top of page

PRIVACY POLICY

Version 3.0
Last reviewed: 26/05/2026

 

Who We Are

Stable Resources Ltd (“Stable”, “we”, “us”, “our”) is the data controller for the personal data we process.

Registered Office: Stable Studios, 1 Talbot Street, Pontcanna, Cardiff, CF11 9BW
Company Number: 4312513 (England & Wales)

If you have any questions about this policy or how we handle your data, you can contact our Data Protection Lead:

 

What Personal Data We Collect

The personal data we collect depends on how you interact with us.

​

1. Website Users

We may process:

  • Name and contact details (if you contact us)

  • Enquiry details

  • Technical data (e.g. IP address, browser type, usage data via cookies)

For more information about how we use cookies and similar technologies, please see our Cookie Banner for more information.

 

2. Job Applicants and Candidates

We may process:

  • Name and contact details

  • CV information (qualifications, employment history, experience)

  • Referee details

  • Nationality and right to work information

  • Information from identity documents

  • Information relevant to security cleared roles (where required)

We may collect candidate data directly from you or indirectly from job boards, recruitment platforms, referees, clients and publicly available professional profiles where relevant.

 

3. Clients, Suppliers and Business Contacts

We may process personal data you provide to us and publicly available business contact details.

  • Name, job title and business contact details

  • Business communications

  • Contract and service-related information

 

How We Collect Your Data

We collect personal data:

  • Directly from you (e.g. forms, CV submission, email contact)

  • From third parties such as:

    • Job boards (e.g. CV libraries, recruitment platforms)

    • Referees (where provided by you)

    • Publicly available business sources (e.g. company websites, LinkedIn and directories)

 

Why We Use Your Personal Data and Our Lawful Bases

We process personal data for the following purposes:

Providing Services and Managing Relationships

  • Delivering consultancy, recruitment and training services

  • Managing contracts and communications

Lawful basis: Contract / Legitimate Interests

 

Recruitment Activities

  • Assessing suitability for roles

  • Matching candidates to opportunities

  • Submitting candidate details to clients

Lawful basis: Legitimate Interests / Contract / Consent (where required)

 

Compliance and Legal Obligations

  • Meeting legal, regulatory and governance requirements

  • Maintaining records

Lawful basis: Legal Obligation

 

Business Improvement and Operations

  • Improving our services and user experience

  • Managing our website and systems

Lawful basis: Legitimate Interests

 

Business Development and Marketing

We may use publicly available business contact details, such as names, job titles, business email addresses and business phone numbers, to contact relevant organisations about our services where we believe they are relevant to their business needs.

Lawful basis: Legitimate Interests

You have the right to object to this processing at any time, including opting out of receiving marketing communications from us.

 

Consent-Based Processing

Where we rely on consent (e.g. certain recruitment activities), you can withdraw it at any time by contacting us.

 

Our Legitimate Interests

Where we rely on legitimate interests, these include:

  • Operating and improving our business

  • Providing recruitment and consultancy services

  • Managing relationships with clients and candidates

  • Promoting relevant services to organisations using publicly available business contact details

We ensure these interests are balanced against your rights and freedoms.

 

Who We Share Personal Data With

We may share your personal data with:

  • Clients (for recruitment or service delivery purposes)

  • Training and education providers (where relevant)

  • IT and system providers (e.g. cloud and business systems)

  • Professional advisors (e.g. legal, audit)

  • Regulators and authorities where required

All third parties are required to handle your data securely and in line with data protection law.

 

International Transfers

We primarily store and process personal data within the United Kingdom.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • UK International Data Transfer Agreements (IDTAs), or

  • Adequacy regulations

 

How Long We Keep Your Data

We retain personal data only for as long as necessary.

Typical retention periods include:

  • Candidate data: retained for a defined period after last contact and reviewed periodically to determine whether it is still necessary to keep it

  • Contractual and business records: retained in line with legal and financial requirements

  • Enquiries: retained only as long as necessary to respond and follow up

Retention periods are reviewed regularly.

 

Security of Your Data

We implement appropriate technical and organisational measures to protect personal data, including:

  • Access controls

  • Encryption where appropriate

  • Security monitoring and controls

  • Staff training and policies

 

Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

 

Your Data Protection Rights

Under UK data protection law, you have rights including:

  • Access – request a copy of your personal data

  • Rectification – correct inaccurate or incomplete data

  • Erasure – request deletion in certain circumstances

  • Restriction – limit processing in certain cases

  • Objection – object to processing based on legitimate interests

  • Data portability – request transfer of your data

You do not need to pay a fee to exercise your rights.

We aim to respond within one month.

To exercise your rights, contact us using the details above.

 

How to Complain

If you are unhappy with how we handle your data, please contact us first so we can resolve your concern.

You also have the right to complain to the Information Commissioner’s Office (ICO):

​

ICO Address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113
Website: www.ico.org.uk

 

Updates to This Policy

We keep this privacy policy under regular review and may update it from time to time.

bottom of page