Skip to content
Gateway Recruitment
01733 612615

Privacy Policy

How we collect, use, and protect your personal data when you use the Gateway Recruitment website.

This Privacy Policy explains how Gateway Recruitment Ltd (trading as Gateway Recruitment) collects, uses, and protects your personal data when you visit recruitmentgateway.uk or submit an enquiry through our website. We've written it in plain language — no unnecessary jargon.

If you have any questions, contact us at admin@recruitmentgateway.uk or by phone on 01733 612615.

1. Who we are

Data Controller: Gateway Recruitment Ltd
Company number: 13167469 (registered in England and Wales)
Registered office: Stuart House, St Johns Street, Peterborough, PE1 5DD
Phone: 01733 612615
Email: admin@recruitmentgateway.uk

We are responsible for deciding how and why your personal data is used when you interact with this website.

2. What data we collect and why

Contact form enquiries

When you submit our contact form, we collect:

  • First name — required, so we know who we're talking to
  • Last name — required, for the same reason
  • Email address — required, so we can respond by email
  • Phone number — optional, so we can call you back if you'd prefer
  • Message — required, to understand what you need

Legal basis: Legitimate interest (responding to a business enquiry you've initiated) and your explicit consent, given by ticking the consent checkbox on the form.

Spam protection (honeypot)

Our forms include an invisible "honeypot" field. It's hidden from human users and only filled in by automated bots. It captures no personal data — it simply helps us filter out spam submissions before they reach us.

Infrastructure and security

This website is hosted on Cloudflare, which provides our content delivery network (CDN), DNS, and DDoS protection. As part of standard internet infrastructure, Cloudflare may process your IP address when routing requests to our site. See Cloudflare's Privacy Policy for details.

Our forms are protected by Cloudflare Turnstile, a privacy-friendly bot detection tool. Turnstile runs invisibly in the background and may set a strictly necessary security cookie (cf_clearance) to verify that submissions come from real people. This cookie is essential for the form to function securely and cannot be opted out of. Unlike Google reCAPTCHA, Turnstile does not track you across the web.

3. Third-party services

Below are the third-party services involved when you use this website. We've described what each does and what data (if any) it touches.

Resend (email delivery)

When you submit a form, we use Resend to deliver the resulting email notification to admin@recruitmentgateway.uk. Resend processes the form contents (your name, contact details, and message) on our behalf as a transactional email provider. Resend is a US-based company; data may be transferred outside the UK/EEA. We rely on appropriate safeguards (Standard Contractual Clauses and the UK-US Data Bridge / EU-US Data Privacy Framework) to protect your data during international transfer. See Resend's Privacy Policy.

Cloudflare (hosting and security)

Hosts this website and provides CDN, DNS, and bot protection. May process your IP address as part of normal HTTP request routing. See Cloudflare's Privacy Policy.

Google Maps (click-to-load on the Contact page)

Our Contact page includes an option to view a Google Map showing the location of our Peterborough office. The map does not load automatically. We use a click-to-load facade: until you press the "Show interactive map" button, no request is made to Google and no Google cookies are set. If you choose to load the map, Google receives your IP address and may set its own cookies on Google's domain in line with Google's standard map embed behaviour. We do not have control over what Google collects in that context. For details of what Google collects, see Google's Privacy Policy.

Sanity CMS

We use Sanity as our content management system for the blog. Article content and images are served from cdn.sanity.io. Sanity does not collect or process any visitor data — it simply delivers content to your browser.

4. Cookies

We keep cookie use to a minimum. Here's a complete picture:

  • Cloudflare Turnstile (cf_clearance) — Strictly necessary. Set when our forms verify you're a human, not a bot. Cannot be disabled without breaking form security.
  • Google Maps — Third-party, click-to-load only. The map on our Contact page only loads after you click the "Show interactive map" button. If you do, Google may set its own cookies on Google's domain. These are Google's own cookies, not ours, and are governed by Google's privacy policy. If you don't click the button, no Google cookies are set.
  • Analytics — None. We do not run any analytics tool that sets cookies or tracks individual visitors.
  • Marketing/tracking — None. We do not use advertising cookies, remarketing pixels, or behavioural tracking.

Because we only use one strictly necessary cookie of our own (Turnstile), with no analytics or marketing cookies, we do not display a cookie consent banner. The Google Maps cookies on the Contact page are only set if you click "Show interactive map" to load it, and you can manage them through your browser settings.

For full details, see our Cookie Policy.

5. International data transfers

Some of the third-party services we use may store or process data outside the UK or European Economic Area (EEA):

  • Resend — a US-based email delivery service. We rely on Standard Contractual Clauses and the UK-US Data Bridge / EU-US Data Privacy Framework for adequate safeguards.
  • Cloudflare — a US-based company with global infrastructure. Cloudflare participates in the UK-US Data Bridge and EU-US Data Privacy Framework, providing adequate safeguards for international transfers.
  • Google — if you choose to load the Contact page map, your request goes to Google's global infrastructure. Google participates in the UK-US Data Bridge and EU-US Data Privacy Framework.

Where data is transferred internationally, we ensure appropriate safeguards are in place in line with UK GDPR requirements.

6. How long we keep your data

Form submissions are delivered to our inbox and held in our email system for as long as we need them to respond to and follow up on your enquiry, plus a reasonable period to handle any subsequent questions or repeat business. Records that become part of a contractual relationship are kept for the period required by UK accounting and tax law (typically six years).

If you'd like your data deleted, contact us at admin@recruitmentgateway.uk and we'll remove it from our records (subject to any legal retention requirements).

7. Your rights under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access — You can ask us what personal data we hold about you.
  • Right to rectification — You can ask us to correct inaccurate data.
  • Right to erasure — You can ask us to delete your data ("the right to be forgotten").
  • Right to restriction — You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability — You can ask for your data in a machine-readable format.
  • Right to object — You can object to processing based on legitimate interests.
  • Right to withdraw consent — Where we process data based on your consent, you can withdraw it at any time without affecting anything done before withdrawal.

To exercise any of these rights, contact us at admin@recruitmentgateway.uk. We'll respond within one calendar month.

8. Right to complain

If you're unhappy with how we've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's supervisory authority for data protection:

We'd always prefer to resolve concerns directly first — please do get in touch with us before escalating to the ICO.

9. Children's privacy

This website is not directed at children under the age of 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data through our site, please contact us and we'll delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time — for example, if we change the services we use or if the law changes. The "last updated" date at the bottom of this page will always reflect the most recent version. Continued use of the website after changes take effect constitutes acceptance of the updated policy.

11. Contact us

For any questions about this Privacy Policy or how we handle your data:

Last updated: 13 May 2026