Privacy Policy

1. Introduction

The eCom House is a trading name of Thedevhub Ltd ("we", "us", "our"). Thedevhub Ltd is committed to protecting the privacy and confidentiality of personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, and protect personal information relating to candidates, clients, website visitors, and other individuals, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Unless stated otherwise, Thedevhub Ltd is the data controller for all personal data processed under The eCom House brand.

2. Information We Collect

We may collect and process the following categories of personal information:

Candidate Information
Including CVs, résumés, employment history, skills, qualifications, salary expectations, portfolio links, interview feedback, right-to-work status, and contact details.

Client Information
Including business contact details, role requirements, organisational information, and communications relating to recruitment or hiring needs.

Website and Marketing Information
Including IP address, browser type, device information, pages visited, access times, and interactions with our website, emails, or marketing content.

Communications
Records of emails, calls, meetings, and other correspondence with candidates, clients, and partners.

3. How We Use Your Information

We use personal information for the following purposes:

• Providing recruitment and talent advisory services across eCommerce, CRM, retention, performance, growth, product, and engineering roles.
• Assessing candidate suitability and matching individuals with relevant opportunities.
• Supporting clients with hiring decisions and workforce planning.
• Communicating with candidates and clients about opportunities, services, updates, and insights.
• Managing our relationship with clients, candidates, and partners.
• Improving our website, services, and marketing effectiveness through analysis and reporting.
• Complying with legal, regulatory, and contractual obligations.

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases, as defined by UK GDPR:

• Legitimate Interests – to deliver recruitment services, manage relationships, and operate our business effectively.
• Consent – where you have explicitly agreed to us processing your information (for example, for marketing communications).
• Contractual Necessity – where processing is required to perform a contract or take steps prior to entering a contract.
• Legal Obligation – where processing is necessary to comply with applicable laws or regulations.

5. Information Sharing

We may share personal information with:

• Clients – where relevant to a recruitment process or hiring requirement.
• Service Providers – including applicant tracking systems, CRM platforms, hosting providers, and other third-party suppliers who support our operations.
• Professional Advisers – such as legal, financial, or compliance advisers where necessary.
• Regulatory or Legal Authorities – where required by law or to protect our rights, property, or safety, or those of others.

We do not sell personal data to third parties.

6. International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your information.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of your personal information, in certain circumstances.
• Request restriction of processing, in certain circumstances.
• Request data portability.
• Object to processing, including processing for direct marketing.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

8. Data Security

We implement appropriate technical and organisational measures to safeguard personal information against unauthorised access, loss, misuse, alteration, or disclosure. Access is limited to authorised individuals who require the information for legitimate business purposes.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. When personal data is no longer required, it is securely deleted or anonymised in line with our retention policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The most current version will always be available on our website.

11. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact:

Thedevhub Ltd (trading as The eCom House)

Email: info@thedevhub.co.uk