Privacy policy for the Red Thread Market Access Ltd recruitment process
Date of publication: 14 May 2026
Red Thread Market Access Ltd (“Red Thread”, “we”, “us”, or “our”) manages its employer branding and recruitment process through our Career Site (the “Career Site”) and associated recruitment platform provided by Team Tailor (the “Platform”).
This privacy policy explains how we collect, use, store, and protect your personal data when you:
- Visit our Career Site (“Visitors”)
- Register interest in future opportunities (“Connecting Candidates”)
- Apply for a role (“Applying Candidates”)
- Are identified through professional/public sources (“Sourced Candidates”)
- Are referred to us (“Referred Candidates”)
- Are provided as a referee by a candidate (“Referees”)
For ease of reading, we use the term “Candidate” to refer collectively to Connecting Candidates, Applying Candidates, Sourced Candidates, and Referred Candidates unless otherwise stated.
1. Who we are
Red Thread Market Access Ltd is a company registered in England and Wales under company number 12339757.
Registered office:
The Wheelhouse
81 St Clement’s Street
Oxford
OX4 1AW
For the purposes of UK data protection law, Red Thread Market Access Ltd is the data controller for the personal data described in this notice.
If you have any questions about this privacy notice or how we use your personal data, please contact:
Data Protection Lead: Nick Leach
Email: nick@redthreadmarketaccess.com
Our ICO registration number is: CSN4086867.
2. What personal data we collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
Visitors to the Career Site
- IP address
- Browser type and device information
- Website usage data
- Cookie and analytics information
- Geographic location (approximate)
Candidates
- Name and contact details
- CV and employment history
- Education and qualifications
- Cover letters and work samples
- Interview notes and assessment outcomes
- Salary expectations
- Communications with us
- Public professional profile information (e.g. LinkedIn)
- References and referee feedback
Referees
Where a candidate provides your details as a referee, we may process:
- Your name
- Job title
- Employer details
- Contact information
- Professional reference information you provide
Referees are independent data subjects under data protection law and have the same rights regarding their personal data as any other individual described in this notice.
We do not intentionally collect more personal data than is necessary for recruitment purposes.
3. How we collect your personal data
We collect personal data:
- Directly from you
- Through your use of our Career Site
- From recruitment agencies or referral partners
- From publicly available professional sources (such as LinkedIn)
- From the referees you provide
- From employees or trusted partners who recommend you for a role
If we obtain your personal data indirectly (for example, via LinkedIn or referral), we will provide appropriate privacy information within a reasonable period and no later than required under applicable data protection law.
4. Our lawful basis for processing
Under UK GDPR, we must have a lawful basis for processing your personal data.
Recruitment activities
We process most candidate data because it is necessary for our legitimate interests in:
- recruiting suitable staff;
- managing recruitment processes;
- assessing candidate suitability;
- communicating with candidates; and
- maintaining recruitment records.
We carefully balance these interests against your rights and freedoms.
Talent pool / future opportunities
Where you choose to Connect to join our talent pool or opt in to hearing about future opportunities, we rely on your consent.
You may withdraw your consent at any time by:
- updating your preferences in the Platform; or
- contacting us directly.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Legal Obligations
Some processing may also be necessary to:
- comply with employment law obligations;
- verify right to work;
- comply with equality obligations; or
- establish, exercise, or defend legal claims.
5. Special category data
We ask candidates not to include unnecessary special category data in CVs or applications unless specifically requested.
Where we process special category data (such as health or equality monitoring information), we will do so only where permitted under UK GDPR and the Data Protection Act 2018, including where:
- you have provided explicit consent;
- processing is necessary for employment law obligations; or
- processing relates to equal opportunities monitoring.
Access to such information will be restricted appropriately.
6. Automated decision making and AI
We do not make recruitment decisions based solely on automated processing or profiling that produces legal or similarly significant effects on individuals. Any recruitment decisions are made with meaningful human involvement. We may use technology tools to support recruitment administration and efficiency; however, these tools do not replace human assessment or decision-making.
7. How we share your personal data
We may share your personal data with:
- Team Tailor (our recruitment platform provider)
- IT and cloud service providers
- Recruitment agencies or assessment providers
- Professional advisers
- Regulatory authorities where legally required
All third-party service providers are required to process personal data securely and in accordance with applicable data protection law. Where a provider acts as our processor, we ensure appropriate contractual safeguards are in place. We do not sell candidate personal data.
8. International transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we ensure appropriate safeguards are implemented in accordance with UK data protection law. These safeguards may include:
- adequacy regulations;
- the UK International Data Transfer Agreement (IDTA);
- the UK Addendum to the EU Standard Contractual Clauses; or
- other legally recognised transfer mechanisms.
Further information regarding international transfer safeguards may be requested by contacting us.
9. Data retention
We will not retain personal data longer than necessary for recruitment purposes.
Recruitment applications
If your application is unsuccessful, we will normally retain your recruitment records for up to 12 months after the recruitment process closes unless:
- we are legally required to retain it longer; or
- you have separately consented to remain in our talent pool.
Talent pool / future opportunities
Where you Connect with us and/or opt in to hear about future opportunities, we will retain your details for up to 12 months from your last consent or interaction. Before this period expires, we may contact you to ask whether you wish to remain in our talent pool. If consent is not renewed, your information will be securely deleted or anonymised.
Referee information
Referee information will normally be retained only for as long as necessary to support the relevant recruitment process and any associated legal obligations. Retention periods are reviewed regularly in line with our Data Retention Policy.
10. Security of your personal data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include:
- access controls;
- secure cloud platforms;
- authentication controls;
- staff confidentiality obligations; and
- regular review of security practices.
Where a personal data breach is likely to result in a risk to individuals’ rights and freedoms, we will comply with our legal obligations to notify the Information Commissioner’s Office and affected individuals where required.
11. Your rights
Under UK GDPR, you have rights regarding your personal data, including:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to object
- The right to data portability
- Rights relating to automated decision-making
If you wish to exercise any of your rights, please visit the Data & Privacy page on our Career Site or contact: nick@redthreadmarketaccess.com.
We may request proof of identity before responding to requests made via email.
You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk.
12. Cookies and analytics
Our Career Site may use cookies and analytics technologies to improve website functionality and understand how visitors use the site.
Further information is available in our Cookie Policy.
13. Changes to this privacy notice
We may update this privacy notice periodically to reflect:
- legal developments;
- operational changes; or
- updates to our recruitment processes or systems.
The latest version will always be available on our Career Site.
