Privacy Policy – Invitise Ltd (Including M-IFS) Last Updated: 01 January 2026

WHAT DO WE DO?

Invitise Ltd (“Invitise”) provides permanent, temporary, and interim recruitment and talent services to clients seeking to recruit professional staff across a range of specialist areas.

Invitise Ltd also operates:
• Right Matters →, a careers coaching and mentoring service initiative owned and delivered by Invitise Ltd
• The Multi-Faith Inclusive Framework Standard (M-IFS), a workplace inclusion framework and assessment standard supporting organisations to demonstrate inclusive, faith-aware employment practices

All services are delivered in line with applicable UK data protection law and Invitise Ltd’s ISO 9001 certified Quality Management System.

WHAT DOES THIS POLICY COVER?

This Privacy Policy explains:

• The types of personal data we collect about you

• How and why we collect and use your personal data

• How long we keep your personal data

• When, why, and with whom we share your personal data

• The legal basis we have for processing your personal data

• Your rights and choices regarding your personal data

• How we may contact you and how you can contact us

This Privacy Policy may be updated from time to time. Please check this page periodically to stay informed of any changes.

WHO ARE YOU?

We collect and process personal data from the following types of individuals:

• Candidates (existing or prospective)

• Clients (existing or prospective)

• Users of our website

• Referees or emergency contacts provided by candidates or staff

• Suppliers to our organisation

• Invitise employees, contractors, or interim workers

• Individuals & Organisations engaging with Right Matters → career coaching and mentoring services

• Organisations applying for Multi-Faith Inclusive Framework Standard (M-IFS) accreditation

WHO IS THE DATA CONTROLLER?

Invitise Ltd is the Data Controller and determines the purposes and means of processing personal data.

• Company No: 13345316

• VAT No: 381151123

• Head Office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

• Contact No: +44 (0)345 163 0135

• Email: dataprotection@invitise.com

• ICO Registration No: ZB058757

WHAT IS PERSONAL DATA?

Personal Data includes any information that identifies a living individual, such as:

Personal data means any information relating to an identified or identifiable individual, including:

• Names, contact details, and identifiers
• Employment history, qualifications, and role information
• CVs and application data
• Special category data (e.g. health, religious belief, diversity information), processed only where lawful and necessary

LEGAL BASIS FOR PROCESSING PERSONAL DATA

We primarily rely on legitimate interests as our lawful basis for processing personal data, including in relation to:

• Recruitment and talent services

• Client and supplier relationship management

• Website users and business contacts

• Right Matters → coaching and mentoring engagement

• M-IFS framework engagement and assessments

Where required, we may also rely on:

• Contractual necessity
• Legal obligation
• Explicit consent (e.g. for special category data)

We carry out legitimate interest assessments where appropriate to ensure individual rights are not overridden.

HOW WE USE YOUR DATA

For candidates and individuals:

•  Matching skills and experience with opportunities

• Providing recruitment, coaching, mentoring, and career-related services

• Personalising communications and support

• Conducting eligibility and compliance checks

For clients and suppliers:

• Managing contractual and commercial relationships

• Resolving queries, disputes, or compliance matters

• Ensuring operational security and continuity

For M-IFS engagement:

• Reviewing organisational submissions and supporting documentation

• Managing assessment, review, and framework-related processes

• Maintaining records of engagement and compliance activity

DATA USE RELATING TO M-IFS

The Multi-Faith Inclusive Framework Standard (M-IFS) is operated by Invitise Ltd under an ISO 9001 certified Quality Management System.

Personal and organisational data may be processed for the purposes of:

• Framework engagement
• Assessment and review activity
• Ongoing compliance and quality assurance

All data is processed in accordance with UK GDPR and Invitise Ltd’s internal policies.

WHERE WE SOURCE PERSONAL DATA

We may obtain personal data from:

•  Direct interactions with you

• Publicly available sources (e.g. LinkedIn, job boards)

• Referrals or third-party introductions

• Reputable third-party data providers

Occasionally, we may purchase data from reputable providers, such as data marketing companies or CV databases. Such data is processed under legitimate interest, and individuals will be informed of their rights, including the right to object or request deletion.

DATA RETENTION PERIOD

We retain personal data for as long as necessary to:

• Provide services

• Meet legal and regulatory obligations

• Establish, exercise, or defend legal claims

Where no meaningful contact occurs over a reasonable period, data is securely deleted. Records of deletion requests may be retained for compliance purposes.

INTERNATIONAL DATA TRANSFERS

Personal data may be processed outside the UK or EEA only where:

• An adequacy decision applies, or

• Appropriate safeguards are in place (e.g., Standard Contractual Clauses)

COOKIES AND IP ADDRESS POLICY

IP Addresses: Collected for system administration, security, and statistical analysis. They do not directly identify individuals.

Cookies: Used to improve website functionality and user experience. Full details are provided in our Cookie Policy.

You can manage cookies through browser settings. Further guidance is available at https://www.allaboutcookies.org

MARKETING COMMUNICATIONS & (LEGITIMATE INTEREST & SOFT OPT-IN)

We may send recruitment, service-related, or professional communications where:

•  You have engaged with us professionally, or

• You have submitted a CV, enquiry, or application

Marketing is conducted under legitimate interests and soft opt-in rules, with a clear right to opt out at any time.

You can unsubscribe via email links or by contacting us directly.

FEES FOR EXCESSIVE DATA REQUESTS

We may charge a reasonable fee for manifestly unfounded, excessive, or repeated data requests.

YOUR RIGHTS

You have the following rights concerning your personal data:

• Be informed

• Access your data

• Rectify inaccurate data

• Request erasure (subject to legal obligations)

• Restrict processing

• Data portability

• Object to processing (including marketing)

• Withdraw consent

COMPLAINTS

If you have concerns about how your data is processed, please contact us at dataprotection@invitise.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

M-IFS is operated by Invitise Ltd under a Quality Management System aligned with ISO 9001:2015. M-IFS™ is a trademark of Invitise Ltd.