Privacy Policy

Gornall James Ltd ("we," "us," "our") is a UK-registered recruitment business specialising in audit and tax recruitment placements with employers in the United States. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

Who we collect data about

We collect personal data about two groups of people: candidates we may consider for roles, and contacts at the employers we work with (hiring managers, HR contacts, and similar).

What data we collect

For candidates, this typically includes your name, contact details, current employer and job title, professional background, and any information you share with us directly such as your CV. For employer contacts, this typically includes your name, job title, company, and business contact details, often sourced from professional databases or publicly available business information.

How we get this data

We collect data directly from you when you contact us, apply for a role, or send us your CV. We also source business contact details from third-party data providers (such as Lusha) and professional networking sites, in order to identify people who may be relevant to our recruitment work.

Why we use this data

We use this data to identify and contact potential candidates for roles, to introduce candidates to employers, to manage our relationships with client companies, and to run our recruitment business generally, including invoicing and record-keeping.

Our legal basis for using this data

We rely on "legitimate interests" as our legal basis, meaning we have a genuine business reason to hold and use this data, and we believe this is reasonable and doesn't unfairly affect your rights. Where required, we will ask for your consent instead, for example, before sharing your CV with a specific employer.

Who we share data with

We share candidate details with employers only when discussing a specific opportunity, and only with the candidate's knowledge. We do not sell personal data to third parties. We may share data with service providers who help us run our business, such as our CRM provider or accounting software.

How long we keep data

We keep data for as long as it's relevant to our recruitment work, and review it periodically. If you ask us to delete your data, we will do so unless we have a legitimate reason to retain it (such as an ongoing placement).

Your rights

You have the right to ask what data we hold about you, to ask us to correct or delete it, to object to how we use it, and to ask us to stop contacting you. To exercise any of these rights, contact us at spencer@gornalljames.com

International transfers

Because we work with US employers, candidate data may be shared with companies based in the United States as part of the recruitment process. We take reasonable steps to ensure this is handled securely.

If you have any questions about this policy or how we handle your data, contact us at spencer@gornalljames.com