NRL Ltd (“NRL”, “we”, “us”, “our”) is committed to protecting the privacy of visitors to NRL.co.uk (“the Website”). This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.
1. Information We Collect
We may collect the following personal data when you interact with the Website:
1.1 Information you provide voluntarily
- Name, email address, telephone number, and other contact details submitted via application or enquiry forms
- CVs, covering letters, or other documents uploaded for recruitment purposes
- Information entered into AI-based job-matching tools or other recruitment features
1.2 Information collected automatically
- Website usage data (pages visited, time spent, interactions) via cookies or analytics tools
- Technical data such as IP address, browser type, and operating system
2. How We Use Your Personal Data
We process personal data for the following purposes:
- Recruitment services:
to assess applications, match candidates to suitable roles, and communicate with you regarding job opportunities, interviews, applications, and recruitment-related matters by telephone, email, SMS, WhatsApp, or other appropriate communication channels.
- Internal administration: to maintain our recruitment database and manage internal processes
- Compliance and legal obligations: to comply with laws, regulations, and contractual obligations
- Website performance and analytics: to improve functionality, usability, and user experience
- Marketing and communications (where consent has been given): to provide relevant information about NRL services and events
CVs, applications, and AI-matching data are used solely for recruitment purposes.
Where appropriate, we may contact candidates using telephone, SMS, email or messaging services such as WhatsApp in relation to recruitment opportunities, applications, interviews and other recruitment-related communications. Candidates may request an alternative communication method at any time.
3. Legal Basis for Processing
|
Purpose
|
Legal Basis
|
|
Strictly necessary processing (e.g. CV submissions, form handling, document uploads)
|
Performance of a contract / legitimate interest
|
|
Analytics, functional, and marketing cookies
|
Consent
|
|
Marketing communications (where opted in)
|
Consent
|
|
Compliance with legal obligations
|
Legal obligation
|
4. Sharing Your Data
We do not sell your personal data. We may share personal data:
- With clients or employers strictly for recruitment purposes, where necessary for job applications
- With third-party service providers supporting Website functionality, analytics, or recruitment tools
- Where required by law, regulation, or legal process
-
With communication service providers, including email, SMS, and messaging platforms such as WhatsApp, where used for recruitment-related communications with candidates.
All third-party processors are required to protect your personal data in accordance with UK GDPR.
5. Data Retention
- CVs, applications, and recruitment data will be retained only for as long as necessary to manage recruitment processes or as required by law
- Non-essential marketing data will be retained until consent is withdrawn
- Aggregated or anonymised analytics data may be retained indefinitely for internal reporting purposes
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure (the Right to be Forgotten)
- Restrict processing of your personal data
- Object to certain processing activities, including direct marketing
- Data portability
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact: enquiries@nrl.co.uk
Note: If you request deletion, your CV and application data will be removed from our internal recruitment database, except where retention is legally required.
7. Cookies and Tracking
We use cookies and similar technologies on the Website. For detailed information, please see our Cookie Policy.
Cookies are used to:
- ensure Website functionality
- analyse Website usage
- remember user preferences
- support marketing and advertising (where consent has been given).
8. Security of Your Data
We implement appropriate technical and organisational measures to protect your personal data against:
- unauthorised access, disclosure, or loss
- accidental or unlawful destruction
- any other misuse.
Access to personal data is restricted to authorised personnel on a need-to-know basis.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. The “Last updated” date at the top indicates the most recent revision. Continued use of the Website constitutes acceptance of the updated policy.
10. Contact Us
For questions or concerns regarding this Privacy Policy or how your personal data is handled, please contact:
NRL Ltd
5 Glass House Road
Wigan WN3 6GL
United Kingdom
Email: enquiries@nrl.co.uk