DCG IT Ltd trading as Digisourced
LAST UPDATED: Friday, October 23, 2026
This notice explains how we handle personal information when sourcing and placing candidates, engaging contractors, working with clients and operating our website. It applies to candidates, prospective candidates, contractors, referees, client and prospective client contacts, supplier contacts, website visitors and, where relevant, emergency contacts.
DCG IT Ltd (company number 13137996), trading as Digisourced, is a controller of personal information used for recruitment and business activities it determines. For certain shared recruitment activities, DCG IT Ltd and Recann Ltd act as joint controllers, as explained below.
Privacy enquiries: privacy@digisourced.com. Postal correspondence: Digisourced, 5 Athena Ct, Athena Dr, Royal Leamington Spa, Warwick CV34 6RT, United Kingdom.
We work with related businesses, including Recann Ltd, DCG IT GmbH, Recann BV, DCG IT Inc and Recann AB. For certain shared candidate-data activities that they jointly determine, DCG IT Ltd and Recann Ltd act as joint controllers. Each business separately manages its own clients, vacancies, candidate introductions, placements and commercial activities. We may share relevant information with other related businesses where necessary for specified recruitment or support purposes.
For processing to which Article 27 of the EU GDPR applies, our EU representative is Recann AB, Box 45087, 104 30 Stockholm, Sweden (privacy@digisourced.com). The representative is a contact for relevant EU privacy enquiries; DCG IT Ltd remains responsible for its compliance.
For some client engagements we process information solely on the client’s instructions, in which case that client is the controller for that activity. We remain a controller of our separate candidate sourcing, communications and recruitment records.
Depending on the nature and stage of our relationship, we may use:
- Identity and contact information, such as name, business and personal contact details, location and professional online profiles.
- Career and recruitment information, including CVs, employment and education history, skills, qualifications, work preferences, availability, rates or salary expectations, assessments and consultant notes.
- Communications information, including emails, messages, interview and meeting notes and, where relevant, call recordings and transcripts.
- Placement, compliance and payment records, such as references, emergency-contact information, right-to-work documentation, identification, contracts, timesheets, payment and tax information, where relevant to an assignment.
- Client and business contact information, such as job title, employer, professional interests and communications history.
- Website and technical information, such as device/browser details, IP addresses, website usage and security logs.
Where necessary for a particular role or assignment, we may process health or disability information or criminal-offence information, subject to the additional legal conditions and safeguards required by applicable law.
Certain information, such as identity or right-to-work evidence and payment details, may be required by law or necessary to arrange or administer an assignment. Without it, we may be unable to progress or manage the relevant engagement.
3 WHERE INFORMATION COMES FROM
We collect information directly when you apply for a role, submit a CV, contact us, speak with a consultant or take part in recruitment-related activities such as professional networking, recruitment events and industry conferences.
We may also receive professional information through referrals from clients, colleagues and other professional contacts; from employers, referees, event organisers or delegate information; and from job boards, professional networking platforms, publicly available profiles, company websites and specialist contact-information providers.
Where information is obtained from another source, we provide privacy information as required by applicable law. You may ask us where we obtained information about you.
4 WHAT WE USE INFORMATION FOR AND OUR LEGAL BASES
Where UK or EU GDPR applies, the lawful basis depends on why we use the information. Our main activities and typical lawful bases are:
|
Purpose |
Typical lawful basis |
|
Finding, matching and contacting prospective candidates, and introducing candidates to vacancies |
Legitimate interests in identifying relevant professionals and delivering recruitment services; another lawful basis where required. |
|
Applications, interviews and ongoing candidate relationships |
Legitimate interests, steps before a contract or performance of a contract, depending on the activity. |
|
Contractor administration, right-to-work checks and payments |
Contract, legal obligation or legitimate interests, with additional conditions where needed for sensitive or criminal-offence data. |
|
Client contact, business development and relevant marketing |
Legitimate interests for relevant business communications; consent where applicable marketing rules require it. |
|
Communications records, call recording and transcription |
Legitimate interests or another applicable basis, depending on the activity. |
|
Security, service operations and legal compliance |
Legitimate interests and/or legal obligation. |
Our legitimate interests include finding and contacting professionals about relevant opportunities, assessing suitability, maintaining candidate and client relationships, keeping records accurate and protecting our systems. Electronic outreach is also subject to applicable marketing rules.
We use recruitment technology, including AI-assisted tools, to help identify potentially suitable candidates and relevant opportunities. Our consultants remain actively involved in the recruitment process, including reviewing candidate suitability, conducting qualification discussions and agreeing introductions before putting candidates forward to clients.
We may record or transcribe recruitment-related calls and meetings to keep accurate records of discussions.
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing already carried out lawfully or processing based on a separate lawful basis.
5 RECRUITMENT COMMUNICATIONS AND MARKETING
We may contact candidates and business contacts about relevant opportunities or recruitment services, including where their professional details were obtained from another source. We obtain consent where required by applicable marketing and communications law.
You can object to direct marketing at any time by contacting privacy@digisourced.com or using an available unsubscribe option. We will stop direct marketing to you and may retain a limited suppression record to respect that request.
6 WHO WE SHARE INFORMATION WITH
We may disclose relevant personal information for recruitment, assignments and business operations. Recipients can include:
- Clients and prospective employers, including their recruitment and applicant-tracking systems, where a candidate is being considered for an opportunity.
- Referees, background-check providers, payroll and payment services, professional advisers and other parties involved in a relevant assignment.
- Related businesses involved in shared candidate-data activities or providing relevant administrative, IT, finance or compliance support.
- Technology and service providers supporting recruitment systems and data storage, candidate sourcing and contact verification, recruitment matching, communications, call recording and transcription.
- Regulators, tax and other public authorities where disclosure is required or permitted by law.
Depending on the activity, these organisations may process information on our behalf or act as independent controllers. Jointly controlled recruitment activities involving DCG IT Ltd and Recann Ltd are described in Section 1. You may request information about recipients relevant to your own personal data.
7 INTERNATIONAL PROCESSING AND TRANSFERS
Personal information may be accessed or processed in countries outside the UK or European Economic Area. Where restricted international transfers arise, we rely on applicable adequacy arrangements or appropriate contractual safeguards as required by law.
You may request further information about safeguards relevant to your personal data at privacy@digisourced.com.
8 HOW LONG WE RETAIN INFORMATION
We retain personal information only for as long as necessary for recruitment and related business purposes, or to meet applicable legal requirements. Our standard periods are:
|
Record type |
Standard business retention period |
|
Prospective candidates who have not engaged |
Generally up to 24 months from collection or last meaningful verification, unless a shorter period is appropriate. |
|
Candidates who have actively engaged with us |
Generally up to 36 months after the last meaningful recruitment interaction, subject to justified exceptions. |
|
Placement, assignment, accounting and contractual records |
Relevant documents generally up to six years from the applicable placement, assignment or financial event, unless law requires otherwise. |
|
Objection and suppression records |
Limited information retained as long as needed to respect objections and prevent further unwanted contact. |
|
Call recordings, transcripts, website logs and other records |
Based on the purpose, sensitivity, security needs and any applicable legal or contractual requirements. |
We review records and delete or anonymise information when it is no longer needed. Different arrangements may apply to data processed solely on a client’s instructions or where a legal obligation requires longer retention.
Depending on the applicable law and circumstances, you may have rights to access, correct, erase, restrict or object to the use of your personal data, and to obtain a portable copy in certain circumstances. You may also have rights concerning certain automated decisions and may withdraw consent where consent is our lawful basis. Some rights are qualified and lawful exemptions may apply.
You have the right to object to processing for direct marketing at any time. Where processing is based on legitimate interests, you may also object on grounds relating to your particular situation, subject to the applicable legal rules.
For the shared recruitment activities jointly controlled by DCG IT Ltd and Recann Ltd, Digisourced normally handles enquiries sent to privacy@digisourced.com and Recann Ltd normally handles those sent to privacy@recannintl.com. Both companies cooperate on shared records, and you may exercise your rights against either controller. We may ask for proportionate identity verification where necessary and respond within the applicable legal time limits.
If you are dissatisfied with how we handle your personal data, please contact us first. Where UK GDPR applies, you may also complain to the Information Commissioner’s Office (www.ico.org.uk). Where EU GDPR applies, you may complain to a competent EU data protection supervisory authority. Residents of other jurisdictions may have additional complaint and privacy rights under laws that apply to the processing.
10 WEBSITE COOKIES AND SECURITY
Our website may use cookies and similar technologies to operate securely and understand its use. Where required, we seek consent for non-essential cookies and provide information about available choices. For further information, see our Cookie Policy.
We use technical and organisational measures designed to protect personal information.
11 OTHER JURISDICTIONS, CHANGES AND CONTACT
Additional privacy rights may apply under relevant laws in the United States, Canada or other locations. Where required, we provide any additional information or choices required by those laws.
We may update this notice when our services or legal requirements change.
For Digisourced privacy enquiries, contact privacy@digisourced.com. EU GDPR Article 27 representative for applicable processing: Recann AB, Box 45087, 104 30 Stockholm, Sweden. Representative email: privacy@digisourced.com
