Last updated: 21 January 2026

At ELE Recruitment (Ella Elliott trading as ELE Recruitment), we are committed to protecting your personal data and complying with UK data protection law, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). This policy explains how we collect, use, store, and protect personal data, as well as your rights regarding your information.

Business name: Ella Elliott trading as ELE Recruitment
Registered address: Building 1, Chalfont Park, Chalfont St Peter, Gerrards Cross SL9 0BG
Email: ella@virtuella.info
ICO Registration: Yes

We act as a data controller for the personal data we collect.

We may collect the following types of personal data from:

• Job seekers / candidates: Name, contact details, employment history, qualifications, CVs, references, and other recruitment-related information.
   
• Clients / employers: Name, contact details, company details, contractual and billing information.
   
• Staff / contractors: Name, contact information, payroll, tax, and employment records.
   

We may also process sensitive personal data (special category data), such as information about health, racial or ethnic origin, or criminal convictions, where necessary for recruitment or legal obligations.

We use personal data for lawful purposes, including:

• Managing recruitment processes and client relationships
   
• Facilitating job applications and introductions to potential employers
   
• Payroll, HR, and administrative purposes
   
• Complying with legal obligations, such as right-to-work checks
   
• Marketing and communications (with consent where required)
   

We will only process personal data when we have a legal basis under the UK GDPR, such as:

• Your consent
   
• Performance of a contract
   
• Compliance with a legal obligation
   
• Protection of vital interests
   
• Legitimate interests pursued by us or a third party (where not overridden by your rights)
   

• Personal data is stored securely using appropriate technical and organisational measures.
   
• Data is only kept for as long as necessary for the purpose it was collected or as required by law.
   
• We protect personal data from unauthorised access, accidental loss, disclosure, or destruction.
   
• Access is restricted to authorised staff, contractors, and service providers who need it for legitimate purposes.
   

We may share personal data with:

• Clients or employers for recruitment purposes
   
• Service providers supporting our operations (e.g., payroll, IT, CRM systems)
   
• Legal or regulatory authorities when required by law
   

We will always ensure that data is shared securely and only when we have a lawful basis for doing so.

Under UK GDPR, you have the right to:

1. Access your personal data (Subject Access Request)
    
2. Correct inaccurate or incomplete data
    
3. Delete your data (“right to be forgotten”), subject to legal obligations
    
4. Restrict processing in certain circumstances
    
5. Object to processing based on legitimate interests or for direct marketing
    
6. Data portability: receive your personal data in a structured, machine-readable format
    
7. Withdraw consent at any time where processing is based on consent
    
8. Lodge a complaint with the ICO if you believe we are not complying with data protection law
    

Requests can be made in writing to ella@virtuella.info. We aim to respond within one month, or up to three months in complex cases.

We incorporate privacy and data protection principles into all processes and systems, including:

• Minimising the personal data we collect
   
• Encrypting and protecting sensitive data
   
• Regularly reviewing how we handle and store personal data
   

We do not make decisions about individuals using automated processing that would have a legal or similarly significant effect, except where required to perform a contract, comply with a legal obligation, or where you have given explicit consent. We do not profile children.

• We have procedures to detect, report, and investigate personal data breaches.
   
• If a breach is likely to result in risk to your rights and freedoms, we will notify the ICO and, where appropriate, affected individuals without undue delay.
   

We may update this policy from time to time. The effective date will be updated at the top of the document. Please review this page periodically to stay informed.

For any questions, concerns, or to exercise your data protection rights, contact:

Ella Elliott
Email: ella@virtuella.info
Address: Building 1, Chalfont Park, Chalfont St Peter, Gerrards Cross SL9 0BG

You also have the right to contact the Information Commissioner’s Office (ICO):

• https://ico.org.uk/global/contact-us/email/