Privacy Policy
This policy explains what personal information Bernoullis Group collects about candidates, clients and website visitors, why we use it, who we share it with, how long we keep it and the rights you have under UK data protection law.
Last updated: 3 October 2026
On this page
1. Who we are
This privacy policy explains how Bernoulli Group Ltd, trading as Bernoullis Group (“Bernoullis”, “we”, “us”), collects and uses personal information. We are the data controller for the personal information described in this policy.
- Registered in England and Wales, company number 17280973
- Registered office: 49 Station Road, Polegate, East Sussex, England, BN26 6EA
- ICO registration number: ZC245532
- Email: admin@bernoullis.co.uk
- Phone (free to call): 0800 246 5950
- WhatsApp: Message us on WhatsApp
We provide permanent, contract and temporary engineering recruitment services and act as an employment agency and employment business under the Conduct of Employment Agencies and Employment Businesses Regulations 2003.
2. Who this policy covers
This policy applies to:
- Candidates: engineers and other professionals looking for work, including people who send us a CV or whom we contact about a role.
- Clients: employers and hiring managers who use our services or send us a vacancy.
- Referees and emergency contacts whose details a candidate gives us.
- Website visitors to bernoullis.co.uk.
- Suppliers and other business contacts.
3. The information we collect
Candidates
- Identity and contact details: name, email address, phone number, location or postcode.
- Your CV and career information: work history, qualifications, skills, professional memberships, certificates and training records.
- Job preferences: roles, salary or day-rate expectations, notice period, willingness to travel or relocate.
- Right-to-work information and, where a role requires it, identity documents, references and security-clearance details.
- Notes of our conversations, interview feedback and the roles you have been put forward for.
Clients
- Names, job titles, work email addresses and phone numbers of your contacts.
- Vacancy details, job descriptions and interview feedback you send us.
Website visitors
- Anything you submit through our forms, such as “Submit Your CV” or “Submit a Vacancy”, including uploaded files and messages.
- Technical and usage data, such as IP address, browser, device type and pages visited, collected through cookies and Google Analytics where you consent.
Special category and criminal offence data
We only collect more sensitive information, such as health information needed to make reasonable adjustments for an interview or criminal record information for roles that legally require checks, when it is necessary for a specific role. We handle it under a condition in the UK GDPR and Schedule 1 of the Data Protection Act 2018, or with your explicit consent.
4. How we collect it
- Directly from you: through our website forms, by email, phone, WhatsApp or in person.
- From job boards and professional networks such as LinkedIn, where you have made your profile available for recruitment.
- From referrals, referees and clients.
- Automatically when you use our website, through cookies and similar technologies.
5. How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Assessing your suitability, matching you to roles and keeping you informed about opportunities | Legitimate interests (providing recruitment services), or steps taken at your request before entering into a contract |
| Sending your CV or details to a prospective employer. We will always tell you about a role and get your agreement before submitting you. | Legitimate interests / your agreement |
| Right-to-work, identity and other checks required by law | Legal obligation |
| Arranging interviews, placements and contract assignments, including payroll for contractors | Contract / legal obligation |
| Managing our relationship with clients and handling vacancies | Contract / legitimate interests |
| Sending job alerts, market updates or service news by email | Consent, or for existing clients our legitimate interests (“soft opt-in”). You can unsubscribe at any time. |
| Measuring and improving our website | Consent (analytics cookies) |
| Keeping records, dealing with complaints and defending legal claims | Legal obligation / legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for details of this assessment. We do not make decisions about you using solely automated processing.
6. Who we share it with
We never sell your personal information. We share it only where necessary with:
- Prospective employers and clients, when you have agreed to be put forward for a role.
- Referees, to request references you have authorised.
- Service providers who process data for us under contract: website hosting, email delivery, IT and cloud storage, analytics (Google) and messaging (WhatsApp, operated by Meta).
- Professional advisers, such as accountants, lawyers and insurers.
- Regulators, HMRC, the Home Office or law enforcement, where the law requires it.
7. International transfers
Some of our service providers, such as Google and Meta, may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, for example UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the ICO’s International Data Transfer Agreement or Addendum.
8. How long we keep it
- Candidate records: up to 2 years after our last meaningful contact with you, unless you ask us to delete them sooner or you have been placed through us.
- Placement, assignment and right-to-work records: for as long as the law requires. This includes at least one year under the Conduct of Employment Agencies and Employment Businesses Regulations 2003, and up to six years for tax, payroll and contractual records.
- Client contact records: while we have an active relationship and for up to 2 years afterwards.
- Website analytics: for the data retention period set in our Google Analytics account, after which Google automatically deletes it.
When information is no longer needed, we securely delete or anonymise it.
9. Keeping your information secure
We use appropriate technical and organisational measures to protect personal information. These include encrypted connections (HTTPS), access controls, strong passwords and multi-factor authentication where available, and limiting access to people who need it. No method of transmission over the internet is completely secure, but we work hard to protect your information and will notify you and the ICO of a breach where the law requires it.
10. Your rights
Under UK data protection law, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Erase your information in certain circumstances.
- Restrict or object to our processing, including objecting to direct marketing at any time.
- Data portability: receive your information in a commonly used format.
- Withdraw consent at any time, where we rely on consent.
To use any of these rights, email admin@bernoullis.co.uk or call 0800 246 5950. There is no charge, and we will respond within one month. We may need to confirm your identity first.
11. Cookies
Our website uses a small number of cookies:
- Essential cookies keep the site working and secure. They do not need consent.
- Analytics cookies (Google Analytics, for example
_gaand_ga_*, which last up to two years) help us understand how the site is used. We only set these if you accept them. - Embedded content, such as the Google Map on our contact page or links to WhatsApp, may let those providers set their own cookies.
You can change your choice at any time using the cookie settings link in the footer, or by clearing cookies in your browser.
12. Our CV checker and CV rewrite service
This section explains how we use your information when you use our online CV checker, including the CV check and the CV rewrite and score check.
What we collect
- Your CV (PDF or Word) and everything in it, such as your name, contact details, work history, education and qualifications.
- The job title and job advert you choose to enter.
- Your answers to our questions, if you order a rewrite.
- The email address you give us for your new CV, and whether you want it as a Word document or a PDF.
- Payment information. Payments are handled by Stripe and we never see or store your card details. Stripe tells us whether your payment went through and gives us your email address and a payment reference.
- Technical information. We use your IP address for up to an hour to stop repeated or automated attempts. If something goes wrong, we keep a short technical error log that never contains anything from your CV.
Please leave out anything a UK employer does not need, such as a photo, your date of birth or health information.
How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Reading your CV and producing your score, report and suggested improvements | Contract |
| For a rewrite: researching the job you want and your past roles, asking you questions, then writing, scoring and emailing your new CV | Contract |
| Letting you upgrade a CV check to a rewrite within 7 days, including finding your earlier payment from the email address you paid with | Contract |
| Confirming payments and preventing misuse, such as one payment being used more than once | Legitimate interests (preventing fraud) |
| Sending our team a copy of every rewritten CV so we can check the quality of the service and help if you contact us | Legitimate interests (quality and support) |
| Keeping payment records | Legal obligation |
How the AI works
Your score, report and new CV are produced automatically by AI. When you order a rewrite, the AI may run web searches about job roles and industries so it can compare your past roles with the job you want. These searches never include your name, contact details or any other personal information. The results are guidance to help you improve your CV. They are not used to make any decision about you, and they do not affect any application you make to us or anyone else. AI can make mistakes, so please check your new CV carefully before you use it.
Who we share it with
- Anthropic provides the AI that reads your CV, carries out the job research and writes your report and new CV. Under its commercial terms, it does not use your information to train its AI models. It may keep it for a limited period for safety and misuse monitoring.
- Stripe processes your payment. See Stripe’s privacy policy for how it handles payment information.
- Elementor Site Mailer delivers our emails.
- 20i hosts our website.
Some of these companies process data in the United States. Where that happens, your information is protected by the safeguards described in section 7.
How long we keep it
- CV check: your CV is deleted from our website as soon as your report is ready. Your report is shown only in your browser and we do not store it.
- CV rewrite: your original CV is kept for up to 24 hours in a secure folder that cannot be reached from the internet while you answer our questions, and is deleted as soon as your new CV has been written. Your answers and new CV are removed from our website once your CV has been delivered, or after 24 hours at the latest. The file is deleted from our website straight after it is emailed.
- Emails: the copy of your new CV emailed to you stays in your inbox. Our team’s copy is kept for 12 months and then deleted.
- Payments: payment records are kept for 6 years, as UK tax law requires. We keep a payment reference so the same payment cannot be used twice.
Cancellation
Your CV check or rewrite starts as soon as you pay, and at checkout you agree that you lose the 14-day right to cancel once it starts. If something goes wrong with your order, contact us and we will put it right.
You have all the rights described in section 10. To use them, email admin@bernoullis.co.uk.
13. Children
Our services are intended for adults looking for work or recruiting staff. We do not knowingly collect information from children under 16.
14. Links to other websites
Our pages link to other websites, such as company, council and university sites. We are not responsible for their privacy practices, so please read their policies.
15. Complaints
If you have a concern about how we use your information, please contact us first at admin@bernoullis.co.uk or on 0800 246 5950 and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
16. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.
Questions about your data?
Email admin@bernoullis.co.uk or call us free on 0800 246 5950. We will reply within one month, usually much sooner.