Legal
Privacy Statement
How we collect, use and protect the personal data of candidates, clients and website visitors.
Last updated 9 October 2026
Who we are
Evergreen Talent Group is a trading name of Evergreen Talent Ltd., registered under company number 803976, with its registered office at Dublin, Ireland. We are the controller of the personal data described here.
This statement covers candidates, clients and prospective clients, and anyone who contacts us or uses this website. Questions about it, or about your data: privacy@evergreentalentgroup.com or Dublin, Ireland.
What we collect
Candidates: your name, contact details, CV, work history, qualifications, the roles you are interested in, and right-to-work information when a role requires it.
Clients and prospective clients: the names, job titles and contact details of the people we work with.
Website: what you send us through our forms (contact, CV registration, job applications and job alerts).
We collect only the information reasonably needed for recruitment and related services. We get it from you, or from lawful professional and public sources such as professional networking sites.
We do not ask for special-category information (such as health or ethnic origin) or information about criminal convictions unless a role or the law requires it. When we do, an additional legal condition must apply, and we protect it with extra safeguards.
Why we use it, and our legal basis
To find you suitable roles and put you forward for them (steps you ask us to take before a contract, and our legitimate interests).
To send you job alerts you signed up for (consent, which you can withdraw at any time).
To check right to work where a role requires it (legal obligation).
To reply to enquiries and deliver our services to clients (legitimate interests and contract).
Where we rely on your consent, it must be freely given, and you can withdraw it at any time.
Technology and AI
Technology supports our consultants' judgement; it does not replace it. We do not make decisions about you based solely on automated processing, including AI, that have legal or similarly significant effects, unless the law allows it and every required safeguard is in place. Before we use a new system or AI tool with personal data, we assess it, and where the risk is likely to be high we complete a data protection impact assessment first.
Who we share it with
We only send your CV to a client with your agreement for that role, and only for a genuine recruitment purpose.
We use trusted service providers who process data for us. Each is checked first and bound by contract: JobAdder, GoDaddy and Microsoft (Microsoft 365, through GoDaddy).
If personal data is transferred outside the European Economic Area, we use a transfer mechanism approved under GDPR, such as the European Commission's standard contractual clauses, with appropriate safeguards.
How we protect it
Your data is held only in approved systems, protected by access controls, multi-factor authentication where available and other technical safeguards. Only the people who need it for their work can see it, and it is never put into unapproved cloud storage or unauthorised AI tools.
How long we keep it
Candidate records: 7 years.
Client contact records: 4 years.
Website enquiries: 2 years, then they are deleted automatically.
Job alerts: until you unsubscribe; we ask every 12 months whether to keep yours, and delete it if you don't answer within 30 days.
Staff sign-in to the website's admin area: the email and internet address typed at each sign-in attempt, for 24 hours (to stop password guessing); and a change log of what staff did, which can include a staff member's name, email and sign-in address, for 2 years.
After that, we delete it securely or anonymise it. We correct known errors promptly: please tell us if your details change.
Your rights
You can ask to see, correct or delete your data, to restrict or object to how we use it, to receive it in a portable format, and to ask about any automated decision. Where we rely on consent, you can withdraw it at any time. Our GDPR statement explains how to make a request.
Cookies
Our cookie policy explains what this website stores on your device and how you stay in control.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Data Protection Commission in Ireland, or, if you live in the UK, to the Information Commissioner's Office.
Data Protection Commission Information Commissioner's Office
Changes to this statement
We review this statement at least once a year, and whenever the law, our systems or the way we use personal data change. The date at the top shows when it last changed.