Data & Privacy Policy

1. What is CompliChef Recruit?

CompliChef Recruit is a hospitality recruitment platform operated by CompliChef, a trading name of Nicholas Richards. It enables employers in the food service, catering, and hospitality industry to post vacancies and receive applications from candidates.

CompliChef provides the technology that enables employers and candidates to connect. We do not make hiring decisions. Our data-protection role depends on the processing: we act as controller for our own account administration and platform operation, and as processor where we handle recruitment data on an employer’s or agency’s instructions.

2. Who is the Data Controller?

The employer or recruitment agency receiving your application determines how it uses that information for recruitment and is responsible as a data controller for that processing. This means:

• The employer determines why and how your personal data is used in recruitment
• The employer is responsible for retaining or deleting your data after recruitment ends
• To exercise your rights (access, deletion, correction), contact the employer directly
• The employer must comply with all applicable data protection legislation

CompliChef (Nicholas Richards) acts as a data processor when storing and transmitting application data on the advertiser’s instructions. Separately, we are responsible as controller for processing we determine ourselves, such as candidate account administration, authentication, support, platform security and billing. These roles are described in the central privacy policy. A data-processing agreement for employer-instructed processing can be requested from privacy@complichef.co.uk.

3. What Data is Collected When You Apply?

When you submit an application through CompliChef Recruit, the following data may be collected:

• Full name, email address, phone number, and location
• CV / résumé (if uploaded)
• Cover letter or personal statement
• Certificates and qualifications (if provided)
• References (if provided)
• Answers to any screening questions set by the employer

4. How Your Data is Used

By the Employer

The employer will use your application data to:

• Review your suitability for the role
• Contact you regarding interview scheduling
• Make a hiring decision
• Retain records in line with their legal obligations

By CompliChef

For the application service, CompliChef processes data to:

• Deliver your application to the correct employer
• Store your application securely on their behalf
• Send you notifications related to your application (e.g. interview invitations)
• Provide technical support if required

We do not sell personal data. Where an employer uses Alice CV analysis, it involves the evaluation described below. Our own account, security, support and billing processing is explained in the central Privacy Policy.

5. Alice AI — CV Analysis

Some employers on CompliChef Recruit use Alice AI, an AI-powered tool that analyses candidate CVs to assess keyword relevance and provide hiring insights. If an employer uses this feature:

• Your CV text is sent to Anthropic (Claude AI) for analysis
• Anthropic processes this data as a sub-processor under CompliChef's data agreement
• The analysis result is provided to the employer — it is advisory only
• No AI-generated analysis replaces human decision-making in the hiring process
• AI-provider handling and international-transfer arrangements are described in the central Privacy Policy; model-training restrictions do not mean that no processing or retention occurs

Alice also assists employers with drafting job adverts. The role brief and relevant job details are sent to Anthropic to generate a draft. Employers should avoid including unnecessary personal or confidential information and must check the output before publication.

Public job adverts, company information, skills tags and advertised accommodation can be indexed by search engines and shared through job links. Sharing a public job link does not make candidate applications public. Third-party sharing services handle information under their own privacy policies.

6. Data Retention

Application data is retained on the CompliChef platform for as long as the employer's account remains active, or until they delete the application. CompliChef may delete inactive application data after 24 months of inactivity.

Employers are responsible for ensuring they do not retain candidate data beyond what is necessary for recruitment.

7. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the data held about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how your data is processed
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise your rights regarding an application, contact the employer directly. To request deletion of your CompliChef platform data, use the contact details below.

8. Employer Responsibilities

• Use candidate data only for legitimate recruitment purposes
• Not share candidate data with unauthorised third parties
• Respond to candidate data subject requests promptly and lawfully
• Delete candidate data when it is no longer required for recruitment
• Comply with UK GDPR, the Data Protection Act 2018, and applicable employment law
• Maintain appropriate technical and organisational security measures
• Notify CompliChef of any data breaches involving candidate data without undue delay

Employers who misuse candidate data may have their account suspended or terminated.

9. Security

CompliChef uses industry-standard security measures including encrypted connections (TLS), access controls, and regular security reviews. No system is completely secure and we cannot guarantee absolute security of data transmitted over the internet.

10. Cookies

The application form uses session cookies to maintain your form state during submission. These are strictly necessary and do not track you across other websites.

11. Contact & Complaints