How Ludi handles your information.

Who is responsible for your information

Ludi Talent Ltd is the data controller for the personal information described in this notice. Ludi Recruitment and Ludi Sport are trading brands of Ludi Talent Ltd and are not separate companies.

• Ludi Talent Ltd is registered in England and Wales. Company number 16213786.
• Registered office: DESG, Penhill Road, Cardiff, Wales, CF11 9PQ.
• Contact for data protection matters: Scott Murphy, scott@luditalent.com
• Registered with the Information Commissioner's Office. Data protection registration reference: ICO:00015325837

Ludi has not appointed a Data Protection Officer, as one is not required.

Ludi Talent Ltd acts as an employment agency, introducing candidates for permanent positions. Ludi never charges candidates for finding or applying for work.

What information Ludi collects

If you are a candidate, this can include your name and contact details, employment history, qualifications, skills, CV or LinkedIn profile, salary information and expectations, notice period and availability, location and flexibility, interview notes and feedback, references, and correspondence with Ludi.

If you are a client or prospective client, this is usually business contact information: name, job title, employer, email address, telephone number and the content of our correspondence about roles and assignments.

If you use the enquiry form, Ludi receives your name, email address, company (if given), the type of enquiry and your message.

If you share your experience using the feedback form, Ludi receives what you enter there. This is covered in its own section below.

Ludi does not ask for your bank details or national insurance number, and does not collect or retain identity or right-to-work documents. Where a role requires proof of right to work, those checks are carried out by the employer directly with you.

Where the information comes from

Most information comes directly from you — through the enquiry form, by email, on the phone or in a meeting.

Recruitment also involves finding people who have not approached Ludi first. In those cases information may be obtained from LinkedIn, including LinkedIn Sales Navigator; from CV databases Ludi subscribes to, currently Totaljobs and Indeed; and from referrals and recommendations from people in Ludi's professional network.

Where Ludi obtains your information from a source other than you, Ludi will tell you within one month of obtaining it, and normally at the point of first contact.

Why Ludi uses your information, and on what lawful basis

Data protection law requires a lawful basis for each purpose. Ludi's position is set out below.

Testimonials and feedback

Ludi has a feedback form at ludirecruitment.co.uk/review where candidates and employers can describe what it was like to work with Ludi.

What is collected. Whether you worked with Ludi as a candidate or as an employer, your first name, and, if you choose to give them, your last name, email address, job title and company. You also give a star rating, your written feedback, whether you would recommend Ludi, how you would like to be identified if your feedback is shared, and whether you are happy for your publicly available LinkedIn profile photograph to appear alongside it. The form records that photograph permission only. It does not collect, download or publish any photograph.

Why it is collected. To understand how Ludi is performing and to improve the service, and — where you give permission — to publish your comments so that other candidates and employers can form an honest view of working with Ludi.

Giving feedback is voluntary. You do not have to complete the form, nothing depends on it, and you can leave any optional question blank. If you complete the form but do not give publication permission, nothing you have written will be published.

Where approved testimonials may appear. On this website, on Ludi’s LinkedIn and Instagram accounts, and in other Ludi marketing material such as proposals and printed or digital documents. Feedback may be shortened or lightly edited for length or clarity without changing its meaning. You will be identified only in the way you chose on the form — full name, first name only, or anonymously.

Your email address is never published and is not shared alongside your testimonial. It is used only to check something with you before publication, or to deal with a request from you afterwards.

Withdrawing permission. Email scott@luditalent.com and say you would like your feedback taken down. You do not need to give a reason and there is no time limit. Ludi will remove the published testimonial promptly and confirm once it has been done. Material already printed or already distributed to a third party cannot always be recalled, and where that applies Ludi will say so.

Special category information

Special category information includes health information, and details of racial or ethnic origin, religious beliefs and similar sensitive matters. Ludi does not request this information and does not carry out diversity monitoring.

It is handled only where you volunteer it — for example if you tell Ludi about a health condition or a disability so that reasonable adjustments can be made for an interview. Where that happens, Ludi uses the information only for that purpose and will not pass it to a client without your agreement.

Who Ludi may share your information with

• Prospective employers. Candidate information is shared with a client only where there is a relevant recruitment purpose and, wherever practicable, after the opportunity has been discussed with you. Ludi does not support speculative circulation of CVs.
• Referees, where you have given their details and agreed to references being taken.
• Professional advisers such as Ludi's accountant or legal advisers, where necessary.
• Service providers who help run the business, listed in the next section.
• Authorities or regulators, where the law requires it.

Ludi does not sell personal information to third parties.

Service providers

Ludi uses the following third-party services, which process personal information on its behalf under a written data processing agreement:

• Netlify — hosts this website and receives enquiry form and feedback form submissions so they can be delivered to Scott.
• Recruit CRM — the recruitment system holding candidate and client records.
• Google Workspace — email, calendar and file storage.
• Dropbox — file storage.
• Dripify — LinkedIn outreach and messaging.
• QuickBooks — accounting records.

Where your information is held

Several of the service providers listed above are based outside the United Kingdom, and personal information may be stored or accessed outside the UK as a result. Ludi is reviewing the data processing agreement for each provider to record where information is held and the transfer arrangements that apply, and this section will be updated with those details.

How long Ludi keeps your information

Once a period has passed, information is deleted or anonymised unless it must be kept for a legal or regulatory reason.

Your rights

You have the right to:

• be told how your information is used — this notice;
• ask for a copy of the information Ludi holds about you;
• have inaccurate information corrected;
• request erasure of your information;
• ask Ludi to restrict how your information is used while a concern is looked into;
• receive information you provided in a portable format, or have it transferred, where that right applies;
• object to Ludi using your information, as set out below;
• withdraw consent at any time, where Ludi relies on consent.

You may request erasure or object to processing, subject to applicable legal obligations and exemptions. Where Ludi cannot act on a request, it will explain why.

To exercise any of these rights, email scott@luditalent.com. Ludi will respond within one month. There is no charge in ordinary circumstances.

Your right to object

Where Ludi relies on legitimate interests, you can object at any time to your information being used. Ludi will stop unless it can show compelling legitimate grounds that override your rights, or the information is needed for legal claims.

Where Ludi uses your information for direct marketing, you can object at any time and Ludi must stop. There is no balancing exercise and no exception.

In practice, for most people the simplest step is to email and say you would like to be removed. Ludi will confirm what it has done.

Automated decision-making

Ludi does not make decisions about candidates by automated means alone. Every shortlist, introduction and recommendation is made by a person.

Cookies and tracking

This website sets no analytics, advertising or tracking cookies, and there is no embedded third-party content collecting information about your visit. There is nothing for you to consent to or opt out of.

If analytics or other tools are introduced later, this notice and appropriate consent controls will be updated before those tools are activated.

How to complain

To Ludi first. If you are unhappy with how your information has been handled, email scott@luditalent.com with "Data protection complaint" in the subject line. Ludi will acknowledge your complaint within 30 days of receiving it, look into it without undue delay, keep you informed and tell you the outcome.

To the Information Commissioner's Office. You can complain to the ICO at any time, and you do not have to come to Ludi first. Details of how to complain are at ico.org.uk/make-a-complaint.

Changes to this notice

This notice will be reviewed when Ludi's systems, tools or processes change, and the date at the top updated.