Privacy Notice

Florit Consulting Limited, trading as Florit Legal

Florit Consulting Limited, trading as Florit Legal (“we,” “us,” or “our”) are committed to protecting and respecting your privacy.

Any mention of “our Group” means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purposes of data protection legislation, the data controller is: Florit Consulting Limited (trading as Florit Legal) a company registered in England & Wales with number 11145227.

Registered office: The Mill at Scott Hall, 44 Potternewton Mount, Leeds LS7 2DR.

Our Data Protection Contact is: Wendy Stephenson-Webber (wendy.stephenson-webber@floritlegal.com)

Who we are and what we do

We are a recruitment agency and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003. We specialise in legal, governance and compliance search and recruitment.

In addition to our core recruitment services, we also provide:

Executive coaching and mentoring (through third-party referrals to associates in our network)
Behavioural assessments (via third-party suppliers)
Outplacement advice to candidates

We collect the personal data of the following types of people to allow us to undertake our business:

Prospective, active and placed candidates for permanent or interim roles
Prospective and current client contacts
Supplier contacts to support our services
Employees, consultants, and temporary workers
Professional contacts and industry connections

We collect information about you to carry out our core business and ancillary activities.

Information we collect about you

Information you provide to us

This includes information you give us through our website (https://floritlegal.com), by filling in forms, corresponding with us by telephone, email, or otherwise. This includes information you provide when you:

register your interest as a candidate through the candidate information form on our “Become a Candidate” page;
apply for specific roles we are advertising;
subscribe to our services or marketing communications;
attend our events or webinars;
participate in industry surveys; or
report a problem with our services

The information may include your name, contact details (personal and corporate email addresses and telephone numbers), career information, curriculum vitae, qualifications, professional and career history, photographs, links to your professional profiles (such as LinkedIn), compliance documentation, references verifying your qualifications and experience, your right to work in the United Kingdom, and any additional information relevant to your career or our services.

Information we collect when you visit our website

We automatically collect certain information when you visit our website, including:

Technical information: IP address, browser type and version, operating system
Information about your visit: pages viewed, time spent on pages, clickstream data, and any telephone number used to contact us

Information we collect about you from other sources

We may obtain information about you from publicly available sources including:

LinkedIn
Corporate websites and professional directories
Independent market intelligence databases
Job board websites and online CV libraries
Business cards and personal recommendations
Industry publications

When we collect information about you from these sources before making initial contact, we will provide you with this privacy notice within 30 days.

Information from third-party service providers

We work with various third-party providers who may provide us with information about you, including:

Professional bodies or verification services (for qualification checks, eg The Law Society or SRA)
Behavioural assessment providers that we or our clients may use as part of our recruitment processes
Our network of executive coaching associates (for referral purposes only)
Analytics and search optimisation providers
Other recruitment agencies (for any collaborative search projects)

How we use your information

Legal basis for processing

We process your personal data on the following legal bases:

Performance of a Contract/Service

To provide recruitment services to candidates and clients
To arrange interviews and facilitate placements
To deliver or arrange executive coaching, mentoring and outplacement services

Legitimate Interests

Our legitimate interests include:

Building and maintaining a database of candidates for current and future opportunities
Supporting candidates’ career development and clients’ resourcing needs
Developing and expanding our business in the legal, governance and compliance recruitment sectors
Conducting industry research and market analysis
Ensuring the security and proper functioning of our systems

Consent

We rely on consent for:

Marketing communications (newsletters, market updates, service announcements)
Sharing your details with behavioural assessment providers
Targeted advertising and social media marketing
Industry surveys and research participation

Legal Obligation

We may process your data to comply with legal requirements, including employment law, data protection law, and regulatory obligations.

Specific uses of your information

We use your personal data to:

Match candidates with suitable job opportunities
Provide clients with details of suitable candidates
Arrange interviews and facilitate the recruitment process
Deliver and arrange coaching, mentoring and outplacement services
Maintain our candidate and client databases
Give you information about relevant job opportunities
Provide market insights and industry updates
Conduct business development and networking activities
Manage our website and improve our services
Ensure the security of our systems and data
Comply with legal and regulatory requirements

Automated decision-making

We use automated systems in limited circumstances to improve efficiency:

‘Knock-out’ question filtering: When you apply for roles or register as a candidate, we use automated systems to screen responses to essential requirements (such as specific qualifications, professional certification, or the right to work in the UK). If you do not meet these essential criteria, you will automatically receive an email explaining that you are not suitable for the specific role or to manage your expectations appropriately with regard to whether or not we may be able to assist you with your next career move.
Campaign management: Our outreach and response systems automatically manage communications with candidates and clients (eg acknowledging applications).

A human is always involved in final decision-making regarding candidate suitability for specific roles and client requirements.

Sharing your information

We may share your personal information with:

Clients and candidates

Clients: to introduce suitable candidates for opportunities; to arrange direct online interview confirmations to be sent by clients to candidates; or to facilitate the communication of offers of employment
Candidates: to arrange interviews and provide role information

Third-party service providers

Behavioural assessment providers (with your consent)
Executive coaching network (referrals only, with your consent)
Professional verification services
IT service providers (eg Microsoft 365, Recruiterflow CRM/ATS)
Digital marketing platforms (with your consent)
Analytics and website optimisation providers

Other recruitment professionals

Subcontractor recruiters working on specific assignments
Collaborative searches with other specialist recruitment agencies

Legal and business requirements

Professional advisors (legal, financial, insurance)
Regulatory authorities when required by law
In connection with business sales, acquisitions, or restructuring
To protect our rights, property, or safety, or that of our clients, candidates, or others

International data transfers

Some of our service providers may process your data outside the UK or European Economic Area. When this occurs, we ensure appropriate safeguards are in place through:

Adequacy decisions by the UK Government
Standard Contractual Clauses approved by UK authorities
Other legally recognised transfer mechanisms

We will take all reasonable steps to ensure your data is treated securely and in accordance with this privacy notice.

Data retention

We retain your personal data for as long as necessary for our legitimate business interests, which in specialist legal, governance and compliance recruitment may be considerable periods due to the nature of career development in these professions and the need for us to continue to network and build relevant talent pools.

Our retention criteria include:

The ongoing relevance of your experience to our client base
Your continued engagement with our services
Legal and regulatory requirements
The accuracy and currency of the information
Your preferences regarding contact from us

You can request deletion of your data at any time, though we may retain certain information where we have legal obligations or legitimate interests to do so.

We maintain different retention periods for different types of data and regularly review our records to ensure we only retain data that remains relevant and accurate.

Your rights

Under UK data protection law, you have the right to:

Access your personal data and receive a copy of it
Rectify inaccurate or incomplete personal data
Erase your personal data in certain circumstances
Restrict the processing of your personal data
Object to processing based on legitimate interests
Data portability – receive your data in a structured format
Withdraw consent at any time where we rely on consent
Object to marketing communications at any time

To exercise any of these rights, please contact our Data Protection Contact. We will respond within one month of receiving your request.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO) if you believe we have not handled your personal data properly. Visit https://ico.org.uk/concerns/ for more information.

Cookies and website analytics

Our website may use cookies to enhance your browsing experience and help us improve our services. We may also use analytics services such as Google Analytics to understand how our website is used.

For detailed information about our use of cookies, please see our Cookies Policy or contact us for more information.

Marketing communications

We may use your contact details to tell you about services that may be of interest to you, including:

Relevant job opportunities
Industry insights and market updates
Information about our services
Invitations to events and webinars

You can opt out of marketing communications at any time by:

Using the unsubscribe link in any email communication
Contacting us directly

We will always respect your communication preferences and ensure you only receive relevant information.

Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Multi-factor authentication for system access
Secure cloud-based storage with reputable providers
Regular security updates and monitoring
Staff training on data protection requirements
Incident response procedures

While we take all reasonable steps to protect your data, please remember that no internet transmission is completely secure.

Changes to this privacy notice

We may update this privacy notice from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website and, where appropriate, we will notify you by email.

Please check our website regularly to see any updates or changes to our privacy notice.

Contact us

If you have any questions, comments, or requests regarding this privacy notice or our handling of your personal data, please contact:

Data Protection Contact: Wendy Stephenson-Webber
Email: wendy.stephenson-webber@floritlegal.com
Address: Florit Consulting Limited, trading as Florit Legal, The Mill at Scott Hall, 44 Potternewton Mount, Leeds LS7 2DR.
Telephone: +44 (0)20 3983 8044

This privacy notice was last updated on 14th July 2025