Privacy Policy

1. Introduction

CM Law Recruitment Limited ("we", "our", "us") is a specialist recruitment agency providing staffing and career services to law firms and legal professionals in London.

We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

For the purposes of data protection laws, CM Law Recruitment Limited is the Data Controller of the personal data we process.

3. What Information We Collect

We may collect and process the following types of personal information:

4. How We Use Your Information

We use your personal data to:

• Match candidates with suitable job opportunities
• Provide recruitment and placement services
• Communicate with you about roles, applications, or recruitment needs
• Maintain business relationships with clients and candidates
• Comply with legal and regulatory obligations
• Improve our website and recruitment processes

5. Lawful Basis for Processing

We process your personal data based on:

• Consent – when you register with us or submit your CV
• Contractual necessity – to provide recruitment services to you or your employer
• Legal obligations – to verify right-to-work or comply with employment laws
• Legitimate interests – to maintain business relationships and operate effectively as a recruitment agency

6. How We Store and Protect Your Data

We store data securely using encrypted systems and access controls to prevent unauthorized use, disclosure, or loss. Personal data is only accessible to authorized staff and retained only as long as necessary for recruitment or legal purposes.

7. Sharing Your Information

We may share your data with:

• Prospective employers (law firms) when submitting job applications
• Third-party service providers (e.g., cloud hosting, CRM, payroll, or background checks)
• Regulatory bodies or law enforcement, where legally required

We do not sell or rent your personal information to third parties.

8. Data Retention

We keep your data for as long as necessary to provide recruitment services or comply with legal obligations. If you are a candidate, we may retain your CV and contact details for up to 5 years from our last interaction, unless you request deletion sooner.

9. Your Data Protection Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data ("right to be forgotten")
• Withdraw consent at any time
• Object to or restrict processing of your data
• Request data portability

To exercise these rights, please contact us at colin@cmlawrec.co.uk. We aim to respond to all requests within one month.

10. Cookies and Website Analytics

Our website uses cookies to enhance user experience and analyse traffic. We use:

• Google Analytics - To understand how visitors use our website and improve our services
• Microsoft Clarity - To record user sessions and create heatmaps showing how visitors interact with our site

These analytics tools collect anonymised data including IP addresses (anonymised), pages visited, time spent on site, and user interactions. Microsoft Clarity may record session replays to help us identify usability issues and improve the user experience.

Data Processing: Both Google Analytics and Microsoft Clarity process data on servers located in the EU/UK and USA. Microsoft provides a Data Processing Agreement (DPA) that complies with UK GDPR requirements.

You can control or disable cookies through your browser settings at any time. For more information, please see our Cookie Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted on our website with an updated "Last Updated" date.

12. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or your data, please contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): https://ico.org.uk/