Privacy Policy

 

Last updated: 31 July 2026

Bond takes privacy and data protection extremely seriously. Looking after the data you share with us is hugely important to us. We want you to be confident that your data is safe and secure with us.

 

Who this privacy policy applies to

This privacy policy applies to:

• Bond Global Solutions Ltd, trading as Bond Global, registered in the United Kingdom; and
• Bond Global Solutions Corp , registered in the United States, in Massachusetts, New Hampshire and Connecticut with our federal registered address in Texas.

 

Together, these companies are referred to as “Bond”, “we”, “us” or “our”.

The Bond company responsible for your personal information will depend on where you are located, the company you are dealing with and the services being provided.

Bond Global Solutions Ltd will normally be responsible for personal information relating to our UK operations.

Bond Global Solutions Corp will normally be responsible for personal information relating to our US operations.

The two companies may also share personal information with each other where necessary to provide our services, operate our business or support recruitment activity.

 

Recruitment on behalf of our partners

Bond provides recruitment and talent consultancy services to other organisations, which we call our partners or clients.

When we recruit on behalf of a partner:

• the partner will usually decide who it wants to recruit and how recruitment decisions are made;
• Bond may process information under the partner’s instructions;
• Bond may also make certain decisions about how information is collected, sourced, assessed and managed; and
• both Bond’s privacy policy and the partner’s own privacy policy may apply.

 

Depending on the particular arrangement, Bond may act as:

• a data controller or business in its own right;
• a processor or service provider acting on the partner’s instructions; or
• a joint controller with the partner.

You may contact us if you would like clarification about Bond’s role in a particular recruitment process.

Contact details

Post:
Bond Global Solutions Ltd
Barbury House
Stonehill Green
Westlea
Swindon
SN5 7HB
United Kingdom

US address:
Bond Global Solutions Corp

539 W. Commerce Street, PMB # 8019, Dallas, Texas TX 75208, United States

Telephone: 01793 778380

Email: lisa.rutter@bond-global.com

Data Protection and Privacy Contact: Lisa Rutter

 

What information we collect, use and why

Consultancy services

We collect or use the following information to provide our consultancy services:

• Names and contact details
• Addresses
• Payment details
• Account information
• Records of meetings, communications and decisions
• Information relating to compliments or complaints
• Information about an organisation, its employees, recruitment requirements and workforce plans
• Contractual and commercial information

 

Service updates and marketing

We collect or use the following information for service updates or marketing purposes:

• Names and contact details
• Job title and employer
• Areas of professional interest
• Marketing preferences
• Records of communications and engagement with our content, events or services

 

Website operation, analytics and security

When you use our website, we may collect:

• IP address
• Browser and device information
• Website activity
• Cookie identifiers
• Referring website information
• Approximate location derived from an IP address
• Information submitted through website forms

We use this information to operate and secure our website, understand how it is used, improve our services and, where permitted, measure the effectiveness of our marketing.

More information is available in our Cookie Policy.

 

Legal requirements

We collect or use the following information where necessary to comply with legal requirements:

• Name
• Contact information
• Identification documents
• Tax or financial information
• Information required to establish, exercise or defend legal claims
• Information requested by regulators, courts, law enforcement bodies or other public authorities

 

Recruitment

We collect or use the following information for recruitment purposes, either for Bond’s own recruitment or when recruiting on behalf of a partner:

• Contact details, such as name, address, telephone number and personal email address
• Date of birth, where necessary and lawful
• National Insurance number, Social Security number, tax identification number or similar information, where necessary and lawful
• Copies of passports, driving licences or other identification documents
• Employment history, including job applications, CVs, résumés, references and secondary employment
• Education history and qualifications
• Professional licences, accreditations and memberships
• Right-to-work, immigration, visa and work-authorisation information
• Current and expected compensation
• Availability and location preferences
• Interview notes, assessment results and recruiter observations
• Information provided by referees
• Public professional information, including information available through LinkedIn, company websites and similar sources
• Details of criminal convictions or background checks, where permitted by law and relevant to the role
• Security-clearance information
• Accessibility requirements connected with the interview or onboarding process
• Information about diversity, equal opportunities or workplace accommodations
• Health information, where relevant and lawful
• Racial or ethnic origin, religious beliefs, gender identity, sexual orientation or other sensitive information, where voluntarily provided or where its collection is otherwise permitted by law

 

We only collect sensitive information where it is necessary, proportionate and permitted by applicable law.

We may share relevant candidate information with the organisation for which we are recruiting. We will only do this where it is connected with a genuine employment opportunity or recruitment service and where the sharing is lawful.

 

Background checks

Where a role requires identity, criminal-record, credit, employment, education or other background screening, we may obtain information from an authorised screening provider.

We will only conduct or arrange checks where they are relevant, proportionate and permitted by applicable law. Where consent, authorisation or a separate notice is legally required, this will be provided before the check takes place.

 

Selling and sharing personal information

We will not sell or rent your personal information to third parties for money.

We will not disclose your personal information to third parties for their own direct-marketing purposes.

We do not use candidate or recruitment information for targeted advertising.

Some US privacy laws use the words “sell”, “share” and “targeted advertising” more broadly than their ordinary meaning. Where our use of website cookies or advertising technology falls within one of these definitions, we will provide any legally required notice and opt-out mechanism.

 

Lawful bases under UK data protection law

The following lawful bases apply where the UK GDPR and Data Protection Act 2018 apply.

 

Consultancy services

Our lawful bases for collecting or using personal information to provide services are:

• Contract
• Taking steps at your request before entering into a contract
• Legal obligation
• Legitimate interests

 

Our legitimate interests include conducting and managing our business, delivering our consultancy and recruitment services, maintaining client and candidate relationships and providing a secure and effective service.

We consider and balance the potential impact on you and your rights before relying on legitimate interests. We do not rely on legitimate interests where our interests are overridden by your rights and freedoms.

You can obtain more information about our legitimate-interest assessments by contacting us.

Service updates and marketing

Our lawful bases for collecting or using personal information for service updates or marketing purposes are:

• Consent
• Legitimate interests, where permitted by applicable law

 

We have a legitimate business interest in making businesses and relevant professional contacts aware of our consultancy services, recruitment services, events and insights where we reasonably believe they may be relevant.

We provide clear ways to opt out. Where somebody opts out, we may retain limited information on a suppression list to make sure that we respect their preference.

 

Legal requirements

Our lawful bases for collecting or using personal information for legal requirements are:

• Contract
• Legal obligation
• Legitimate interests, including establishing, exercising or defending legal claims

 

Recruitment

Our lawful bases for collecting or using personal information for recruitment purposes are:

• Taking steps at your request before entering into a contract
• Contract
• Legal obligation
• Legitimate interests
• Consent, where you have a genuine choice and consent is appropriate

 

Our legitimate interests include:

• identifying and contacting potentially suitable candidates;
• matching candidates to relevant opportunities;
• assessing skills, qualifications and suitability;
• providing recruitment services to our partners;
• managing candidate relationships; and
• protecting Bond, our partners and candidates against fraud or unlawful conduct.

 

When we process sensitive or special-category information, we will also rely on an additional legal condition, such as:

• explicit consent;
• employment, social-security or social-protection law;
• establishing, exercising or defending legal claims; or
• substantial public interest, where applicable.

Criminal-conviction and offence information will only be processed where permitted by law and where an appropriate legal condition applies.

 

Processing under US privacy laws

Where US privacy laws apply, we process personal information for the purposes described in this policy and only to the extent reasonably necessary and proportionate for those purposes.

Where a US law requires consent before sensitive personal information is processed, we will obtain that consent unless another legal exception applies.

We will not process personal information for a materially different or incompatible purpose without providing any additional notice or obtaining any consent required by law.

 

Where we get personal information from

We obtain personal information from:

• People directly
• Our clients and recruitment partners
• Referees and previous employers
• Publicly available sources
• Recruitment and job-advertising websites
• Professional networking websites
• Search-information providers
• Background-screening and identity-verification providers
• Analytics and technology providers
• Data and business-information providers

 

These sources may include:

1. Analytics and technology providers such as Google and HubSpot, which may be based outside the UK.
2. Job-advertising and recruitment websites based inside or outside the UK. These websites may share information with recruiters in accordance with their own privacy policies and user settings.
3. Search-information providers based inside or outside the UK.
4. Business information and contact-data providers such as Apollo, Crunchbase, Sifted and Beauhurst.
5. Public sources such as Companies House, government websites, company websites and LinkedIn.
6. Bond managing partners and employees who have been in contact with you in connection with services, recruitment, events or marketing communications.
7. Our recruitment partners and their employees, hiring managers and professional advisers.

 

Where we obtain your information from another source, we will provide privacy information within the period required by applicable law, unless an exception applies.

 

How long we keep information

Personal information is kept for different lengths of time depending on what it is and why it was collected.

When deciding how long to keep information, we consider:

• the purpose for which it was collected;
• the length of our relationship with you;
• the length of the relevant recruitment process;
• whether you have asked to be considered for future opportunities;
• contractual and client requirements;
• legal, tax and regulatory requirements;
• applicable limitation periods;
• possible complaints, disputes or legal claims;
• the sensitivity of the information; and
• security and fraud-prevention requirements.

 

We review personal information periodically and delete, anonymise or securely dispose of it when it is no longer reasonably required.

We may retain limited information after an objection, unsubscribe request or deletion request where necessary to record that request and ensure that your preferences continue to be respected.

More specific retention information may be provided in a candidate notice, notice at collection, contract or other communication relevant to the particular service.

 

Who we share information with

We may share personal information with:

• Bond companies in the UK and US
• Partners and clients for whom we provide recruitment or consultancy services
• Prospective employers where you are being considered for a role
• Applicant-tracking, recruitment and HR technology providers
• Background-screening and identity-verification providers
• Website, hosting, analytics, CRM and IT providers
• Professional advisers, including lawyers, accountants, auditors and insurers
• Research, mailing and event providers
• Payment and financial-service providers
• Regulators, courts, law enforcement bodies and public authorities
• A purchaser, investor or successor in connection with a merger, acquisition, restructuring or sale of part of our business

 

Third parties that process personal information on our behalf must only use it for agreed purposes, protect it appropriately and comply with applicable privacy and confidentiality obligations.

Our recruitment partners may use candidate information as independent controllers or businesses. Their use of information will also be covered by their own privacy policies.

 

Sharing information internationally

Bond operates in both the UK and US. Personal information may therefore be transferred between our UK and US entities and to suppliers, partners or clients in other countries.

Where UK data protection law applies and personal information is transferred outside the UK, we use a lawful transfer mechanism where required. This may include:

• UK adequacy regulations;
• an approved international data-transfer agreement or contractual addendum;
• binding contractual safeguards; or
• another legally recognised transfer mechanism or exception.

 

We also carry out appropriate transfer and security assessments where required.

You can contact us for more information about the safeguards used for a particular transfer.

 

How we protect information

We use reasonable administrative, organisational and technical safeguards designed to protect personal information against:

• unauthorised access;
• accidental loss;
• alteration;
• improper disclosure; and
• unlawful use.

 

These measures include access controls, staff confidentiality obligations, secure systems, supplier checks and appropriate data-handling procedures.

Access to personal information is limited to people who reasonably need it for their work.

No system is completely secure. Where a data breach occurs, we will investigate it and notify affected individuals and regulators where required by law.

 

Your UK data-protection rights

Under UK data-protection law, you may have the following rights:

• Access: You can ask us for copies of your personal information.
• Rectification: You can ask us to correct inaccurate information or complete incomplete information.
• Erasure: You can ask us to erase your personal information in certain circumstances.
• Restriction: You can ask us to restrict the processing of your personal information in certain circumstances.
• Objection: You can object to certain processing, including direct marketing and some processing based on legitimate interests.
• Data portability: You can ask us to transfer certain information you provided to another organisation or to you.
• Withdraw consent: Where we rely on consent, you can withdraw it at any time.
• Automated decisions: You may have rights relating to decisions made solely through automated processing that have a legal or similarly significant effect.

 

You do not usually need to pay a fee to exercise your rights.

We will normally respond within one month. We may extend this period where the law permits, for example where a request is particularly complex.

 

Your US privacy rights

Depending on where you live and whether the relevant state law applies to Bond or the particular processing, you may have the right to:

• confirm whether we process your personal information;
• access personal information we hold about you;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of certain information;
• opt out of the sale of personal information;
• opt out of the sharing of personal information for targeted advertising;
• opt out of certain profiling or automated decisions;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent to sensitive-data processing;
• use an authorised agent to make a request;
• appeal a decision we make about your request; and
• exercise your rights without unlawful discrimination or retaliation.

 

Some rights and exceptions vary by state. Employment and recruitment information may be excluded from certain state privacy laws, while other laws, including California law where applicable, may cover applicants, employees and business contacts.

Where a right does not apply under the law of your state, we may choose to respond voluntarily but are not required to do so.

 

Making a privacy request

To make a privacy or data-protection request, contact:

Email: lisa.rutter@bond-global.com
Telephone: 01793 778380
Post: Bond Global Solutions Ltd, Barbury House, Stonehill Green, Westlea, Swindon, SN5 7HB, United Kingdom

Please describe the request and the information or relationship it concerns.

We may need to verify your identity before responding. We will only request information reasonably necessary to complete that verification.

Where applicable, our response will explain how you can appeal if we refuse to take action on your request.

How to complain

If you have concerns about our use of your personal information, you can complain to our Data Protection and Privacy Contact using the details above.

 

United Kingdom

If you remain unhappy after raising a complaint with us, you can complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint

 

United States

Depending on where you live, you may also have the right to complain to your state Attorney General or another state privacy regulator.

 

Changes to this policy

We may update this policy to reflect changes to our services, business practices or legal obligations.

Where changes are material, we will take reasonable steps to bring them to your attention.

The date at the top of this policy shows when it was last updated.