities — where we are required to do so by law. We do not sell your personal data to any third party.
7. Data Retention
We retain candidate data for up to two years from the date of last contact, or for as long as necessary to fulfil the purposes for which it was collected. Client and enquiry data is retained for up to six years in line with standard business record-keeping requirements. You may request deletion of your data at any time (see Your Rights below).
8. Your Rights
Under UK GDPR you have the following rights in relation to your personal data: • Right of access — to request a copy of the data we hold about you. • Right to rectification — to request correction of inaccurate data. • Right to erasure — to request deletion of your data in certain circumstances. • Right to restrict processing — to request that we limit how we use your data. • Right to data portability — to receive your data in a structured, machine-readable format. • Right to object — to object to processing based on legitimate interests. • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, please contact us via the form on our Contact page. We will respond within one calendar month.
9. Cookies
Our website uses essential cookies necessary for the site to function correctly. We do not currently use tracking or analytics cookies. If this changes, we will update this policy and seek your consent where required.
10. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data submitted through our website forms is transmitted over an encrypted (HTTPS) connection.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.
12. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters, at ico.org.uk.