Marcus Donald People Limited
Privacy notice for Clients

Marcus Donald People Ltd is committed to respecting your privacy and providing quality services to you. This notice outlines our ongoing obligations to you in respect of how we manage your personal information.


Who we are?
Marcus Donald People Ltd specialise solely in the Information Technology sector; supplying permanent and contract IT staff across the UK, mainland Europe and the United States of America.

Marcus Donald is a trading name of Marcus Donald People Ltd that is registered in United Kingdom and is registered with the Information Commissioner's Office. The data controller is: Marcus Donald People Ltd.  Marcus Donald will ensure that all the information submitted via its website or through our office is only used for the purposes explained in this privacy notice and is compliant with the General Data Protection Regulation (GDPR).

You can contact us in any of the following ways:
Phone: 0203 328 0400
Post: 41B High Street, Swanley, Kent BR8 8AE


What is personal data?
Personal data is the data that relates to a living individual who can be identified from this data or other information which is in possession of, or is likely to come into the possession of, the data controller. This also includes sensitive personal data which consists of information regarding race or ethnic origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual orientation and criminal records.

Sensitive data will only be used:
– with explicit written consent;
– where it is needed to establish, bring or defend legal claims;
– where needed to carry out our legal obligations relating to employment law, social security law or social protection law; and
– where it is needed to assess working capacity on health grounds, subject to appropriate confidentiality safeguards.

What data do we collect?

  • Name
  • Job role
  • Telephone number
  • E-mail
  • References about candidates or other personnel
  • Information regarding our relationship with you (records of meetings or discussions)
  • Credit rating (if we perform a contract with you)
  • Marketing preferences

Where do we collect your data from?*

  • You
  • Candidates
  • Staff or other members of your organisation
  • Social Media
  • Marketing databases
  • Search engines
  • Conversations- telephone calls, meetings

*This list is not exhaustive

Why we need your data?

  • To collect, store and process it
  • To communicate with you
  • To provide recruitment services to you and to facilitate the recruitment process
  • To market our recruitment services
  • To send information to third parties which relate to our recruitment services
  • To carry out our obligations arising from any contracts entered into between us and the third party you work for
  • To notify you of any changes to our services
  • To provide information to regulatory authorities or statutory bodies
  • From time to time we may seek your consent to process, use or disclose your information for any other purpose not listed above

Our lawful basis to process your data is our legitimate interests, contract, consent and legal obligation.

  1. Legitimate interests– in order to provide our services, the processing of your data is necessary for our legitimate interests. We may use your data for contacting you regarding our services; to assess candidate suitability for job roles (feedback, references, etc.)
  2. Contract– we may enter into a contract with you. Thereby, most of personal data processing will be carried out according to the lawful basis of contract. To do so, certain information is needed from you such as your contact details, credit rating etc.
  3. Consent– in order to process your data for some cases, we may need your consent. Such cases are when you consent to receive direct marketing or to use data for a specific reason, for instance, for reference requesting. You may withdraw your consent at any time.
  4. Legal obligation– in order to provide our services, sometimes we may need to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data to exercise or defend legal claims. It also applies to the business generally when complying with fraud/crime prevention, data protection legislation and co-operating with regulatory authorities such as Information Commissioner’s Office or HMRC.

Third parties:
Where reasonable and practicable to do so, we will collect your personal data only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take responsible steps to ensure that you are made aware of the information provided to us by the third party.

Data transfer:
To provide our recruitment services we may transfer your personal data outside the United Kingdom (UK).  Marcus Donald wants to make sure that your data is stored and transferred in a secure way, therefore we will only transfer your data where it is compliant with data protection legislation in accordance with GDPR. If this is not the case, it is our policy to take steps to identify risks and ensure that appropriate safeguards are in place.

Security of personal data
Your personal data is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure. When your personal data is no longer required for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your personal data.

Maintaining the quality of your personal data
It is important to us that your personal data is up-to-date. We will take reasonable steps to make sure that your personal data is accurate, complete and up-to-date. If you find that the information we have is inaccurate, please advise us as soon possible so we can update our records and ensure we can continue to provide quality services to you.

Data retention:
Your data will be stored for up to 6 years to ensure we have records of service, payments, and other interactions we have with you.

In order to provide our services to you, we use recognised third parties to take payment, manage timesheets, conduct credit reports and other checks, manage our company accounts and provide banking services. We will store transactions, payment and order data for up to 6 years or for as long as required by UK financial and company regulations. These third parties may operate outside the UK, if this is the case we will ensure precautions are in place to protect your data.

Your rights:

  • Right to be informed about the collection and use of your personal data.
  • Right to access your personal data and supplementary information. If you would like to make a request for information, please contact
  • Right to rectification when your data is inaccurate or incomplete. We will respond to such a request within 1 month.
  • Right to erasure where there is no compelling reason for personal data to be further processed. Agencies are required to keep certain records such as ID or right to work checks and payroll records for certain periods of time. These obligations will override any request to erase data or any objection to processing for so long as they must keep the data.
  • Right to restrict processing of your personal data in certain circumstances.
  • Right to data portability when you want to obtain and reuse your personal data across different services.
  • Right to object of your data where that processing is based upon legitimate interest and there are no compelling grounds for the continued processing of that data;
  • Object to our processing of your data where that processing is based upon legitimate interest and there are no compelling grounds for the continued processing of that data; any decision, which significantly affects you, being taken solely by a computer or via another automated process; direct marketing.
  • Withdraw your consent to our processing of your personal data for a particular purpose at any stage. However, please note that we may continue to retain, or use your personal information thereafter where we have a legitimate interest or a legal or contractual obligation to do so. Our processing in that respect will be limited to what is necessary in furtherance of those interests or obligations. Consent can be withdrawn by emailing to
  • Make a complaint or enquiry to our EU Representative.
  • Make a complaint to the Information Commissioner’s Office.

Should you wish your personal data to be removed from our database earlier, please email us on

Changes to our Privacy Notice:
We keep our privacy notice under regular review and may be updated from time to time to reflect changes in our business, or legal or commercial practice. Where an update is relevant to our processing of your data, we shall notify you of the same.

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can complain to us by emailing to: or our EU-Ireland Representative on or the Information Commissioner’s Office (ICO).

Should there be any queries, please do not hesitate to contact us at: or by writing to:
Data Controller
Marcus Donald People Ltd
41B High Street

Should you wish to speak to our EU Representative, please do not hesitate to contact them at: or by writing to:

Adam Brogden
Office 2
K78 X5P8

Quick Drop CV

Scroll to Top