Privacy Policy

Bonhill Partners Ltd understands that protecting your personal data is important. This policy explains how we collect, use, share and protect personal data when we provide our website and services, or otherwise interact with you, and the rights you have over your data. Please read it together with any other privacy information we give you when we collect your data.

1. Who we are

Bonhill Partners Ltd is a company registered in England and Wales under company number 14359154. Our address is 145 City Rd, London EC1V 1AZ.

We provide technology staffing, consulting and academy services. In this policy, "we", "us" and "our" mean Bonhill Partners Ltd.

We are the controller of the personal data described in this policy. This means we decide how and why it is used.

If you have any questions about this policy or how we use your personal data, you can contact us:

  • Email: contact@bonhillpartners.co.uk

  • Phone: 020 7126 8493

  • Post: Bonhill Partners Ltd, 25 City Road, London, EC1Y 1AA, United Kingdom

2. The personal data we collect

Personal data is any information that relates to an identified or identifiable individual. The personal data we hold depends on how you deal with us.

Candidates (people applying for roles with our clients, or for our academy programme):

  • Identity data: name, date of birth, job title and photographic identification

  • Contact data: address, email address and telephone numbers

  • Professional data: your CV, work history, qualifications, skills, references, interview notes and assessment results, and salary or rate expectations

  • Right-to-work data: information needed to confirm you are legally allowed to work in the relevant country

Consultants and staff (people we employ or engage directly, and people applying to work for us):

  • all of the above, plus

  • Financial data: bank account details

  • Employment data: National Insurance number, tax information, timesheets, pay records and emergency contact details

  • Background verification data: such as passport details and other information needed for our onboarding and due diligence checks, and related ongoing monitoring

  • Transaction data: details of payments between you and us

Business contacts (people who work for our clients, suppliers and partners):

  • Identity data: name and job title

  • Contact data: business address, email address and telephone numbers

  • Financial and transaction data: billing and payment details, and records of services provided

Everyone who uses our website or contacts us:

  • Technical and usage data: such as IP address, browser and device type, operating system, pages viewed, how you arrived at our website, and how you use it, including through cookies

  • Communications data: the content of any message or form you send us

  • Marketing and communications preferences: your choices about receiving marketing and updates from us

Special category and criminal offence data

Some personal data needs extra protection. Special category data includes information about racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health, sex life or sexual orientation, and genetic or biometric data. Criminal offence data is information about criminal convictions and offences.

We only collect this data where it is necessary and the law allows it. For example, you may share health information so we can make reasonable adjustments, or a role may legally require a criminal record check. We may also come across special category data in a CV you send us. We handle this data with additional safeguards, and only where a specific condition under UK data protection law applies, such as meeting our obligations in employment law, or with your explicit consent.

3. How we collect personal data

We collect personal data in several ways:

  • Directly from you: for example when you submit a form or upload a CV on our website, apply for a role or our academy programme, or contact us by email, phone or in person.

  • Through your use of our website: for example technical and usage data collected through cookies and similar technologies.

  • From third parties: such as referees and previous employers, our clients (for example interview feedback), providers of right-to-work and background checks, and our analytics providers.

  • From publicly available sources: such as professional networking sites like LinkedIn, job boards where you have made your information available, and Companies House.

4. How we use personal data

We use personal data only where the law allows it. We use it to:

  • assess whether you are suitable for a role with one of our clients, or with us

  • introduce suitable candidates to clients

  • run our academy programme, including training and support

  • employ or engage consultants, including paying them and managing their work

  • carry out right-to-work, background and other legally required checks

  • provide our services to clients and manage our relationships with them

  • respond to enquiries and communicate with you about our services

  • keep records, and handle invoicing, billing and payments

  • understand how our website is used, so we can improve it and our services

  • send information about our services and events, where permitted

  • keep our website and systems secure

  • meet our legal, regulatory, tax and insurance obligations, and establish, exercise or defend legal claims

5. Our legal bases

Under UK data protection law, we must have a legal basis for each use of personal data. We may rely on more than one, depending on the purpose:

  • Contract: where we need to use your data to enter into or carry out a contract with you, for example to employ a consultant or provide services to a client.

  • Legal obligation: where we need to use your data to meet a legal requirement, such as right-to-work checks, tax and payroll obligations, and the record-keeping required of employment agencies and employment businesses.

  • Legitimate interests: where we need to use your data to run our business, for example to find and introduce candidates, answer enquiries, improve our website and services, recover debts and keep our systems secure, and your interests do not override ours.

  • Consent: where we have asked for your consent, for example for certain marketing emails or optional cookies.

We only send marketing emails to individuals where we have your consent, or where you have an existing relationship with us and have been given a simple way to opt out.

Where we rely on legitimate interests, you have the right to object. Where we rely on consent, you can withdraw it at any time. This will not affect anything we did before you withdrew it. Please contact us if you would like more detail about the legal basis for a particular use of your data.

We do not make decisions about you based solely on automated processing.

6. Sharing personal data

We do not sell personal data. We may share it, where necessary, with:

  • our employees, contractors and associated companies

  • clients, when introducing a candidate for a role, with the candidate's agreement

  • referees and previous employers, to confirm references

  • providers of right-to-work and background checks

  • our partners and associates who help us assess candidates or deliver projects

  • IT, data storage and website hosting providers, such as Microsoft, our recruitment system provider Vincere, and our website platform Squarespace

  • payment and accounting providers, such as Xero

  • marketing and analytics providers

  • professional advisers, such as lawyers, accountants, auditors, bankers, insurers and insurance brokers

  • anyone to whom all or part of our business is, or may in good faith be, transferred

  • courts, tribunals, regulators and law enforcement, where required or allowed by law, or to establish, exercise or defend our legal rights

Anyone we share personal data with must keep it secure and use it only for the agreed purpose.

7. International transfers

Some of the organisations we share personal data with may store or access it outside the United Kingdom. The level of data protection in other countries may not be the same as in the UK. Where personal data is transferred outside the UK, we make sure it is protected, by:

  • transferring it only to countries the UK recognises as providing adequate protection, or

  • using safeguards approved under UK law, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

8. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, regulatory, tax, accounting and reporting requirements. We may keep it for longer if there is a complaint, or if we reasonably believe there may be legal proceedings.

To decide how long to keep personal data, we consider the amount, nature and sensitivity of the data, the risk of harm from unauthorised use or disclosure, the purposes we use it for, and any legal requirements. When personal data is no longer needed, we securely delete or anonymise it.

9. How we protect personal data

We use appropriate physical, technical and organisational measures to protect personal data against misuse, loss, and unauthorised access, change or disclosure. Access to personal data is limited to those who need it for their work.

While we take security seriously, no transmission of information over the internet is completely secure, so we cannot guarantee the security of information sent to us online.

10. Your rights

Under UK data protection law, you have the right to:

  • ask for a copy of the personal data we hold about you

  • ask us to correct personal data that is inaccurate or incomplete

  • ask us to delete your personal data

  • ask us to restrict how we use your personal data

  • object to how we use your personal data, including for direct marketing

  • ask us to transfer personal data you have given us to you or another organisation

  • object to decisions made solely by automated processing that significantly affect you

  • withdraw your consent, where we rely on consent

Some of these rights apply only in certain circumstances. To make a request, contact us using the details in section 1. We will respond within one month.

Unsubscribing: you can stop receiving marketing from us at any time by using the unsubscribe link in our emails or by contacting us.

Providing data is your choice: you do not have to give us personal data. If you do not, we may not be able to provide some of our services to you.

Information about other people: if you give us personal data about someone else, such as a referee, you confirm that you are allowed to share it with us.

11. Cookies

Our website uses cookies, which are small text files stored by your browser. Some cookies are necessary for the website to work. Others help us understand how the website is used, or support marketing. Where required, we ask for your consent before setting non-essential cookies. You can change your cookie preferences at any time through your browser settings.

12. Links to other websites

Our website may contain links to other websites. We are not responsible for those websites or how they use personal data. Their own privacy policies apply.

13. Complaints

If you have a concern about how we use your personal data, please contact us first with full details, so we can investigate and try to resolve it. We will respond to you in writing with the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page. If we make a significant change, we will let you know.

This policy was last updated in September 2026.