Legal
Privacy Policy
How MilesEight collects, uses and protects personal data.
Last updated: 10 November 2026
Who we are
This policy explains how MilesEight (“MilesEight”, “we”, “us”) collects and uses personal data when we recruit for Data & AI roles, work with clients and run this website, miles-eight.com.
We are the controller of your personal data. You can contact us about anything in this policy at info@miles-eight.com.
Who this policy covers
- Candidates and people we approach about roles
- Client contacts and hiring managers
- Referees
- Suppliers and partners
- Visitors to this website
The data we collect
- Identity and contact details: name, email, phone, location, LinkedIn profile
- Career information: CV, experience, skills, qualifications, current and expected salary, notice period
- Search information: interview notes, assessments, feedback and references, with your agreement
- Client information: name, job title, company, contact details and hiring requirements
- Website data: IP address, browser and device information, pages visited and cookie data (see our Cookie Policy)
We do not ask for special category data (such as health information). If you choose to share it, for example to request adjustments for an interview, we use it only for that purpose and only with your explicit consent.
Where we get it
Mostly from you: when you send your CV, use one of our forms, email us or speak to us. We also collect professional information from public sources such as LinkedIn and professional networks, from referrals, from job boards and from clients who share hiring requirements with us.
How we use it and our legal basis
We only use personal data where data protection law (the UK GDPR and, where it applies, the EU GDPR) gives us a legal basis:
| Purpose | Legal basis |
|---|---|
| Approaching you about roles that match your experience | Legitimate interests (Art. 6(1)(f)) |
| Processing your application and introducing you to a client | Steps before a contract and legitimate interests (Art. 6(1)(b) and (f)). We always ask before sharing your CV |
| Replying to an enquiry sent through our forms | Legitimate interests (Art. 6(1)(f)) |
| Managing our relationship and agreements with clients | Contract and legitimate interests (Art. 6(1)(b) and (f)) |
| Keeping you informed of market insight and new roles | Consent or legitimate interests (Art. 6(1)(a) or (f)). You can opt out at any time |
| Meeting legal, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Running and securing this website, and analytics with your consent | Legitimate interests and consent (Art. 6(1)(f) and (a)) |
Automated decisions
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you. A person at MilesEight reviews every application.
Who we share it with
- Clients, only when you have agreed to be introduced for a specific role
- Service providers who process data for us: email and calendar (Microsoft 365), website hosting, spam protection on our forms (Google reCAPTCHA) and website analytics (Google Analytics, only with your consent)
- Professional advisers, and authorities where the law requires it
We never sell personal data.
International transfers
Some of our providers may process data outside the UK and the European Economic Area. Where they do, we rely on an adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework) or approved standard contractual clauses.
How long we keep it
We keep personal data only for as long as we need it for the purposes in this policy:
| Data | Retention |
|---|---|
| Candidate profiles | For as long as they are relevant to the roles we recruit for. We review them regularly and delete them sooner if you ask |
| Applications for a specific role | For the length of the search and a reasonable period after the role closes |
| Client and invoicing records | As long as UK company and tax law requires, usually six years |
| Website analytics | See our Cookie Policy |
How we protect it
We use access controls, encryption, multi-factor authentication and reputable providers to keep personal data secure, and we limit access to people who need it.
Your rights
Under data protection law you have the right to:
- Access the data we hold about you
- Have it corrected or deleted
- Restrict how we use it
- Receive it in a portable format
- Object to processing based on legitimate interests, including direct marketing
- Withdraw consent at any time, without affecting earlier processing
To use any of these rights, email info@miles-eight.com. We may ask you to confirm your identity and will reply within one month.
Complaints
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office (ico.org.uk) or to the data protection authority in the country where you live or work.
Changes to this policy
We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.