Data Protection & GDPR

Source of Hire Recruitment is a specialist recruitment agency committed to protecting your personal data in accordance with the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), the UK Data Protection Act 2018 and UK GDPR, the EU General Data Protection Regulation (GDPR), applicable US state privacy laws (including the CCPA/CPRA), and other international data protection laws.

As a recruitment agency operating across Australia, the United States, and the United Kingdom, we act as both a data controller (for our own processing activities) and a data processor (when processing candidate and employer data on behalf of our clients).

We process your personal data based on one or more of the following legal grounds:

Contract: Processing necessary to perform our recruitment services, including matching candidates with engineering, tech, law, and accounting roles
Consent: Where you have given explicit consent, such as receiving job alerts, salary guides, or career advice
Legitimate interests: For our talent acquisition and staffing operations where your rights are not overridden
Legal obligation: Where required by law in Australia, the US, or the UK

As a recruitment agency specialising in engineering, technology, law, and accounting, we collect and process personal data including:

Identity data: Name, username, title
Contact data: Email address, phone number, address
Professional data: CV, work history, qualifications, skills, industry experience
Employment data: Current and desired roles, salary expectations, work eligibility
Technical data: IP address, browser type, device information
Usage data: How you use our recruitment platform and services
Marketing data: Your preferences for receiving job alerts, career advice, and market insights

We implement appropriate technical and organizational measures including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection
• Incident response procedures
• Data minimization practices

We retain personal data only as long as necessary for the purposes collected:

Active accounts: Candidate and employer data retained while account is active on our recruitment platform
Inactive accounts: Deleted after 24 months of inactivity
Job applications: Application data for engineering, tech, law, and accounting roles retained for 12 months after application
Recruitment records: Placement records, interview notes, and hiring outcomes retained as required for our staffing services
Legal requirements: Some data retained longer if required by law

Source of Hire Recruitment operates across Australia, the United States, and the United Kingdom. Your data may be transferred between our offices and to countries where our clients and candidates are located. When this happens, we ensure adequate protection through:

• Compliance with the Australian Privacy Act 1988 cross-border disclosure requirements
• Standard contractual clauses for transfers involving EU/EEA and UK data
• Compliance with applicable US state privacy laws for cross-border transfers
• Adequacy decisions where applicable
• Appropriate safeguards as required by the relevant data protection authority in each jurisdiction

To exercise any of your GDPR rights, you can:

• Update your preferences in your account settings
• Email our Data Protection Officer at dpo@sohrecruitment.com
• Write to us at our registered address

We will respond to your request within one month. This may be extended by two months for complex requests.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the relevant data protection authority:

Australia — Office of the Australian Information Commissioner (OAIC)
Website: oaic.gov.au
Phone: 1300 363 992

EU/EEA — Your local data protection authority
A full list is available at edpb.europa.eu

UK — Information Commissioner's Office (ICO)
Website: ico.org.uk

If you have any concerns about how Source of Hire Recruitment handles your personal data as part of our recruitment, staffing, or talent acquisition services, our Data Protection Officer can be contacted at:

Email: dpo@sohrecruitment.com