Privacy Policy
Data Controller: Aurelian Partners (Geco Jobs Limited) ("The Company")
This privacy policy governs the collection, storage and use of personal information collected by Geco Jobs Limited, trading as Aurelian Partners, a company incorporated in England and Wales with company number 16054066and registered office at 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ ("Aurelian Partners", "we", "us" or "our").
As a recruitment business, the Company collects and processes personal data relating to job applicants who may be applying for agency work, temporary work or permanent roles, either with the Company itself or with its clients or third-party hirers.
We are committed to being transparent about how we collect, use, store, transfer and retain this data and to meeting our data protection obligations.
What information do we collect?
We collect a range of information about you which may include:
The Company may collect this information in a variety of ways. For example, data might be contained in application forms, CVs or résumés, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including online tests.
We may also collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks. The Company will seek information from third parties only once a job offer has been made to you and will inform you that it is doing so.
Data will be stored in a range of different places, including on our databases, in HR management systems and on other IT systems (including email).
Why do we process your personal data?
We collect, store and process the data we obtain for our legitimate business interests:
In some cases, we need to process data to ensure that we comply with our legal obligations. For example, we are required to verify a successful applicant's eligibility to work in the UK before employment begins.
We have a legitimate interest in processing personal data during the recruitment process and in keeping records of that process. Processing applicant data enables the Company to manage recruitment, assess and confirm a candidate's suitability for employment and, where appropriate, decide to whom to offer employment. We may also process applicant data to respond to and defend legal claims.
For some roles, the Company is required to obtain information about health, criminal convictions and offences. Where the Company seeks this information, it will request your consent where required.
If your application is unsuccessful, the Company may retain your personal data on file in case suitable future employment opportunities arise.
Who has access to data?
Your information may be shared for the purposes of the recruitment process. This includes sharing with members of the Aurelian Partners team, our clients and our HR and IT providers where necessary for the performance of their roles.
If you are offered employment or work, the Company may share your data with former employers to obtain references, employment background check providers to carry out background checks and the Disclosure and Barring Service (DBS) where criminal records checks are required.
Please note that we will always obtain your verbal or written consent before presenting your personal details to a client.
Your data may, in limited circumstances, be transferred outside the UK where necessary. Where this occurs, we will ensure that appropriate safeguards are in place and that any third-party providers comply with applicable data protection legislation.
How do we protect data?
The Company takes the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is accessed only by employees who require it in the proper performance of their duties.
For how long do we keep your data?
We will retain information about candidates, clients and suppliers for a period of up to 24 months from the date of our last contact with you.
If you agree that the Company may retain your personal data for future employment opportunities, we may continue to hold your data until you ask us to delete it.
We will delete your data when it is no longer required unless we need to retain certain information to comply with legal obligations, resolve disputes or enforce our legal rights.
If your application is successful, personal data collected during the recruitment process will become part of your personnel file and will be retained throughout your employment.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide personal data during the recruitment process. However, if you do not provide the requested information, we may be unable to process your application properly or at all.
Automated decision-making
Recruitment decisions are not based solely on automated decision-making.
Your Rights
As a data subject, you have a number of rights. You can:
If you wish to exercise any of these rights, please contact Aurelian Partners.
If you believe that the Company has not complied with its obligations under data protection legislation, you have the right to make a complaint to the Information Commissioner's Office (ICO). We would, however, appreciate the opportunity to address your concerns first and encourage you to contact us in the first instance.
Our GDPR Commitment
The UK General Data Protection Regulation (UK GDPR) sets out the legal framework for the protection of personal data.
Aurelian Partners (Geco Jobs Limited) provides recruitment services to businesses, including the placement of permanent employees.
In delivering our services, we act as both a data controller and, where applicable, a data processor in relation to personal data and, in some cases, special category personal data relating to individuals who register with us.
We recognise that the responsible processing of personal data is fundamental to the delivery of our services.
We are committed to ensuring that personal data is processed lawfully, securely, transferred responsibly, retained only where necessary and deleted when no longer required.
Our Policies
Our privacy policies relating to applicants, clients and employees are designed to provide transparency regarding how personal data is collected and processed.
We are committed to requesting and processing only the personal data that is necessary:
Data Return and Retention
We are able to amend, provide copies of or delete personal data upon request and will do so without unreasonable delay unless we are legally required or otherwise entitled to retain the information.
We are committed to retaining personal data only for periods that are appropriate, relevant and justifiable.
This Privacy Notice was last updated in August 2026.