UK
This privacy policy governs the collection, storage and use of personal information collected by Goodman Masson Limited a company incorporated in England and Wales with registered company number 02769447 and registered offices located at 120 Aldersgate Street, London, EC1A 4JQ (“Goodman Masson”, “we” or “us”). The way in which we collect your data will depend on how it comes into our organisation. This will be
where “you” are a candidate, consultant, client contact or contact at any other organisation involved in the introduction and/or supply of a candidate’s or consultant’s services, such as a contact at a recruitment process outsourcing company, consultancy company, personal service company or umbrella company.
References in this policy to:
Specifically, this privacy policy provides you with details about the personal information we collect and hold about you, how we use your personal information, and your rights regarding your personal information.
It does not cover any use of your personal information by:
to whom we provide your personal information as part of the recruitment or consultancy process. That use will be governed by the relevant employer’s or hirer’s privacy policy.
Please read this privacy policy carefully.
We respect your right to privacy. Our overall aim is to ensure that our collection and use of personal information is appropriate to the provision of services to you and is in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, each as amended from time to time (including by the Data (Use and Access) Act 2025). The Information Commissioner's Office (ICO) is our supervisory authority.
Further details of how we do so are set out in each section of our privacy policy as follows:
We provide recruitment and consultancy services to candidates and consultants to help them find roles, specialising in financial services, compliance, accountancy, actuarial, banking, tax, cyber and technology. We do this through assessing and matching people with potential opportunities.
We work with clients to provide recruitment and recruitment process outsourcing services to help them fill requirements for specialist skills and consultancy.
Candidates and Consultants: the personal information we collect about you where “you” are a candidate or placed consultant.
Goodman Masson aims to collect the minimum data it needs to perform its role. Typically, this is name, address, job title and contact details. In addition, if you are a candidate or consultant being considered for a role it will also include your CV / resume as well as other details about your skills and experience.
When:
Where needed we will collect the following information from or about you:
You can update your CV or personal data at any time by forwarding a copy to cv@goodmanmasson.com
Referees and emergency contacts: the personal information we collect about you where “you” are a referee or emergency contact. We collect basic contact details (such as name, title, address, email and telephone number) so that we can contact you for a reference or as an emergency contact for one of our candidates/consultants.
Client contacts: tthe personal information we collect about you where “you” are a contact at one of our clients or at an MSP, umbrella company or personal service company involved in the supply of a person’s services to a hirer.
When:
We need to collect information about you as an essential part of providing our Services.
We will usually collect the following information from or about you:
where “you” are a client contact:
In some cases we regard you as both a candidate and a client contact. Where this is the case please read the sections below relating to candidates and client contacts and how we will use your personal information.
Candidates and consultants:
We collect, store and use information that we obtain in relation to you for our legitimate interests:
This storage and use of your personal information allows you to be contacted about roles which we think will be of interest to you, now or in the future, and we do not believe that this storage and use will unduly prejudice your rights or freedoms.
We will store and use your personal information in order to comply with relevant legal obligations to which Goodman Masson is subject, including carrying out:
In other, relatively limited circumstances, we will carry out further relevant background checks as requested by our client. In these circumstances we will be acting on behalf of our client and the handling of your personal data will be governed by the client’s privacy policy.
Where you are successful in securing temporary assignment or consultancy work with one of our clients we will store and use your personal information for the purposes of completing and administering contracts with your chosen personal service company, umbrella company or consultancy company and for processing payment to such company in respect of services you (or your consultancy) have performed for our client. Such processing will be for our legitimate interests so that we can provide Services to you and our client. We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
Such processing will also be necessary for the performance of a contract to which you are party (i.e. your contract with the company with whom you work to provide assignment/consultancy services) and/or in order to take steps prior to you entering into such contract, including contracts we enter into with the client relating to the provision of your services or consultancy services.
If our client requires us to collect, store and use your health data and/or any Disclosure and Barring Checks we will, on our client’s behalf, seek your consent to processing such data. You can withdraw your consent at any time but this may prevent us from being able to deliver our recruitment services to you.
Where we process special category data (such as health information), we do so in reliance on a condition under Article 9 of the UK GDPR, including where processing is necessary for reasons of substantial public interest or where you have given your explicit consent.
Where we process criminal offence data (such as DBS or criminal-records information), we do so in reliance on Article 10 of the UK GDPR together with a condition set out in Schedule 1 to the Data Protection Act 2018. We maintain an Appropriate Policy Document in respect of that processing as required by law.
Where we rely on your consent as the lawful basis for processing your personal data, you may withdraw that consent at any time by contacting us at GDPR@Goodmanmasson.com. Withdrawal of consent will not affect the lawfulness of any processing carried out before such withdrawal.
Client contacts and other third parties involved in the supply of resourcing services (e.g. umbrella companies and personal service companies):
We collect, store and use your name and contact details for our legitimate interests, so that we can:
This allows you to be contacted to receive and administer any Services which you or your organisation has requested.
In the case of contacts at umbrella companies and personal service companies this allows you to be contacted to receive details of current and future assignments, related timesheet data and payment details.
We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
All users of the Site and our Services:
We collect, store and use your personal information for the following purposes:
Sometimes, our use of your personal information is for purposes which are ancillary to the provision of the Site and then Services, or which are desirable in order to make them to operate more effectively. In those circumstances, we believe we have a legitimate interest in handling your personal information, and do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.
In some, relatively limited, circumstances we need to handle your personal information in a certain way to be able to comply with our legal obligations.
We may use technology, including artificial intelligence tools, to help us provide our recruitment services more efficiently - for example, to help match candidates to suitable roles, to prepare candidate summaries and to support our consultants. However, we do not make decisions that produce legal or similarly significant effects concerning you based solely on automated processing. A member of our team always reviews and approves any output before it is acted upon or your details are shared with a client. You have the right to request human intervention, to express your point of view and to contest any decision you believe has been based solely on automated processing, by contacting us at GDPR@goodmanmasson.com.
We collect anonymised details about visitors to our website for the purposes of aggregate statistics or reporting purposes. However, no single individual will be identifiable from the anonymised details we collect for these purposes.
We will disclose information under the following circumstances:
This includes:
These organisations are appointed by Goodman Masson as data processors and authorised to use your personal information only as necessary to provide the relevant services to us. These organisations are required to process such information based on our instructions and in accordance with this privacy policy. They do not have any independent right to share this information.
If we disclose personal data to a prospective purchaser of our business or any part of it we will ensure that your privacy is protected.
Where personal information is shared with clients, hirers, umbrella companies, personal services companies or managed service providers in the circumstances described above, then those organisations will handle your personal information in line with their own privacy policies.
In the course of providing our Services, some of your personal data may be transferred to, stored in or processed in countries outside the United Kingdom by our group companies and our third-party service providers. The countries to which personal data is currently transferred are Germany, France, the United States and Pakistan.
Where a destination country is the subject of UK adequacy regulations (which includes countries in the European Economic Area, such as Germany and France), we transfer your personal data on the basis of those regulations. Transfers of personal data to the United States are made to organisations certified under the UK-US Data Bridge (the UK Extension to the EU-US Data Privacy Framework); where a US recipient is not certified under the UK-US Data Bridge, we put in place the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment.
Where a destination country is not covered by UK adequacy regulations (such as Pakistan), we put in place an appropriate safeguard under Article 46 of the UK GDPR before making the transfer, namely the UK IDTA or the UK Addendum to the EU Standard Contractual Clauses, in each case supported by a transfer risk assessment.
You can ask us for further information about the safeguards we use to protect your personal data when it is transferred outside the UK by contacting us at GDPR@goodmanmasson.com.
We will retain information about you for a period of up to 3 years from the date on which you last received Services from us.
We will delete it after that time except where we need to keep any personal information to comply with our legal obligations, resolve disputes, or enforce our agreements.
Technologies such as cookies, beacons, tags and scripts are used by us and our affiliates, or analytics or service providers. These technologies are used in analysing trends, administering the Site, tracking users’ movements around the Site and to gather demographic information about our user base as a whole. We will receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.
We use cookies, for example, to remember users’ settings (e.g. language preference) and for authentication. Users can control the use of cookies at the individual browser level. If you reject cookies, you can still use our Site, but your ability to use some features or areas of our Site will be limited.
Please read more about how we use cookies and what information is collected using cookies in our cookie policy here https://www.goodmanmasson.com/cookie-policy
Non-essential cookies (including analytics cookies that are not strictly necessary for the operation of the Site) will only be placed on your device with your prior consent. When you first visit the Site, our cookie banner will present you with clear and equally prominent options to accept or reject non-essential cookies. You may change your cookie preferences at any time by accessing the cookie settings link available on the Site. Essential cookies, which are necessary for the basic functioning of the Site, do not require your consent and will be placed automatically.
Your information is held on servers hosted by us or our Internet Services Provider. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
You can contact our data protection team about any privacy matter at GDPR@goodmanmasson.com.
You have certain rights in relation to your personal information. If you would like further information in relation to these or would like to exercise any of them, please contact us at: GDPR@goodmanmasson.com at any time.
You have the right to request that we:
• provide access to any personal information we hold about you;
• update any of your personal information which is out of date or incorrect;
• delete any personal information which we are holding about you;
• restrict the way that we process your personal information;
• prevent the processing of your personal information for direct-marketing purposes;
• provide your personal information to a third party provider of services;
• provide you with a copy of any personal information which we hold about you; or
• consider any valid objections which you have to our use of your personal information.
We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by applicable law). Please note, however, that certain personal information will be exempt from such requests in certain circumstances.
If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
When we receive a subject access request or other request relating to your rights, we may ask you to provide information to confirm your identity or to clarify the scope of your request. In such circumstances, the statutory time limit for responding to your request may be paused until we receive the information requested from you.
You can request to unsubscribe from job alerts and marketing material at any time. If you wish to contact us with respect to the above matters please email us at GDPR@Goodmanmasson.com
This privacy policy was last updated on 3 September 2026.
Please check back regularly to keep informed of updates to this privacy policy. Where we make significant changes to this privacy policy, and we have your email address, we will send you notification of the changes.
Goodman Masson Ltd reserves the right to change this privacy policy as we deem necessary from time to time or as required by law. Any changes will be immediately posted on our Site.
This website contains links to other websites operated by third parties. Please note that this privacy policy applies only to the personal information that we collect through the Site or the Services, and we cannot be responsible for personal information that third parties collect, store and use through their website. You should always read the privacy policy of each website you visit carefully.
Goodman Masson tries to meet the highest standards when collecting and using personal information. We take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.
We take data protection complaints seriously. If you raise a complaint with us, we will acknowledge your complaint, investigate it and inform you of the outcome. We aim to acknowledge complaints within 30 days of receipt. You may complain to us before, or as well as, complaining to the Information Commissioner's Office.
If you wish to complain about this policy or any of the procedures set out in it please contact us at:
Email: Kevin.Raul@goodmanmasson.com
Tel: +44(0)207 336 7711
You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), at any time. You can find details of how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.
