Privacy notice

Last updated: 19 October 2026

This notice explains how Evolve Partners Ltd collects and uses personal information about candidates, clients and visitors to this website, and the rights you have. It is written to meet Articles 13 and 14 of the UK GDPR, as amended by the Data (Use and Access) Act 2025.

1. Who we are

Evolve Partners Ltd ("Evolve", "I", "we") is the controller of your personal information. Evolve is a recruitment and executive search business run by its founder, Blair Taylor.

• Registered in England and Wales, company number 14150506
• Registered office: Unit 115, Accounts By Simply, 40 Gracechurch Street, London, England, EC3V 0BT
• Contact for anything in this notice: Email blair@evolvepartners.co.uk or write to Unit 115, Accounts By Simply, 40 Gracechurch Street, London, England, EC3V 0BT. Calls are available by appointment.

Evolve Partners Ltd is registered with the Information Commission (ICO), registration number ZC276529.

Evolve is not required to appoint a data protection officer.

2. The information we collect

If you are a candidate, we may hold:

• your name, email address, phone number and location;
• your CV, career history, qualifications, professional memberships and skills;
• your current and expected salary and benefits, notice period and the locations you would work in;
• your LinkedIn or other professional profile, if you share it or it is publicly available;
• notes from our conversations and interviews, and feedback from clients you are introduced to;
• references, where you have agreed we may take them;
• right-to-work or identity information, only when a specific role requires it.

We do not ask for special category information (such as health, ethnicity or religion) or criminal records information. If you choose to include it in your CV, we will only use it where it is relevant to a role and the law allows, for example to make reasonable adjustments to an interview.

If you are a client or a client contact, we hold your name, job title, organisation, contact details, the details of roles you brief us on, and records of our communications and agreements.

If you visit this website, we collect the information you enter in our forms and, only if you accept analytics cookies, information about how you use the site. See our Cookie policy.

3. Where we get it from

Most information comes from you: when you register, apply for a role, send a brief, or speak to us. We may also obtain information from:

• publicly available professional sources, such as professional networking profiles and company websites, when we identify people who may be suitable for a role (we do not search personal social media);
• people who refer or recommend you;
• clients who give feedback on candidates they have interviewed;
• referees you have nominated.

If we obtain your information from someone other than you, we will tell you within one month, or when we first contact you if that is sooner, and point you to this notice.

4. Why we use it, and our lawful basis

I keep candidate details on the basis of legitimate interests, so I can contact you about suitable roles in future. You can object at any time.

Job alerts are only sent with your consent, and every email has an unsubscribe link.

Where we rely on legitimate interests, we have balanced our interests against yours and concluded that the use is necessary and reasonably expected. You can ask for a copy of that assessment.

We do not make decisions about you using solely automated processing.

5. Who we share it with

Clients. We only send your CV or details to a client with your prior agreement, for a specific role. We do not disclose your information to your current employer without your consent.

Service providers who process information on our behalf, under contract:

• Lead Logic, built on HighLevel (HighLevel Inc and LeadConnector LLC, United States): our client and candidate management system and email;
• Supabase (Supabase Pte. Ltd): secure storage for CVs uploaded through this website, held in a UK data centre;
• Lovable (Lovable Labs), with delivery and security through Cloudflare, Inc. (United States): hosting this website;
• Microsoft: business email (Microsoft 365);
• Google: website analytics, if you consent;
• our accountants and professional advisers, where needed.

We may also share information where the law requires it, or to establish or defend legal claims. We never sell personal information.

6. Sending information outside the UK

Evolve works with clients in the UK, the United Arab Emirates, Saudi Arabia, Jordan, the United States and elsewhere. If you agree to be put forward for a role with a client outside the UK, we will send your details to that client.

The UK has adequacy regulations for some countries, meaning it treats their protection as not materially lower than the UK's. The UAE, Saudi Arabia and Jordan are not covered. The United States is covered only for organisations certified to the UK Extension of the EU-US Data Privacy Framework.

When we send your information to a country without adequacy regulations, we will either:

• put an appropriate safeguard in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, after checking that the protection will not be materially lower than in the UK; or
• where that is not possible, rely on the transfer being necessary for a contract made in your interest, or ask for your explicit consent after explaining who will receive your information, where, why, and the possible risks (for example, that the recipient country may not give you the same rights or remedies as the UK).

Some of our service providers are based outside the UK. HighLevel, Cloudflare, Google and Microsoft are certified to the UK Extension of the EU-US Data Privacy Framework. For Supabase and Lovable, which are not, we rely on the UK Addendum to the EU standard contractual clauses in their data processing agreements. You can ask us for a copy of the safeguards we rely on.

7. How long I keep your information

Candidates: I review your record five years after we last had two-way contact (a conversation, application, reply or update from you). I'll check in every two years so you can update or remove your details. If there's no contact by the review, I delete your record unless I have a lawful reason to keep it, such as a legal claim.

Interview notes on applications that don't go ahead: 12 months.

Client contracts and invoices: six years.

Client enquiries that don't become work: two years.

I don't keep health information, diversity data or ID documents. If you send them, I delete them.

Some agency records must be kept for at least one year by law.

8. Your rights

You can ask me to see, correct or delete your information at any time. Where I rely on legitimate interests, you can object, and I'll delete your details unless I have a legal reason not to.

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to our use of it, including for marketing (we will always stop direct marketing if you ask);
• ask us to transfer information you gave us to another organisation, where processing is based on consent or contract;
• withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

To use any of these rights, contact blair@evolvepartners.co.uk. We will respond within one month. There is normally no charge.

9. Complaints

If you're unhappy with how I've handled your data, contact me first. You can also complain to the Information Commission at ico.org.uk.

10. Changes to this notice

We will update this notice when the way we use personal information changes. The date at the top shows when it was last updated.