This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights, you have over your data.

For additional information on this privacy policy, please contact us

Paul Marwick and David Robertson
Office 7, Liberty House, 15 Cromarty Campus, Rosyth, KY11 2YB

We are not required to have a data protection officer; any question should be addressed to the contacts above.

The type of personal information we collect
You will provide information by uploading your CV to our website. We may also gather information by phone, e¬mail or social media. The information you give us may include (but not be limited to) your name, address, e¬mail address and phone number, personal description, professional skills, employment history, qualifications, and photographs.

Regarding each of your visits to our site we may automatically collect the following information:

  • Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type, and version, time zone setting, browser plug¬in types and versions, operating system, and platform
  • Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time) ; products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse¬overs). We also collect information on the methods used to browse away from the page and any phone number used to call our customer service number

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data using security measures like the use of an SSL certificate, we cannot guarantee the security of your data transmitted to our site and any transmission is at your own risk.

How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you.

We also receive personal information indirectly, from
1. External CV Databases
a) As part of our service, we may obtain your personal details and CV from several different job boards or CV databases that we subscribe to.
b) We will contact you to confirm details of the information and gain your consent prior to passing on your CV and details to potential employers.

2. Social Media
a) As part of our service, we may obtain your personal details and CV from employment-oriented online services e.g., LinkedIn
b) We will contact you to confirm details of the information and gain your consent prior to passing on your CV and details to potential employers.

The reason we collect this information.
We use these details to match the client vacancies we have against suitable candidates.

How we store your personal information
Your information is securely stored on a GDPR compliant Client Relationship Manager (CRM) System.

How long we keep your information for
We keep Personal information, CVs, and cover letters for 24 months.
Employer/client-related personal details: For the length of our relationship with you plus 6 years (Limitation Act (1980) in case the case where there may be a dispute. Some information may be required to be retained longer due to legal obligations (e.g., HRMC).
We will then dispose of your information by deleting it from our systems and server.

Protection of your personal data
Once we have received your information, we will use strict procedures and security features to try to protect your data.

Disclosure of your information
We may share your information with clients under contract with Oliver Owen Ltd for the purpose of sourcing job opportunities. If Oliver Owen Ltd or substantially all its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

Data Processing
By submitting your personal data, you agree that this will be processed by staff in accordance with legitimate business use in relation to recruitment.

Automated processing and profiling
Personal data may be matched against vacancies to provide relevance to you in the form of job alerts.
No decisions are made of a candidate's suitability for a role solely through automated processing.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
Your consent

  • You can remove your consent at any time
  • You can do this by contacting
  • We may process your data based on consent (such as special category data), or the sending of promotional or marketing material not related to job opportunities or where there is a facility to link to your social network
  • as outlined in Article 6 (1) a

We have a contractual obligation

  • It may be necessary for us to process your data to fulfil a contract with you such as sending your CV and details to an employer for a particular role you have applied for or are interested in
  • In the case of a client, we may need to process your personal data for the purpose of fulfilling our contractual obligation as outlined in Article 6 (1) b

We have a legal obligation

  • When we are obliged to process the personal data to comply with the law as outlined in Article 6 (1) c

We have a vital interest

  • When processing is necessary to protect the vital interest of the data subject or of another natural person as outlined in Article 6 (1) d

We need it to perform a public task

  • Where the processing is necessary for the performance of a task conducted in the public interest or exercise of official authority vested in the controller as outlined in Article 6 (1) e

We have a legitimate interest

  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, where the data subject is a child as outlined in Article 6 (1) f

Your data protection rights; Under data protection law, you have rights including:
1. Your right of access

  • You have the right to ask us for copies of your personal information.

2. Your right to rectification

  • You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

3. Your right to erasure

  • You have the right to ask us to erase your personal information in certain circumstances.

4. Your right to restriction of processing

  • You have the right to ask us to restrict the processing of your personal information in certain circumstances.

5. Your right to object to processing

  • You have the right to object to the processing of your personal information in certain circumstances

6. Your right to data portability

  • You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

7. You are not required to pay any charge for exercising your rights

  • If you make a request, we have one month to respond to you.

8. Please contact us at if you wish to make a request.

We will communicate with you by email, post, telephone for the purposes of delivering our services to you. The legal purpose for which is under the legitimate interest provision under both GDPR and the Privacy and Electronic Communications Regulations (PECR).
For emails and alerts from us, you can stop receiving these by emailing and requesting to unsubscribe.

Changes to this privacy notice from time to time, we may need to make changes to this notice. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e¬mail. Please check back frequently to see any updates or changes to our privacy policy. This privacy notice was last updated on the 06th of February 2022.

If you have a complaint about our use of your information you can do so with the relevant supervisory authority within the EU to which you are a resident, who may refer the complaint to the UK supervisory authority.
Complaints in the UK can be made to the Information Commissioner's Office via their website at or write to them at:
Information Commissioner's Office - Scotland: Queen Elizabeth House, Sibbald Walk, Edinburgh EH8 8FT. Tel 0303 123115. Email