Data & Privacy Policy

1. What is CompliChef Recruit?

CompliChef Recruit is a hospitality recruitment platform operated by CompliChef, a trading name of Nicholas Richards. It enables employers in the food service, catering, and hospitality industry to post vacancies and receive applications from candidates.

CompliChef acts as the platform provider and data processor. We provide the technology that enables employers and candidates to connect, but we do not make hiring decisions and do not independently use candidate data for any commercial purpose.

2. Who is the Data Controller?

Under UK GDPR and the Data Protection Act 2018, the employer you apply to is the Data Controller for your application data. This means:

• The employer determines why and how your personal data is used in recruitment
• The employer is responsible for retaining or deleting your data after recruitment ends
• To exercise your rights (access, deletion, correction), contact the employer directly
• The employer must comply with all applicable data protection legislation

CompliChef (Nicholas Richards) acts as a Data Processor on behalf of the employer — we store and transmit your application data on their instruction, but we do not control it.

3. What Data is Collected When You Apply?

When you submit an application through CompliChef Recruit, the following data may be collected:

• Full name, email address, phone number, and location
• CV / résumé (if uploaded)
• Cover letter or personal statement
• Certificates and qualifications (if provided)
• References (if provided)
• Answers to any screening questions set by the employer

4. How Your Data is Used

By the Employer

The employer will use your application data to:

• Review your suitability for the role
• Contact you regarding interview scheduling
• Make a hiring decision
• Retain records in line with their legal obligations

By CompliChef

CompliChef uses your data only to:

• Deliver your application to the correct employer
• Store your application securely on their behalf
• Send you notifications related to your application (e.g. interview invitations)
• Provide technical support if required

CompliChef does not use your application data for advertising, profiling, or sell it to any third party.

5. Alice AI — CV Analysis

Some employers on CompliChef Recruit use Alice AI, an AI-powered tool that analyses candidate CVs to assess keyword relevance and provide hiring insights. If an employer uses this feature:

• Your CV text is sent to Anthropic (Claude AI) for analysis
• Anthropic processes this data as a sub-processor under CompliChef's data agreement
• The analysis result is provided to the employer — it is advisory only
• No AI-generated analysis replaces human decision-making in the hiring process
• Anthropic does not retain CV data for model training under our agreement

6. Data Retention

Application data is retained on the CompliChef platform for as long as the employer's account remains active, or until they delete the application. CompliChef may delete inactive application data after 24 months of inactivity.

Employers are responsible for ensuring they do not retain candidate data beyond what is necessary for recruitment.

7. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the data held about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how your data is processed
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise your rights regarding an application, contact the employer directly. To request deletion of your CompliChef platform data, use the contact details below.

8. Employer Responsibilities

• Use candidate data only for legitimate recruitment purposes
• Not share candidate data with unauthorised third parties
• Respond to candidate data subject requests promptly and lawfully
• Delete candidate data when it is no longer required for recruitment
• Comply with UK GDPR, the Data Protection Act 2018, and applicable employment law
• Maintain appropriate technical and organisational security measures
• Notify CompliChef of any data breaches involving candidate data without undue delay

Employers who misuse candidate data may have their account suspended or terminated.

9. Security

CompliChef uses industry-standard security measures including encrypted connections (TLS), access controls, and regular security reviews. No system is completely secure and we cannot guarantee absolute security of data transmitted over the internet.

10. Cookies

The application form uses session cookies to maintain your form state during submission. These are strictly necessary and do not track you across other websites.

11. Contact & Complaints