Logo

Privacy Policy

NRL Ltd (“NRL”, “we”, “us”, “our”) is committed to protecting the privacy of visitors to NRL.co.uk (“the Website”). This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.



1. Information We Collect

We may collect the following personal data when you interact with the Website:

1.1 Information you provide voluntarily

  • Name, email address, telephone number, and other contact details submitted via application or enquiry forms
  • CVs, covering letters, or other documents uploaded for recruitment purposes
  • Information entered into AI-based job-matching tools or other recruitment features

1.2 Information collected automatically

  • Website usage data (pages visited, time spent, interactions) via cookies or analytics tools
  • Technical data such as IP address, browser type, and operating system



2. How We Use Your Personal Data

We process personal data for the following purposes:

  1. Recruitment services: to assess applications, match candidates to roles, and communicate with you regarding job opportunities
  2. Internal administration: to maintain our recruitment database and manage internal processes
  3. Compliance and legal obligations: to comply with laws, regulations, and contractual obligations
  4. Website performance and analytics: to improve functionality, usability, and user experience
  5. Marketing and communications (where consent has been given): to provide relevant information about NRL services and events

CVs, applications, and AI-matching data are used solely for recruitment purposes.



3. Legal Basis for Processing

Purpose

Legal Basis

Strictly necessary processing (e.g. CV submissions, form handling, document uploads)

Performance of a contract / legitimate interest

Analytics, functional, and marketing cookies

Consent

Marketing communications (where opted in)

Consent

Compliance with legal obligations

Legal obligation



4. Sharing Your Data

We do not sell your personal data. We may share personal data:

  • With clients or employers strictly for recruitment purposes, where necessary for job applications
  • With third-party service providers supporting Website functionality, analytics, or recruitment tools
  • Where required by law, regulation, or legal process

All third-party processors are required to protect your personal data in accordance with UK GDPR.



5. Data Retention

  • CVs, applications, and recruitment data will be retained only for as long as necessary to manage recruitment processes or as required by law
  • Non-essential marketing data will be retained until consent is withdrawn
  • Aggregated or anonymised analytics data may be retained indefinitely for internal reporting purposes



6. Your Rights

Under UK GDPR, you have the right to:

  1. Access the personal data we hold about you
  2. Request correction of inaccurate or incomplete data
  3. Request erasure (the Right to be Forgotten)
  4. Restrict processing of your personal data
  5. Object to certain processing activities, including direct marketing
  6. Data portability
  7. Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact: enquiries@nrl.co.uk

Note: If you request deletion, your CV and application data will be removed from our internal recruitment database, except where retention is legally required.



7. Cookies and Tracking

We use cookies and similar technologies on the Website. For detailed information, please see our Cookie Policy.

Cookies are used to:

  • ensure Website functionality
  • analyse Website usage
  • remember user preferences
  • support marketing and advertising (where consent has been given).



8. Security of Your Data

We implement appropriate technical and organisational measures to protect your personal data against:

  • unauthorised access, disclosure, or loss
  • accidental or unlawful destruction
  • any other misuse.

Access to personal data is restricted to authorised personnel on a need-to-know basis.



9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. The “Last updated” date at the top indicates the most recent revision. Continued use of the Website constitutes acceptance of the updated policy.


 

10. Contact Us

For questions or concerns regarding this Privacy Policy or how your personal data is handled, please contact:

NRL Ltd
5 Glass House Road
Wigan WN3 6GL
United Kingdom
Email: enquiries@nrl.co.uk

Last updated: 26 January 2026