Last updated: 24/08/2026
Pineapple Careers (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use and store it, who we share it with, and the rights you have over it. It applies to our website and to any direct contact with our team.
Who we are
Pineapple Careers is the data controller for the personal data described in this policy. This means we decide how and why your data is processed.
- Company: Pineapple Careers Limited
- Address: Bruce Allen Llp Ground Floor Suite Crown House, 40 North Street, Hornchurch, United Kingdom, RM11 1EW
- General enquiries: [email protected]
- Data protection contact: [email protected]
- ICO registration number: ZB196684
The data we collect
Depending on how you interact with us, we may collect:
- Identity and contact details — your name, email address and telephone number(s).
- Recruitment information — your CV and its contents (which may include employment history, qualifications, references and other details you choose to include).
- Application details — the specific role you apply for and any information you provide with an application.
- Website usage data — see the Cookies and analytics section below.
Please avoid including special category data in your CV (for example information about health, ethnicity, religion, or trade union membership) unless it is genuinely relevant to an application. Where we do process such information, we rely on explicit consent, or the employment condition under Article 9(2)(b) UK GDPR.
How we collect it
- Directly from you — when you submit your CV, apply for a role, or contact us.
- Through our website — via our contact form and, where applicable, our job-application feature.
- Through job boards – such as Indeed, LinkedIn, Reed, Cv Library, Total Jobs.
How you can submit your CV
Via the website contact form. Our contact form sends your message and any attached CV directly to our team by email. Your CV is not stored on the website itself.
Via a job application. Where you apply for an advertised vacancy through our website, your application is sent to our team by email. Your CV is not stored on the website.
By emailing us directly. You can email our team at [email protected].
In each case, your CV is received by our team and, where you are put forward for a role, stored securely in Microsoft 365, accessible only via secure login.
Why we use your data, and our lawful basis
Under UK data protection law we must have a lawful basis for each purpose. Ours are:
Purpose Lawful basis Assessing your requirements and matching you to vacancies; helping you find a position Legitimate interests (providing our recruitment service to you) Sending your CV to a prospective employer Legitimate interests (providing the recruitment service you have engaged us for). As a matter of practice, we will always seek your agreement before sending your CV to a specific client. Contacting you by email, SMS or phone about vacancies we believe may interest you Consent (you can withdraw this at any time) Keeping you informed about our services (marketing) Consent Internal record-keeping and maintaining our business relationship with you Legitimate interests Compiling salary and market surveys (using aggregated, non-identifying data) Legitimate interests Complying with legal or regulatory obligations, including lawful requests from authorities Legal obligation Where we rely on legitimate interests, we have considered your rights and interests and believe our processing does not override them. You can ask us for more detail on this assessment, and you have the right to object (see Your rights).
Where we rely on consent, you can withdraw it at any time by emailing [email protected]. Withdrawing consent does not affect processing carried out before you withdrew it.
Who we share it with
We share personal data with:
- Prospective employers — your CV is sent to an employer only where the lawful basis above applies.
- Microsoft (Microsoft 365) — our secure cloud storage and email provider.
- Google (Google Analytics 4) — website analytics (see Cookies and analytics).
- BlueGlass Interactive AG (Switzerland) — our website’s job-application feature (“Job Postings” plugin). It is configured not to retain applicant data: applications are processed solely to notify our team by email and are then deleted. In the rare event of an email delivery failure, an application may be stored temporarily on our website until we retrieve it and delete it manually.
- Brevo — our transactional email provider, used to deliver notifications reliably (see International transfers).
- Regulatory or law-enforcement bodies — where we are required to by law.
We require our service providers to protect your data and to use it only for the purposes we specify.
International transfers
Some of our providers (including Microsoft and Google) may process data outside the UK, including in the United States. Where data is transferred outside the UK, we rely on appropriate safeguards — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum — so that your data receives an equivalent level of protection. BlueGlass Interactive AG is based in Switzerland, and Brevo is based in the European Union; both are covered by UK adequacy regulations.
Cookies and analytics
Our website uses cookies and similar technologies:
- Strictly necessary cookies — needed for the site to function (for example, security and form submission). These do not require your consent.
- Analytics (Google Analytics 4) — we use GA4 to understand how visitors use the site so we can improve it. GA4 collects information such as pages visited and device/usage data; this is not purely aggregate, so we only set these cookies after you consent.
We manage cookie consent through a consent tool (Complianz), which blocks non-essential cookies — including Google Analytics — until you accept them. You can change or withdraw your choice at any time using the cookie preferences link on our website.
For a full, always-current list of the cookies we use, please see our https://www.pineapplecareers.com/cookie-policy-uk/
How long we keep your data
We keep personal data only as long as necessary:
- CVs of candidates not put forward for a role: deleted shortly after review
- Candidates put forward or placed: retained for 12 months after last contact
- Marketing consents: until you withdraw consent or after 12 months of inactivity.
Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”), in certain circumstances.
- Restrict our processing, in certain circumstances.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Data portability — receive your data in a portable format, in certain circumstances.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these, contact [email protected]. We will respond within one month.
Complaints
If you have a concern about how we handle your data, please contact us first at [email protected] so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator: ico.org.uk, or by calling the ICO helpline.
Links to other websites
Our website may contain links to other sites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. Please review the privacy policy of any site you visit.
Changes to this policy
We may update this policy from time to time. The current version is always available on our website, with the date it was last updated shown at the top.