Privacy notice
How Agentic Hire processes personal data under UK/EU GDPR · Last updated 25 August 2026
Who we are
Agentic Hire operates a recruitment service and a recruitment platform at agentichire.co.uk, and is the data controller for the processing described here. Contact for anything in this notice, including exercising your rights: contact@agentichire.co.uk.
Candidates: what we process and why
When a CV is submitted — uploaded through our website, sent by email, or uploaded by a recruiter — we extract a structured professional profile: name, contact details, location, skills, work history, education and availability, to match the candidate against open vacancies and introduce them to employers with their agreement. The lawful basis is recorded per candidate: consent (including self-submission through our website, where you tick an explicit consent box), or legitimate interest in providing recruitment services.
AI processing — and no automated decisions
CV content is processed by Anthropic's Claude API (acting as our data processor) to extract the profile and score how well a candidate fits each role, with written reasoning. No decision about you is made solely by automated means. AI scores and shortlists are always reviewed by a human recruiter; no candidate is rejected because of an AI score alone, and no CV is sent to an employer without a human deciding it is a genuine fit. This means the "solely automated decision-making" provisions of UK GDPR Article 22 are not engaged — but if you have questions about how AI was used in your case, ask us and we will explain.
Employers and clients
When you submit a vacancy or work with us as a client we process your business contact details (name, work email, phone) and vacancy details, on the basis of taking steps to enter into and perform a contract with you. Vacancy details are held confidentially, used only to shortlist candidates for you, and never shared beyond that.
Website visitors and cookies
Public pages can be browsed without an account. Analytics (Google Analytics) runs only if you consent via the cookie banner; essential login/security cookies are set only when you sign in. Details: Cookie Policy.
Storage and security
CV files and job specs are encrypted at rest (AES-256). Access requires an authenticated account, access to candidate records is written to an audit log, and access within the platform is role-based. Data is hosted on servers in the EU (Hetzner).
Our processors
We use a small number of service providers to run the service: Anthropic (AI processing of CV content), Hetzner (hosting, EU), Stripe (platform billing), and — where an account connects them — Google or Microsoft (email/calendar integrations). Each acts under contract as a processor; we do not sell personal data to anyone.
Retention
Candidate data is retained for a fixed period (default 180 days, configurable per agency workspace) and then permanently deleted — including the original CV file, the extracted profile, and all job-match records. Deletion runs automatically on a schedule.
Your rights
You may request access to all data held about you (subject access request), correction, or immediate erasure — erasure is a hard delete of every record we hold. Email contact@agentichire.co.uk and we will act on it promptly. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ico.org.uk).