Privacy Policy

Who we are

Registered in England & Wales as Relcanto Ltd, company no. 17163104. Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE. You can reach us at info@relcanto.com.

The information we collect

• Contact and enquiry details you give us — name, work email address, telephone number, job title, company name and the content of your message.
• Readiness Check submissions — your answers, the generated score and report, and the contact details you provide so we can send or discuss the report.
• Recruitment information — your CV, work history, right-to-work and availability details, and any information you share during the application process.
• Technical and usage data — IP address, device and browser type, and pages visited, collected through our analytics and hosting providers.

How we use it and our lawful bases

• To respond to enquiries, deliver reports and provide our services — legitimate interests, or performance of a contract where we are working with you.
• To contact you about services related to your enquiry or readiness result — legitimate interests in business-to-business marketing, which you can object to at any time.
• To assess applications and place candidates — legitimate interests and, where needed, consent.
• To meet legal, accounting and regulatory obligations — legal obligation.
• To measure and improve site performance — legitimate interests in running our website.

We do not sell personal data and we do not use it to make automated decisions that produce legal or similarly significant effects.

Who we share it with

We share personal data only with service providers who help us operate, under written contracts that require them to protect it: our website and database hosting providers, our CRM (HubSpot), our email delivery provider, analytics (Google Analytics), and the AI provider that drafts the narrative in your readiness report. Where a provider processes data outside the UK, transfers are covered by UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses. We may also disclose information where required by law, or to clients when you have asked us to put you forward for a role.

How long we keep it

• Enquiries and readiness submissions: up to 24 months from your last contact with us.
• Candidate records and CVs: up to 24 months from your last contact, unless you ask us to remove them sooner.
• Client engagement and financial records: 6 years, to meet legal and accounting obligations.

Cookies and analytics

We use a small number of cookies that are necessary for the site to function, plus Google Analytics to understand how the site is used. You can block or delete cookies in your browser settings; the site will continue to work without the analytics cookies.

How we protect your information

As a security consultancy we apply the controls we recommend to others: access to personal data is restricted to those who need it, data is encrypted in transit and at rest with our hosting providers, uploads such as CVs are stored in access-controlled storage, and access is reviewed regularly.

Your rights

You have the right to access a copy of your data, to have inaccurate data corrected, to ask for erasure or restriction, to object to processing based on legitimate interests (including marketing), to data portability, and to withdraw consent where we rely on it. To exercise any of these, email info@relcanto.com. We respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it with you first.

Changes to this policy

We review this policy periodically and will update the date above when we change it. Questions about anything here are welcome — please get in touch.