Privacy Policy
Wave Group
Website Privacy Notice
Version: 0.1
Last Updated: 30th June 2026
Who we are
We are the Wave Group (“Wave”, “we”, “us”, “our”) consisting of:
Wave Talent Limited, company number 12273522
Registered address: Ground Floor & Lower Ground Floor, 14 Bonhill Street, London, England, EC2A 4BX
Information Commission (“IC”) Controller registration number: ZA823282
Data Protection Officer: Evalian Limited, West Lodge, Leylands Business Park, Colden Common, Hants, SO21 1TH. Email: dpo@evelian.co.uk. Tel: 03330 500 111
We are committed to the protection of the personal data we process in line with the data protection principles set out in the UK General Data Protection Regulation and the Data Protection Act 2018.
Under GDPR we will ensure that your personal data is processed lawfully, fairly, and transparently, without adversely affecting your rights.
What we do
We are a specialist recruitment agency that helps companies scale their technology, product and design teams. We act as a strategic partner to build engineering teams, offering services that include candidate sourcing, salary benchmarking and temporary or permanent hiring solutions.
We are committed to protecting the privacy and security of the Personal Data we process about you.
Wave are the Controller of the Personal Data we process, as such we determine why and how we process Personal Data.
Purpose of this privacy notice
The purpose of this privacy notice (“this notice”) is to explain what Personal Data we collect about you and how we process it. This notice also explains your rights, so please read it carefully. If you have any questions, you can contact us using the information provided below under the ‘How to contact us’ section.
Who this notice applies to
This notice applies if you:
● visit our website
● enquire about our services
● subscribe to receive our marketing, newsletters or recruitment updates, or
● use our recruitment services as a client or candidate.
Employee and job applicant privacy notices are separate from this notice and will be provided at the appropriate time.
What is personal data?
‘Personal Data’ means any information from which someone can be identified either directly or indirectly. For example, you can be identified by your name or an online identifier.
‘Special Category Personal Data’ is more sensitive Personal Data including information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purposes of uniquely identifying someone, data concerning physical or mental health or data concerning someone’s sex life or sexual orientation. In the course of recording and transcribing calls, we may process special category personal data. However, we do not intentionally seek to collect this information.
Personal data we collect
The types of Personal Data we collect from clients and candidates will depend on our relationship with you, but may include your:
● Name
● Email address
● LinkedIn URL
● Mobile number
● Demographic information such as gender and location to tailor our recruitment services
● User preferences and interests to personalise the recruitment experience and offer suitable opportunities
● Website usage information such as IP address, browser type and device information to enhance the performance and functionality of our website
● Company name
● Any other personal data you choose to provide through our communication channels, via the free-text box on our website or through interactions with our team
How we collect your Personal Data
We collect most Personal Data directly from you in person, by telephone, email, via our website or social media channels. However, we may also collect your Personal Data from third parties such as:
● through events and webinars
● reputable companies who provide lead generation contact lists
● others to whom you have provided consent to share your contact details and
● publicly available sources such as social media platforms.
A list of our suppliers is available upon request.
Purposes for which we use Personal Data and the legal bases
We will only use your Personal Data when the law allows. Most commonly, we will use your Personal Data in the following circumstances:
Purpose
Lawful Bases for Processing
Responding to correspondence from you
It is in our legitimate interest to respond to enquiries made via our website, by email, through our social channels or any other means
To provide and deliver our recruitment and related services to you
Processing client and candidate personal data is necessary for performance of the contract to which we are party
It is our legitimate interest to automatically record and transcribe audio conversations to facilitate our recruitment services
To process your financial transactions and fulfil any orders or service requests
Processing client and candidate contact personal data is necessary for performance of the contract to which we are party
Business management, forecasting and statistical purposes
It is our legitimate interest to identify areas for managing current business relationships, develop our services and for managing our business
Improving our website and the overall visitor and user website experience
It is our legitimate interest to allow analytics and search engine providers to help improve and optimise our website
Improving our website and the overall visitor and user website experience
We use cookies on our website with your consent. Cookies can be managed using your browser settings
Prevention and detection of crime, including money laundering, fraud, or other crimes
We have a legal obligation to report any such activity to the relevant authorities and regulators
To send you service and marketing communications
We rely on our legitimate interests to send you information regarding appointment reminders, account notifications and other relevant information. We rely on consent to send you marketing communications. This consent may be withdrawn at any time by emailing mydata@wavetalent.co or by contacting us by telephone, email or via our social media platforms (LinkedIn, Instagram, YouTube)
Analyse and track users of our website for reporting and analytical purposes
It is our legitimate interest to monitor our website usage in order to continually improve the user experience
Wave Mind
Our Wave Mind platform uses artificial intelligence (“AI”) technology provided by Anthropic (Claude) to assist with candidate job matching as part of our recruitment services. Where appropriate, we may combine information contained within candidate CVs, application materials, LinkedIn profiles/other online sources and transcripts of recruitment-related conversations or interviews to generate a structured candidate profile. This profile is then analysed against job requirements and role criteria held within our recruitment platform to identify potential matches and support recruitment recommendations. This processing involves automated analysis of Personal Data; however, AI-generated outputs are used as a decision-support tool and are reviewed by authorised recruitment personnel before any recruitment decisions are made. Personal Data processed through Claude is used only for the purposes of recruitment, candidate assessment and role matching and is not used to train Anthropic’s general AI models.
Where recruitment-related telephone, video or online conversations are recorded, the audio may be automatically transcribed using AI and analysed as part of the candidate assessment and role matching process described above (candidates may opt out of automatic transcription at the start of calls). As CVs, application materials and conversation transcripts may contain special category data (see above under ‘What is Personal Data?’), we request that candidates avoid providing such information unless it is necessary for the recruitment process.
Sharing your Personal Data
We may share your personal data with third parties in the following circumstances:
● Service Providers: We may engage trusted third-party service providers to assist us in delivering our services and conducting our business operations. These service providers are contractually obligated to protect your personal data and can only process it in accordance with our instructions.
● Legal Compliance: We may disclose your personal data if required by law or in response to valid legal requests, such as court orders or government regulations.
● Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
We will not sell, rent, or lease your personal data to third parties for their marketing purposes without your explicit consent.
We will share your Personal Data outside the United Kingdom and the European Economic Area (the EU member states plus Norway, Iceland and Liechtenstein – the “EEA”). This is necessary for the purposes of providing our services to you, but we will only share it where appropriate safeguards are in place to ensure your Personal Data is protected to the same standard expected within the UK and EEA. See ‘International Transfers’, below.
Our Website includes links to our social media pages which enable you to view our content through selected sites (LinkedIn, Instagram, YouTube). These applications may collect your IP address or Device ID and may set a cookie on your device. When you use one of these links, you are sharing information to another website or service and this privacy policy will no longer apply. Please read the privacy notices provided by the particular social media website you are sharing through before posting any personal information using these links.
How long we keep your data
We will retain your Personal Data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
At the end of the retention period, your Personal Data will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.
International Transfers
Your Personal Data will be processed outside the UK and EEA. Therefore, we will take appropriate steps to ensure the Personal Data processed has an essentially equivalent level of protection to that guaranteed in the UK. We will do this by ensuring that:
● Your Personal Data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation), or
● We enter into an International Data Transfer Agreement (“IDTA”) with the receiving organisation. (A copy of the IDTA can be found here international-data-transfer-agreement.pdf (ico.org.uk)).
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your rights and how to complain
You have certain rights in relation to the processing of your Personal Data, including to:
● Right to be informed
You have the right to know what personal data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use our privacy notice to explain this.
● Right of access (a “Subject Access Request”)
You have the right to receive a copy of the Personal Data we hold about you.
● Right to rectification
You have the right to have any incomplete or inaccurate information we hold about you corrected.
● Right to erasure
You have the right to ask us to delete your Personal Data.
● Right to object to processing
You have the right to object to us processing your Personal Data. If you object to us using your Personal Data for marketing purposes, we will stop sending you marketing material.
● Right to restrict processing
You have the right to restrict our use of your Personal Data.
● Right to portability
You have the right to ask us to transfer your Personal Data to another party.
● Automated decision-making. You have the right not to be subject to a decision based solely
on automated processing which will significantly affect you. We do not use automated decision-making.
● Right to withdraw consent
If you have provided your consent for us to process your Personal Data for a specific purpose, you have the right to withdraw your consent at any time. If you do withdraw your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we are permitted by law to do so.
● Right to register a complaint with the Controller
In the UK, you have the right to register a complaint with the Controller of your personal data if you believe it has been mishandled or processed unlawfully.
● Right to register a complaint with the relevant supervisory authority
You have the right to register a complaint with the IC if you have exhausted our internal complaints procedure and you still remain concerned about the way in which we are handling your Personal Data. The IC can be contacted online at:
ICO | Make A Complaint
or by telephone on 0303 123 1113
How to exercise your rights
You will not usually need to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee if your request is manifestly unfounded or manifestly excessive. Alternatively, we may refuse to comply with the request in such circumstances.
If you wish to exercise your rights, you may contact us using the details set out in the ‘Contact us’ section, below. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will process your request without undue delay and in any event within one month. In some cases, such as complex requests, it may take us longer than this and, if so, we will keep you updated.
Contact us
If you wish to contact us in relation to this privacy notice or if you wish to exercise any of your rights outlined above, please contact us as follows:
Wave Talent - 14 Bonhill Street, London, EC2A 4BX or mydata@wavetalent.co
Changes to this privacy notice
We may update this notice from time to time as shown at the top of this notice. We will notify you of the changes where required by applicable law to do so.
