Privacy
Privacy notice
This notice explains what GBA Consultants Ltd collects about clients, candidates and visitors to this website, why, and what control you have. Last updated 2026-10-12.
Who we are
GBA Consultants Ltd is the controller of your personal data. We're registered in England and Wales, company number 15595133, at The Barn, Upper Heyford, Northampton NN7 3NB, and we pay the data protection fee to the Information Commissioner's Office. For anything about your data, email Ceri John, Managing Director, at ceri@gbaltd.uk.
What we collect and why
| What | When we get it | Why we use it, and our lawful basis |
|---|---|---|
| Enquiry details: your name, email, company and what you tell us | When you use the interim or vacancy form, or email us | To reply and to discuss working together. Our legitimate interest in answering business enquiries, and steps you ask us to take before a contract. |
| Candidate details: your name, email, the role you want, your LinkedIn profile, your CV and notes from our conversations | When you use the CV form, email us or talk to us | To match you with suitable roles. Our legitimate interest in running a recruitment business. We never send your details to a client without your agreement. |
| Website statistics: pages viewed, the site that referred you, browser, device type and country | When you visit this site | To see how the site is used and improve it. Our legitimate interest, for statistical purposes only. Collected without cookies and without identifying you. |
Please don't send us sensitive details, such as health information, unless we ask for them for a specific role.
Who holds it for us
We use a small number of suppliers who process data on our behalf and only on our instructions:
- Netlify hosts this website and receives form submissions.
- Google Workspace runs our email and stores our files.
- Recruit CRM holds our candidate and client records.
- Umami produces the cookie-free website statistics.
Some of these suppliers store data outside the UK. Where they do, the transfer is protected by recognised safeguards, such as the UK International Data Transfer Addendum. We don't sell your data, and we don't share it for marketing.
How long we keep it
- Enquiries: up to 2 years after our last contact. If we work together, we keep contract and invoice records for 6 years for tax and legal reasons.
- Candidate details: up to 2 years after our last contact. You can ask us to delete them sooner at any time.
- Form submissions stored by Netlify: deleted within 30 days, once copied into our own records.
- Website statistics: up to 6 months, and only in aggregate.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to move it to another organisation. You can also object to us using it. Email ceri@gbaltd.uk and we'll respond within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office on 0303 123 1113.
Cookies
This website doesn't set cookies. Our fonts are hosted on our own site, and the statistics tool works without cookies. If you'd rather not be counted at all, you can switch statistics off in this browser.