Last updated: 24 August 2026
Global Recruitment Consulting Ltd, trading as Global Retail Recruitment, is an international retail executive-search and recruitment consultancy.
For the purposes of UK data-protection law, we are the controller of the personal information described in this notice.
Company number: 06612799
Registered office: 33–35 Daws Lane, London, England, NW7 4SD
Website: www.globalretailrecruitment.com
Privacy contact: Neil Oviatt
Email: director@globalretailrecruitment.com
Telephone: +44 (0)20 7101 9416
This notice explains how we collect, use, share and protect personal information relating to candidates, prospective candidates, clients, prospective clients, referees, website visitors and other professional contacts.
We process personal information under the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended, including by the Data (Use and Access) Act 2025.
The information we collect depends on your relationship with us.
We may collect:
Your name, address, email address and telephone number.
Your CV, employment history, education, qualifications and professional memberships.
Your current and previous job titles, responsibilities and achievements.
Your salary, remuneration, benefits and future compensation expectations.
Your location, nationality, languages, availability and willingness to relocate or travel.
Information about your right to work.
References and information supplied by referees.
Interview notes, assessments and correspondence.
Your career preferences and the types of opportunities that may interest you.
Publicly available professional information, including information published on company websites, professional directories and platforms such as LinkedIn.
Information needed to complete appropriate identity, employment, qualification or background checks.
Any other information you choose to include in a CV, application, email, message or conversation with us.
We may collect:
Your name, job title and organisation.
Your business email address, telephone number and other professional contact details.
Information about vacancies, assignments and recruitment requirements.
Records of meetings, calls, correspondence and commercial discussions.
Contract, invoicing and transaction information.
Information about your organisation that is publicly available or supplied to us in connection with an assignment.
We may collect:
Your IP address.
Browser, device and operating-system information.
Referring website and pages viewed.
Approximate location derived from an IP address.
Website interactions, including links or calls-to-action selected.
Cookie-consent choices.
Information submitted through website forms.
Security, error and server-log information.
Information stored or accessed using cookies, local storage and similar technologies.
We may receive information:
Directly from you, including through our website, email, telephone, video calls, meetings and professional networking.
From clients, colleagues, referees and people who recommend or refer you.
From job boards, recruitment databases and professional networking platforms.
From publicly available sources, including company websites, press articles, professional profiles and industry publications.
From organisations that provide identity, reference, qualification or background-checking services.
From website, hosting, security and analytics providers.
Where we obtain your information from another source, we will provide you with appropriate privacy information within the period required by law, unless a legal exception applies.
Please do not provide another person’s information unless you are authorised to do so.
We only use personal information when we have a lawful basis.
We use candidate information to:
Identify and assess potential candidates.
Discuss career opportunities.
Match candidates with relevant assignments.
Prepare candidate profiles and shortlists.
Present agreed candidate information to prospective employers.
Arrange interviews and manage recruitment processes.
Obtain references and carry out appropriate checks.
Support negotiations, offers and placements.
Maintain professional relationships for future opportunities.
We normally rely on our legitimate interests in operating an executive-search and recruitment business. We may also rely on steps taken at your request before entering a contract, performance of a contract, compliance with a legal obligation or consent where consent is appropriate.
We will normally discuss an opportunity with you before submitting identifiable information or a CV to a prospective employer.
We use client and business-contact information to:
Respond to enquiries.
Discuss recruitment requirements.
Deliver retained, exclusive or contingency recruitment assignments.
Identify and introduce suitable candidates.
Manage contracts, assignments, invoicing and payments.
Maintain records of our professional relationship.
Inform relevant business contacts about our executive-search services.
We normally rely on performance of a contract, steps taken before entering a contract and our legitimate interests in developing and delivering our services.
We may use technical and website information to:
Operate and secure the website.
Prevent spam, fraud, misuse and unauthorised access.
Diagnose errors and technical problems.
Understand which pages and services are useful.
Measure website and campaign performance.
Improve website content and user experience.
Record and respect cookie or tracking preferences.
Depending on the technology and purpose, we rely on our legitimate interests, consent or an applicable exemption under PECR.
We may use information to:
Maintain business, financial and tax records.
Establish, exercise or defend legal claims.
Respond to legal or regulatory requirements.
Handle data-protection requests and complaints.
Detect or prevent fraud and other unlawful activity.
Protect our rights, property, systems and users.
We rely on legal obligations and our legitimate interests in managing and protecting our business.
Where we rely on legitimate interests, those interests may include:
Operating an international executive-search business.
Identifying appropriate candidates for genuine vacancies and assignments.
Helping candidates access relevant career opportunities.
Developing and maintaining professional relationships.
Communicating with relevant business contacts about our services.
Improving and securing our website and systems.
Preventing fraud and misuse.
Maintaining evidence of transactions, instructions and communications.
Protecting and enforcing our legal rights.
Before relying on legitimate interests, we consider whether the processing is necessary and balance our interests against the individual’s rights, interests and reasonable expectations.
You may object to processing based on legitimate interests by contacting us.
We may contact relevant business people about executive-search and recruitment services where we believe the communication is professionally relevant.
We rely on consent where PECR requires consent. In other circumstances, we may rely on legitimate interests, subject to your right to object.
You can stop marketing communications at any time by:
Selecting the unsubscribe option in an email.
Replying and asking us to stop.
Emailing director@globalretailrecruitment.com.
We may retain a minimal suppression record after an opt-out so that we can respect your choice.
We do not sell personal information.
A CV or recruitment discussion may occasionally contain sensitive information, such as information about health, disability, race or ethnicity, religious or philosophical beliefs, political opinions, trade-union membership, sexual orientation or biometric information.
We ask that you only provide this information when it is relevant and necessary.
Where we process special-category information, we will identify both a lawful basis and an additional condition under Article 9 of the UK GDPR. Where required, we will also meet the relevant conditions and safeguards under the Data Protection Act 2018.
We will only process criminal-conviction or offence information where it is necessary, lawful and supported by an appropriate condition under the Data Protection Act 2018.
Depending on the circumstances, we may share personal information with:
Clients and prospective employers involved in relevant recruitment assignments.
Other recruitment or search partners where appropriate.
Referees and organisations carrying out authorised checks.
Website hosting, email, cloud-storage, customer-management, security, analytics and IT providers.
Professional advisers, including accountants, insurers, legal advisers and auditors.
Government bodies, regulators, courts, law-enforcement agencies or other authorities where legally required.
A purchaser, investor or successor if our business or assets are reorganised, transferred or sold.
Prospective employers and clients may act as separate controllers when they receive candidate information. Their own privacy notices will explain how they use that information.
Our service providers may only use information for the agreed service and must protect it appropriately.
Global Retail Recruitment operates internationally, including across the United Kingdom, Europe, the Middle East, GCC countries and Asia.
A recruitment assignment may therefore involve sending personal information to a client, prospective employer or service provider outside the United Kingdom.
Before presenting your identifiable information to an overseas employer, we will normally discuss the opportunity and proposed disclosure with you.
Where UK personal information is transferred internationally, we use an appropriate lawful transfer mechanism. Depending on the destination, this may include:
UK adequacy regulations.
The UK International Data Transfer Agreement.
The UK Addendum to the European Commission’s Standard Contractual Clauses.
Another safeguard or exception permitted by data-protection law.
We also consider the risks associated with the destination and recipient and apply additional safeguards where necessary.
You may contact us for more information about safeguards applying to a particular transfer.
Our website uses cookies and similar technologies, including browser local storage.
These technologies may be used for:
Essential website operation and security.
Recording cookie choices.
Preventing spam and automated misuse.
Remembering website preferences.
Measuring visits and page performance.
Recording interactions with enquiry links and calls-to-action.
Social-sharing or advertising functions, where enabled and consented to.
Our consent-management provider may store your consent choice so that the website can respect it on later visits.
Where enabled, analytics services such as Google Analytics may collect information including IP-derived location, device and browser information, visited pages, referral information and interaction events. Analytics and marketing technologies are used only where permitted under PECR, including after consent where consent is required.
Our employer-enquiry popup uses a browser local-storage item named:
grr-business-popup-last-shown
This item stores a calendar-date value in the visitor’s browser. Its purpose is to prevent the same popup appearing more than once in the same UK calendar day on that browser.
The stored value does not contain your name, email address, telephone number or IP address and does not by itself transmit information to us. It may remain in the browser until it is overwritten on a later visit or cleared through the browser’s settings.
The popup and employer-enquiry panel may also generate analytics events when they are displayed, closed or selected. These events are not intended to contain information entered into an enquiry form.
You can manage non-essential technologies through the cookie-consent controls displayed on the website. You can also clear or block cookies and local storage through your browser settings, although this may affect some website features.
The current list of website cookies, storage technologies, providers, purposes and expiry periods is available in our separate Cookie Policy.
We do not keep personal information indefinitely. Retention depends on why the information was collected, whether our relationship remains active, legal limitation periods and applicable accounting or regulatory requirements.
Our usual retention approach is:
Candidate and prospective-candidate records: normally retained for up to 36 months after the last meaningful contact or recruitment activity. We may retain information longer where you remain actively engaged with us, request continued representation or where retention is reasonably required for legal purposes.
Client and business-contact records: retained while the relationship is active and afterwards where necessary for professional, contractual or legal purposes.
Contracts, invoices and accounting records: normally retained for at least six years in accordance with applicable accounting, tax and legal requirements.
Website enquiries: normally retained for up to 24 months unless they lead to an ongoing candidate or client relationship.
Marketing records: retained while marketing remains relevant or until you object or unsubscribe. A minimal suppression record may be retained to respect an opt-out.
Website and security logs: retained for the period reasonably necessary to operate, secure and diagnose the website.
Cookie and analytics information: retained for the periods shown in the current Cookie Policy and consent tool.
Popup local storage: retained in the visitor’s browser until overwritten or manually cleared.
When information is no longer required, we delete it securely or anonymise it so that it can no longer identify an individual.
We use proportionate technical and organisational measures to protect personal information. These may include:
Multi-factor authentication.
Access controls and password protection.
Encrypted systems and backups where appropriate.
Secure cloud and email providers.
Device and network security.
Confidentiality requirements.
Secure destruction of paper records.
Regular review of access and retention.
No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will investigate and make any notifications required by law.
We do not make decisions about candidates that produce legal or similarly significant effects solely through automated processing.
Technology may assist with research, administration, document review, communication or candidate matching, but recruitment assessments, recommendations and decisions involve human judgement.
A client may operate its own assessment or decision-making systems. Where this happens, the client is responsible for explaining its processing.
Depending on the circumstances, you may have the right to:
Be informed about how your personal information is used.
Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to erase information.
Ask us to restrict how information is used.
Object to processing based on legitimate interests.
Object at any time to direct marketing.
Receive certain information in a portable format.
Withdraw consent where we rely on consent.
Challenge certain decisions made solely by automated means.
Complain about our use of your information.
These rights are not absolute, and legal exemptions may apply. We may need to verify your identity before acting on a request.
To exercise a right, email director@globalretailrecruitment.com.
We do not normally charge for a data-protection request. We will respond within the period required by law and will explain if we cannot comply fully.
You can browse most of our website without submitting personal information.
You are not generally obliged to provide recruitment information. However, if you want us to represent you, consider you for an opportunity or deliver a service, we may need sufficient information to assess suitability, communicate with you and meet legal or client requirements.
If required information is not provided, we may be unable to progress an application, introduce you to a client or provide the requested service.
Our website may contain links to LinkedIn, client websites, vacancy platforms and other third-party services.
We do not control how those organisations process personal information. You should review the privacy information provided by the relevant third party before submitting information or using its services.
Our services are intended for adult professionals and business contacts. We do not knowingly provide recruitment services to children or intentionally collect children’s information through this website.
If you are concerned about how we have handled your personal information, please contact:
Privacy contact: Neil Oviatt
Email: director@globalretailrecruitment.com
Telephone: +44 (0)20 7101 9416
Post: Global Retail Recruitment, 33–35 Daws Lane, London, England, NW7 4SD
We will provide a clear way to make a data-protection complaint, acknowledge receipt within 30 days, investigate appropriately, keep you informed and communicate the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk/make-a-complaint/data-protection-complaints/
You may contact the ICO without contacting us first, although the ICO may recommend giving us an opportunity to resolve the matter.
We may update this notice when our services, technology, suppliers or legal obligations change.
The latest version will be published on this website with its revision date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.