Last updated: December 2025
Introduction
Gorilla Jobs UK Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. We are a specialist dental recruitment agency operating in the United Kingdom.
This privacy policy explains how we collect, use, store, and protect your personal data when you use our services, visit our website, or otherwise interact with us. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
Please read this policy carefully to understand our practices regarding your personal data. By engaging with our services or providing us with your personal data, you acknowledge that you have read and understood this privacy policy.
Data Controller
For the purposes of data protection legislation, the data controller is:
Gorilla Jobs UK Ltd
Manchester, United Kingdom
Email: accounts@gorillajobs.co.uk
Website: www.gorillajobs.co.uk
Gorilla Jobs Ltd is part of the Gorilla Jobs group, with our parent company Gorilla Jobs Pty Ltd based in Australia.
What Personal Data Do We Collect?
We collect and process personal data that is necessary for our dental recruitment services. The types of personal data we may collect include:
Identity and Contact Information
- Full name and title
- Postal address
- Email address
- Telephone number(s)
- Date of birth
- National Insurance number (where required for employment)
Professional Information
- Curriculum vitae (CV) and employment history
- General Dental Council (GDC) registration details
- Professional qualifications and certifications
- Continuing Professional Development (CPD) records
- Professional indemnity insurance details
- Referee names and contact details
- Reference check results
Right to Work Information
- Proof of identity (passport, driving licence)
- Right to work documentation and visa status
- Immigration status
Compliance and Background Information
- Disclosure and Barring Service (DBS) check results
- Immunisation and health screening records (where required for dental practice)
- Hepatitis B vaccination status
Employment Preferences
- Salary expectations
- Availability and preferred working hours
- Geographic preferences
- Type of role sought (permanent, locum, part-time)
Special Category Data
In some circumstances, we may need to collect special category data (sensitive personal data), such as:
- Health information relevant to your ability to perform dental work
- Information about disabilities where reasonable adjustments may be required
We will only process special category data where we have a lawful basis to do so and, where required, your explicit consent.
How Do We Collect Your Personal Data?
We collect personal data through various means:
Directly from You
- When you register with us or submit your CV
- When you apply for positions through our services
- During telephone conversations, video calls, or face-to-face meetings
- Through correspondence via email, post, or messaging
- When you complete forms or questionnaires
- Through our website contact forms
From Third Parties
- Referees you have nominated
- The General Dental Council (GDC) for registration verification
- Disclosure and Barring Service (DBS) for background checks
- Professional networking sites such as LinkedIn
- Job boards where you have published your details
- Previous employers (with your consent)
- Publicly available professional registers and directories
Legal Basis for Processing Your Personal Data
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
Consent
Where you have given us clear consent to process your personal data for specific purposes, such as receiving marketing communications about job opportunities.
Contract Performance
Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract. This includes processing your data to match you with suitable dental positions and facilitate placements.
Legal Obligation
Where processing is necessary to comply with our legal obligations, such as verifying right to work, maintaining records for tax purposes, or responding to regulatory requests.
Legitimate Interests
Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms. Our legitimate interests include:
- Providing recruitment services and matching candidates with suitable positions
- Verifying candidate qualifications and professional standing
- Conducting due diligence to protect our clients' interests
- Managing our business operations and improving our services
- Preventing fraud and ensuring security
Special Category Data
Where we process special category data, we rely on the following additional conditions:
- Your explicit consent
- Processing necessary for employment law obligations (such as health and safety requirements)
- Processing necessary for occupational medicine purposes
How Do We Use Your Personal Data?
We use your personal data for the following purposes:
Recruitment Services
- Assessing your suitability for dental positions
- Matching you with appropriate job opportunities
- Presenting your CV and professional details to prospective employers (with your consent)
- Arranging interviews and facilitating the recruitment process
- Managing placements and post-placement follow-ups
Verification and Compliance
- Verifying your GDC registration and professional qualifications
- Confirming your right to work in the United Kingdom
- Conducting reference checks
- Facilitating DBS checks where required
- Conducting due diligence searches using publicly available information
Communication
- Informing you of suitable job opportunities
- Providing updates on your applications
- Responding to your enquiries
- Sending service-related communications
Business Operations
- Maintaining accurate business records
- Managing complaints and disputes
- Complying with legal and regulatory requirements
- Improving our services and processes
Who Do We Share Your Personal Data With?
We may share your personal data with the following categories of recipients:
Clients and Prospective Employers
We will share your CV and relevant professional information with dental practices, clinics, and other healthcare providers who are seeking to fill positions. We will always obtain your express consent before presenting your details to a specific employer.
Service Providers
- IT service providers and recruitment management system providers (including JobAdder)
- Cloud storage providers
- Background checking services
- Reference verification services
Professional Bodies and Regulators
- General Dental Council (GDC) for registration verification
- Disclosure and Barring Service (DBS)
- Information Commissioner's Office (ICO) if required
- Other regulatory bodies as required by law
Group Companies
We may share your personal data with our parent company, Gorilla Jobs Pty Ltd (Australia), and other group entities for internal administrative purposes and to support our recruitment services.
Legal and Professional Advisers
We may share your data with our legal advisers, accountants, auditors, and insurers where necessary for legal or business purposes.
Law Enforcement and Authorities
We may disclose your personal data where required by law, court order, or regulatory requirement, or to protect our legal rights or the rights of others.
International Transfers of Personal Data
As part of the Gorilla Jobs group, your personal data may be transferred to, stored, or processed in countries outside the United Kingdom, including Australia, where our parent company is based.
When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place to protect your data, including:
- Transfers to countries recognised by the UK Government as providing adequate data protection
- Use of UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs) with UK Addendum
- Implementation of supplementary measures where necessary
You may request further information about the safeguards we use for international transfers by contacting us.
How Long Do We Keep Your Personal Data?
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.
Our standard retention periods are:
- Active candidates: We retain your data for as long as you remain registered with us and actively seeking opportunities, plus 2 years from your last interaction with us.
- Placed candidates: We retain placement records for 6 years from the end of the placement to comply with legal and contractual obligations.
- Unsuccessful applicants: We retain your data for 12 months, after which it will be securely deleted unless you consent to us retaining it for future opportunities.
- Financial records: We retain records required for tax and accounting purposes for 7 years as required by law.
We may retain data for longer periods if required by law or where there is an ongoing legal dispute or investigation.
How Do We Protect Your Personal Data?
We are committed to ensuring your personal data is secure. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.
Our security measures include:
- Centralised storage of all recruitment records in secure, cloud-based systems
- Prohibition of local storage of personal data on individual devices
- Multi-factor authentication (MFA) for all system access
- Regular password updates and strong password policies
- Encryption of data in transit and at rest
- Access controls limiting data access to authorised personnel only
- Regular security assessments and staff training
- Secure disposal of records when no longer required
When presenting your information to prospective employers, we use formatted documents that redact your personal contact details to protect your privacy until such time as you consent to their release.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it. This is commonly known as a "Subject Access Request" (SAR).
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent. This is also known as the "right to be forgotten".
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller where technically feasible.
Right to Object
You have the right to object to our processing of your personal data where we rely on legitimate interests as our legal basis, or where we process your data for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you. We do not currently use fully automated decision-making in our recruitment processes.
Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Exercising Your Rights
To exercise any of your rights, please contact us at accounts@gorillajobs.co.uk. We will respond to your request within one month. In complex cases, we may extend this by a further two months, but we will inform you if this is necessary.
There is no fee for exercising your rights, although we may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with us. Please contact us at accounts@gorillajobs.co.uk and we will investigate your concerns.
We will acknowledge receipt of your complaint within 5 working days and aim to provide a full response within 28 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on our website with an updated revision date.
Where changes are significant, we will notify you by email or through a prominent notice on our website. We encourage you to review this policy periodically.
Cookies and Website Usage
When you visit our website, we may collect certain information automatically, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our website.
What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help us recognise you and remember your preferences, analyse how our website is used, and deliver relevant content.
Types of Cookies We Use
- Essential cookies: Required for the website to function properly. You cannot opt out of these.
- Analytics cookies: Help us understand how visitors use our website so we can improve it.
- Marketing cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, blocking certain cookies may affect the functionality of our website.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.
Contact Us
If you have any questions about this privacy policy or our data protection practices, please contact us:
Gorilla Jobs UK Ltd
Specialist Dental Recruitment
Manchester, United Kingdom
Email: accounts@gorillajobs.co.uk
Website: www.gorillajobs.co.uk
Part of the Gorilla Jobs Group
Parent Company: Gorilla Jobs Pty Ltd (Australia)
© 2025 Gorilla Jobs UK Ltd. All rights reserved.