Candidate privacy notice.
How Mosi Brown Consulting collects, uses and protects your personal data when you register with us as a candidate. It applies alongside the Candidate Registration Form and should be read together with it.
Last updated 14 September 2026
Who we are
Mosi Brown Consulting is the data controller for the personal data described in this notice. If you have a question about how we handle your data, or want to exercise any of the rights set out below, contact us at mosi@mosibrown.com.
What we collect and why
Below are the categories of data we collect, what we use each for, and the legal basis we rely on for that specific use.
- Data we collect
- Name, address, phone, email
- Why we use it
- To register you, assess suitability and contact you about roles
- Legal basis
- Legitimate interests
- Data we collect
- Work history, right-to-work status
- Why we use it
- To match you to suitable roles and meet our record-keeping duties as an employment agency and business
- Legal basis
- Legitimate interests; legal obligation
- Data we collect
- National Insurance number (PAYE candidates only)
- Why we use it
- To process payroll correctly where applicable
- Legal basis
- Legal obligation
- Data we collect
- Limited company and contracting details
- Why we use it
- To engage and invoice you correctly as a contractor
- Legal basis
- Necessary for our contract with you
- Data we collect
- Referee names and contact details
- Why we use it
- To verify your employment history and suitability
- Legal basis
- Legitimate interests; your authorisation to make contact
- Data we collect
- Records of your registration and engagement type
- Why we use it
- To maintain accurate records of the services we provide to you
- Legal basis
- Legal obligation (Conduct of Employment Agencies and Employment Businesses Regulations 2003)
Who we share it with
We share your details with a Hirer client only once we have discussed the specific opportunity with you. We do not send your CV or profile to a client speculatively, and we do not sell your data to any third party.
Where a referee agrees, separately and directly, to a conversation with us about working together in future, that conversation and any resulting contact details are held as a business contact of ours, not as part of your candidate record.
How long we keep it
- Registered candidate data
- Retained for 24 months from your last meaningful contact with us: an application, a conversation, or a submission to a client. After that we will either delete your record or ask whether you would like us to keep it active.
- Reference data
- Retained only for as long as the candidate record it supports remains active, and deleted on the same basis.
- Placement-related commercial records
- Contracts, invoices and assignment paperwork are retained for 6 years, in line with standard UK business record-keeping practice.
Where your data is stored
We use Zoho to manage candidate records, hosted within the EU (Amsterdam and/or Dublin). Transfers of personal data from the UK to the EEA are covered by UK adequacy regulations, so no additional safeguards are required for this storage arrangement.
Your rights
You have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Ask us to delete your data
- Restrict or object to how we use your data
- Withdraw consent at any time, where we rely on consent (for example, the reference contact)
You can also complain to the Information Commissioner’s Office if you are unhappy with how we have handled your data, at ico.org.uk or on 0303 123 1113.
Automated decision-making
We do not use automated decision-making or profiling to make decisions about you.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised.
Questions about your data?
Email us and we will respond within one month, as required under UK GDPR.
mosi@mosibrown.com