Last updated: 16 October 2026
This notice explains how Evolve Partners Ltd collects and uses personal information about candidates, clients and visitors to this website, and the rights you have. It is written to meet Articles 13 and 14 of the UK GDPR, as amended by the Data (Use and Access) Act 2025.
1. Who we are
Evolve Partners Ltd ("Evolve", "I", "we") is the controller of your personal information. Evolve is a recruitment and executive search business run by its founder, Blair Taylor.
- Registered in England and Wales, company number 14150506
- Registered office: Unit 115, Accounts By Simply, 40 Gracechurch Street, London, England, EC3V 0BT
- Contact for anything in this notice: blair@evolvepartners.co.uk or +44 7902 343442, or write to the registered office.
Evolve is not required to appoint a data protection officer.
2. The information we collect
If you are a candidate, we may hold:
- your name, email address, phone number and location;
- your CV, career history, qualifications, professional memberships and skills;
- your current and expected salary and benefits, notice period and the locations you would work in;
- your LinkedIn or other professional profile, if you share it or it is publicly available;
- notes from our conversations and interviews, and feedback from clients you are introduced to;
- references, where you have agreed we may take them;
- right-to-work or identity information, only when a specific role requires it.
We do not ask for special category information (such as health, ethnicity or religion) or criminal records information. If you choose to include it in your CV, we will only use it where it is relevant to a role and the law allows, for example to make reasonable adjustments to an interview.
If you are a client or a client contact, we hold your name, job title, organisation, contact details, the details of roles you brief us on, and records of our communications and agreements.
If you visit this website, we collect the information you enter in our forms and, only if you accept analytics cookies, information about how you use the site. See our Cookie policy.
3. Where we get it from
Most information comes from you: when you register, apply for a role, send a brief, or speak to us. We may also obtain information from:
- publicly available professional sources, such as professional networking profiles and company websites, when we identify people who may be suitable for a role (we do not search personal social media);
- people who refer or recommend you;
- clients who give feedback on candidates they have interviewed;
- referees you have nominated.
If we obtain your information from someone other than you, we will tell you within one month, or when we first contact you if that is sooner, and point you to this notice.
4. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Finding and contacting candidates for roles, assessing suitability, introducing candidates to clients (with their agreement), managing applications and offers | Legitimate interests: running a recruitment business and helping candidates find work |
| Keeping candidates' details to consider them for future roles | Legitimate interests (we tell you this when we collect your details, and you can ask us to stop at any time) |
| Providing services to clients, managing our relationship and agreements | Contract, and legitimate interests |
| Keeping records required by the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and for tax and accounting | Legal obligation |
| Sending occasional market updates or articles to clients and candidates | Legitimate interests, or consent where the law requires it; every message includes a way to opt out |
| Website analytics | Consent (through the cookie banner) |
| Handling complaints and legal claims | Legitimate interests, and legal obligation |
Where we rely on legitimate interests, we have balanced our interests against yours and concluded that the use is necessary and reasonably expected. You can ask for a copy of that assessment.
We do not make decisions about you using solely automated processing.
5. Who we share it with
Clients. We only send your CV or details to a client with your prior agreement, for a specific role. We do not disclose your information to your current employer without your consent.
Service providers who process information on our behalf, under contract:
- Lead Logic, built on HighLevel (HighLevel Inc and LeadConnector LLC, United States): our client and candidate management system and email;
- Supabase (Supabase Pte. Ltd): secure storage for CVs uploaded through this website, held in a UK data centre;
- Lovable (Lovable Labs), with delivery and security through Cloudflare, Inc. (United States): hosting this website;
- Microsoft: business email (Microsoft 365);
- Google: website analytics, if you consent;
- our accountants and professional advisers, where needed.
We may also share information where the law requires it, or to establish or defend legal claims. We never sell personal information.
6. Sending information outside the UK
Evolve works with clients in the UK, the United Arab Emirates, Saudi Arabia, Jordan, the United States and elsewhere. If you agree to be put forward for a role with a client outside the UK, we will send your details to that client.
The UK has adequacy regulations for some countries, meaning it treats their protection as not materially lower than the UK's. The UAE, Saudi Arabia and Jordan are not covered. The United States is covered only for organisations certified to the UK Extension of the EU-US Data Privacy Framework.
When we send your information to a country without adequacy regulations, we will either:
- put an appropriate safeguard in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, after checking that the protection will not be materially lower than in the UK; or
- where that is not possible, rely on the transfer being necessary for a contract made in your interest, or ask for your explicit consent after explaining who will receive your information, where, why, and the possible risks (for example, that the recipient country may not give you the same rights or remedies as the UK).
Some of our service providers are based outside the UK. HighLevel, Cloudflare, Google and Microsoft are certified to the UK Extension of the EU-US Data Privacy Framework. For Supabase and Lovable, which are not, we rely on the UK Addendum to the EU standard contractual clauses in their data processing agreements. You can ask us for a copy of the safeguards we rely on.
7. How long we keep it
| Information | How long |
|---|---|
| Candidate records | Up to 2 years after our last meaningful contact with you, then deleted or anonymised. Where we have provided work-finding services to you, we keep the records the 2003 Conduct Regulations require for at least one year after we last provided those services. |
| Applications for a specific advertised role, where we take no further action | 6 months after the role is filled |
| Client records and agreements | 6 years after the end of our last engagement, for legal and tax purposes |
| Website enquiries that don't lead to work | 12 months |
| Analytics data | 14 months, the retention period set in Google Analytics |
You can ask us to delete your information sooner (see section 8).
8. Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of it, including for marketing (we will always stop direct marketing if you ask);
- ask us to transfer information you gave us to another organisation, where processing is based on consent or contract;
- withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
To use any of these rights, contact blair@evolvepartners.co.uk. We will respond within one month. There is normally no charge.
9. Complaints
If you are unhappy with how we have handled your information, please tell us first. You can complain by email to blair@evolvepartners.co.uk, using the form on our Contact page, or by post to our registered office. We will acknowledge your complaint within 30 days, keep you informed, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commission, the UK's data protection regulator, at ico.org.uk.
10. Changes to this notice
We will update this notice when the way we use personal information changes. The date at the top shows when it was last updated.