Privacy Policy
We are committed to protecting your privacy and personal data in accordance with UK data protection laws. The integrity and future success of Pharmadrome is dependent on adhering to the strictest codes of confidentiality and the correct treatment of your personal data.
Last updated: 16 Jun 2025
Who We Are
We operate as both an employment business and employment agency, subject to the Conduct of Employment Agencies and Employment Businesses Regulations 2003 and Employment Agencies Act 1973.
UK Data Controller
Pharmadrome Ltd, registered in England and Wales under company number 08168819 with registered address at 106 Charter Avenue, Ilford, Essex, IG2 7AD, United Kingdom.
EU Data Controller & Representative
Pharmadrome OÜ, registered in Estonia under registry code 14938460 with registered address at Veskiposti tn 2-1002, 10138 Tallinn, Estonia.
Privacy Contact
Email: [email protected]
Post: Data Protection Officer, Pharmadrome Ltd, 106 Charter Avenue, Ilford, Essex, IG2 7AD
We respond within one month and provide clear information about any exemptions that may apply.
Legal Basis for Processing
We process your personal data under the following legal grounds.
Legitimate Interest
To provide recruitment and employment services, match candidates with opportunities, maintain our business operations, conduct direct sourcing activities, and develop our talent networks.
Contract Performance
When you engage our services, register as a candidate, or we place you in employment.
Consent
For marketing communications, optional services, profile sharing with specific clients, and certain types of background checks (freely given and withdrawable).
Legal Obligations
To comply with employment law, tax obligations, regulatory requirements, and conduct necessary background checks.
Information We Collect
Direct Interactions
- Personal details (name, contact information, address, date of birth)
- Professional information (CV, qualifications, experience, career history)
- Employment preferences and salary expectations
- Right to work documentation
- Professional references and contact details
- Communication preferences and consent records
Automated technologies or interactions
- Website usage data (IP addresses, browser type, device information, pages visited)
- Communication records (emails, calls, meeting notes)
- Application tracking information
- Engagement data (email opens, link clicks, website interactions)
Third parties or publicly available sources
- Professional Networks: Information from LinkedIn, professional directories, and industry databases
- Referrals: Recommendations from clients, candidates, and professional contacts
- Reference Checks: Information from previous employers and professional references
- Background Checks: Verification of qualifications, employment history, and where required by clients or law, criminal record checks
- Client Feedback: Information about your performance and suitability for roles
Information About Our Clients
- Company information and business contacts
- Hiring manager details and communication preferences
- Job requirements and specifications
- Feedback on candidates and placement outcomes
- Commercial relationship history
How We Use Your Information
For Candidates
- Match you with suitable permanent and contract/consultancy opportunities
- Present your profile to potential employers (with your explicit consent for each opportunity)
- Conduct proactive talent sourcing and direct approach activities
- Provide career advice and market insights
- Maintain your candidate record for future opportunities
- Conduct reference and background checks as required
- Communicate about opportunities, placement updates, and industry news
- Comply with legal obligations and regulatory requirements
For Clients
- Understand your recruitment needs and company culture
- Source and present suitable candidates
- Provide market intelligence and salary benchmarking
- Maintain commercial relationships and communication history
- Ensure compliance with diversity and inclusion requirements
For All Users
- Improve our services and website functionality
- Conduct business analytics and reporting
- Ensure security and prevent fraud
- Send marketing communications (with consent)
- Comply with legal and regulatory obligations
Information Sharing
With Your Consent
We share candidate information with potential employers only with your explicit consent for specific opportunities. You can withdraw this consent at any time.
Within Our Business
- Between our UK and EU entities to provide seamless service
- With our consultants and staff who need access to perform their roles
- For business administration, payroll, and IT support purposes
With Service Providers
We may share data with trusted third parties under strict data processing agreements:
- IT support and hosting providers
- Background check and verification services
- Reference checking services
- Marketing and communication platforms
- Professional development and training providers
- Legal and compliance advisors
Legal Requirements
We may disclose information when legally required, to protect our legitimate interests, or in connection with business transfers or restructuring.
International Transfers
We primarily process data within the UK and EU. Any transfers outside these regions are made with appropriate safeguards:
- To countries with adequacy decisions
- Using Standard Contractual Clauses (SCCs)
- With binding corporate rules where applicable
Your rights remain fully protected regardless of where your data is processed.
Data Retention
We retain personal data for as long as necessary to fulfill our business purposes and legal obligations. Our retention approach considers:
- Active Candidates: Throughout our business relationship and for future opportunities
- Successful Placements: To provide ongoing support and comply with legal obligations
- Client Relationships: For the duration of commercial relationships and potential future requirements
- Website Users: Based on legitimate interests in service improvement and legal compliance
- Marketing Data: Until you withdraw consent, plus a reasonable period to process your request
Specific retention periods vary based on:
- The nature of our relationship with you
- Legal and regulatory requirements
- Legitimate business interests
- Your communication preferences and consent status
Your Rights Under Data Protection Law
Access and Portability
- Request copies of your personal data
- Receive your data in a structured, machine-readable format
- Have your data transmitted to another service provider where technically feasible
Correction and Completion
- Correct inaccurate or incomplete information
- Update your preferences and contact details
- Ensure your professional profile remains current
Erasure and Restriction
- Request deletion of your data (subject to legal obligations and legitimate interests)
- Restrict how we process your information
- Object to processing based on legitimate interests
Consent Management
- Withdraw consent for marketing communications
- Control profile sharing with specific clients
- Manage your communication preferences
Objection Rights
- Object to processing for direct marketing (absolute right)
- Object to processing based on legitimate interests (we must demonstrate compelling grounds to continue)
Data Security
We implement appropriate technical and organizational measures including encryption of data in transit and at rest, access controls and authentication systems, and regular security assessments.
Additional protections include staff training on data protection, secure backup and recovery procedures, and data processing agreements with all third parties.
Marketing Communications
We may send you marketing communications about relevant job opportunities, industry insights and career advice, and service updates.
You can unsubscribe at any time using the link in our emails or by contacting us directly.
Data Breach
In the event of a data breach that poses a high risk to your rights, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
We will provide clear information about the breach and any remedial actions being taken.
Policy Changes
We may update this Privacy Policy to reflect changes in data protection laws, new business practices, or feedback from users and regulators.
We will notify you of material changes via email or website notice.
Complaints
UK Residents
You have the right to complain to the UK data protection authority:
Information Commissioner’s Office (ICO)
Website: ico.org.uk | Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
EU Residents
Estonian Data Protection Inspectorate (Lead Supervisory Authority)
Website: aki.ee | Phone: +372 627 4135
Post: Tatari 39, 10134 Tallinn, Estonia
Or contact your local EU data protection authority:
https://edpb.europa.eu/about-edpb/board/members_en