Last updated: 30 September 2026
Who we are
Identis Partners Ltd is a specialist Identity Security recruitment business working with candidates, contractors and clients, primarily in the UK and Europe. We are the controller of the personal data we use in providing our recruitment services and operating this website.
Identis Partners Ltd is registered in England and Wales under company number 17010127. Our registered office is 20 Wenlock Road, London, N1 7GU, England. Our ICO registration number is ZC090164. You can contact us about this policy or your personal data at luke@identis-partners.com.
Personal data we collect
Depending on our relationship with you, we may collect:
- Candidate and contractor information: contact details, location, CV and professional profiles, employment history, skills, qualifications, availability, preferences, remuneration or rate expectations, interview notes, references and feedback.
- Assignment and compliance information: identification, right-to-work and employment-check information, contracts, timesheets and payment information where needed for a role or assignment. Where appropriate and legally permitted, a role may also require a criminal-record check or information needed to arrange a reasonable adjustment.
- Client and professional contact information: names, roles, business contact details, hiring requirements and records of our correspondence and work together, including information from referees.
- Website and newsletter information: details and CVs submitted through our forms; technical information such as IP addresses and server logs; and subscriber information made available to us when you subscribe to The Identis Brief through Substack.
We collect this information from you, professional networking sites and other public sources, referrals, clients, referees and organisations involved in relevant checks. If we obtain your details from another source, we will direct you to this policy when we first contact you, where required.
How we use personal data
We use personal data to:
- identify and contact people about relevant work, assess suitability and provide recruitment services;
- introduce candidates to prospective employers and manage interviews, offers and feedback;
- provide services to clients and manage our business relationships;
- carry out relevant identity, right-to-work, reference and other onboarding checks;
- administer contractor assignments, contracts, timesheets, funding and payments;
- respond to enquiries, deliver our newsletter to subscribers and operate and protect our website; and
- meet legal obligations, maintain business records and manage complaints or claims.
Our main legal bases under UK GDPR are:
| Use | Main legal basis |
|---|---|
| Candidate sourcing, recruitment services, client relationships, enquiries and website security | Our legitimate interests in providing recruitment services and running the business |
| Recruitment records, call recording, transcription and AI-assisted administration | Our legitimate interests in keeping accurate records and managing recruitment efficiently |
| Contractor agreements and payments | Contract with the individual where applicable; legitimate interests in administering the assignment |
| Checks, tax records and compliance | Legitimate interests or legal obligation, depending on the requirement |
| The Identis Brief subscription | Consent where required for the newsletter |
You may object to processing based on legitimate interests in certain circumstances. Where we rely on consent, you can withdraw it.
We may contact candidates about relevant vacancies through email or our recruitment system. You can ask us to stop sending these communications. You can unsubscribe from The Identis Brief through Substack.
We handle health information and criminal-offence information only where relevant and with an applicable additional legal condition.
Call recording and AI assistance
We may record and transcribe recruitment calls to maintain accurate records and support follow-up. Recordings, transcripts and summaries may contain personal data. We use a telephone service provider to process them on our behalf.
We may use AI tools to assist with administrative recruitment tasks, including summarising notes and comparing experience in a CV with a role. We review the information and remain responsible for recruitment decisions. We do not decide whether a candidate progresses solely by automated means.
Sharing personal data
We may share relevant information with prospective employers and their hiring teams, referees, organisations carrying out checks, professional advisers, and authorities where required. For contractor assignments, a funding and payment partner may receive contact, contract, timesheet and payment information needed to administer the assignment.
We also use service providers for recruitment systems, email and document storage, website hosting and font delivery, telephony and transcription, AI assistance and newsletter delivery. They receive information relevant to the services they provide. A hiring organisation receiving a candidate’s details will generally be responsible for its own use of that information. We do not sell personal data.
International transfers
Our work with candidates and clients may involve sharing personal data outside the UK for a specific opportunity. Some of our service providers may also process information in other countries. Where a transfer is subject to UK international-transfer rules, we use an applicable UK adequacy arrangement or appropriate safeguards, such as approved contractual terms, as required. Contact us for information about safeguards relevant to your data.
How long we keep personal data
We keep personal data while it is needed for recruitment, an active relationship or assignment, or a legal, contractual or record-keeping purpose. We consider the nature of the information, our last meaningful contact, whether future work is relevant, and any applicable tax, compliance or dispute requirements. Information used for identity checks, criminal-record checks and call recordings may require different treatment from a general candidate profile. We do not apply a single fixed retention period to all candidate data.
Security and your rights
We use access controls and the security features of our business systems to protect personal data.
Depending on the circumstances, you can request access to your personal data, ask us to correct or erase it, restrict its use or transfer it, or object to certain processing. You can object to the use of your data for direct marketing at any time. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.
To exercise a right or make a data protection complaint, email luke@identis-partners.com. We will acknowledge a data protection complaint within 30 days, investigate it and communicate the outcome without undue delay. You can also complain to the Information Commissioner’s Office. An EEA supervisory authority may also be relevant to you.
Changes to this policy
We may update this policy when our practices or legal requirements change. The latest version will be available on this website.