Privacy Policy

1. Who we are

HTP 365 is a specialist Microsoft Dynamics 365 recruitment business operating across the UK. We act as a data controller in respect of any personal data you share with us.

This policy explains how we collect, use, store, and protect your personal data when you interact with us — whether through our website, contact form, job applications, or direct correspondence.

2. What personal data we collect

Depending on how you interact with us, we may collect the following:

• Identity data — your name
• Contact data — email address, phone number, location
• Professional data — CV, work history, skills, certifications, current role and employer, salary and notice period
• Application data — details you provide when applying for a specific role
• Communication data — records of correspondence between us
• Technical data — IP address, browser type, and basic usage data collected through cookies (see section 8)

We only collect data that is necessary and relevant to providing recruitment services. We do not collect sensitive personal data (such as health information, ethnicity, or religion) unless you voluntarily provide it and give explicit consent.

3. Why we collect your data

We use your personal data for the following purposes:

• To respond to enquiries you submit through our contact or application forms
• To assess your suitability for specific roles you have applied for
• To match you with relevant job opportunities in the Microsoft Dynamics 365 market
• To introduce your profile to prospective employers, with your consent, where a suitable opportunity exists
• To maintain records of our placements and business relationships
• To comply with our legal obligations, including employment and tax legislation
• To improve our website and services

We will never use your data for automated decision-making or profiling that produces significant legal effects.

4. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Consent — where you have actively submitted your details via our website forms or provided your CV for consideration
• Legitimate interests — to operate our recruitment business, match candidates with suitable roles, and maintain records of our services, where this does not override your interests or rights
• Contract — where processing is necessary to fulfil a service agreement or placement
• Legal obligation — where we are required to process data to comply with UK law

Where we rely on consent, you have the right to withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.

5. Who we share your data with

We take the sharing of your data seriously. We will only share your personal data in the following circumstances:

• Prospective employers — we will only share your CV or profile with a client organisation with your prior knowledge and consent, and only where a genuinely relevant opportunity exists
• Service providers — we use Formspree to process form submissions on our website. Formspree acts as a data processor and is bound by appropriate data processing terms. No other third-party tools store your personal data on our behalf at this time
• Legal requirements — where we are required to disclose your data by law, court order, or a regulatory authority

We do not sell, rent, or trade your personal data to any third party. We do not transfer your data outside the UK or EEA without ensuring appropriate safeguards are in place.

6. How long we keep your data

We will not keep your data for longer than is necessary for the purpose it was collected. Our standard retention periods are as follows:

• Candidate data (CV, application details) — up to 2 years from the date of last contact, unless you ask us to delete it sooner or we have placed you in a role
• Placement records — up to 6 years, in line with standard business record-keeping requirements
• General enquiry data — up to 12 months from the date of enquiry
• Website analytics data — as set out in the relevant tool's data retention policy

At the end of the applicable retention period, your data will be securely deleted. You can request deletion at any time — see section 7.

7. Your rights

Under UK GDPR, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at josh@htp365.co.uk.

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct any inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data where there is no compelling reason for us to continue holding it
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances
• Right to data portability — you can request your data in a structured, commonly used, machine-readable format
• Right to object — you can object to our processing of your data where we rely on legitimate interests as our legal basis
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

We will respond to all requests within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's supervisory authority for data protection.

8. Cookies

Our website uses only essential technical cookies necessary for the site to function. We do not currently use advertising, tracking, or analytics cookies that identify you personally.

If we introduce any non-essential cookies in the future, we will update this policy and obtain your consent where required by law.

You can control cookies through your browser settings at any time. Disabling cookies may affect the functionality of some features on the site.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and form submissions are processed via encrypted connections.

While we take data security seriously, no method of transmission over the internet is 100% secure. If you have concerns about the security of data you have shared with us, please contact us immediately.

10. Contact us

If you have any questions about this privacy policy, wish to exercise your rights, or want to discuss how we handle your data, please get in touch.

This policy was last reviewed and updated in April 2026. We reserve the right to update it at any time — any changes will be published on this page with an updated date at the top.