Privacy Policy — GTM People

Last updated: August 2026. GTM People is a trading brand of H2 International Ltd, a company registered in England & Wales (company number 11968625). This policy applies to all candidates and is binding on candidates who submit CVs and other materials ("Information") to us. Please only send us your CV if you agree to be bound by this Privacy Policy.

We are committed to protecting the privacy of everyone who uses our services. We give you our assurance that any personal information you provide is processed with due care and under secure conditions, and that our procedures comply with the UK GDPR and the Data Protection Act 2018 (together, "the Act"). In this policy, your Information is sometimes referred to as "personal data". H2 International Ltd is the data controller for your Information; you can reach us at hello@gtm-people.com or +44 20 3841 2600.

1. Authorisation to process your Information

You are invited to send us your Information in the form of a CV (with a covering note if you wish) which you believe may be of interest to prospective employers who are our clients. By submitting it, you authorise GTM People to use, store and otherwise process the Information you submit — including your name, contact details and anything contained in your CV and covering note — in order to provide you with the opportunity of attracting job offers from prospective employers.

2. How we use your Information

We collect personal data including your name, email, phone and LinkedIn, plus the data contained in your Information, and may use it to:

match your details, preferences and experience with vacancies to help find the position that best suits you;
evaluate you as a candidate and decide whether to invite you to interview with our consultants;
keep you informed of GTM People's services, roles and relevant developments in your field; and
compile salary and market surveys (in aggregated form).

Our lawful bases for processing are your consent (given via the application tick box) and our legitimate interests in providing recruitment services. We may edit your Information into a standard format for consistency and ease of reference.

3. Disclosure of your Information

We will obtain your consent before sending your CV or details to any prospective employer. We only share your data with the service providers that operate our systems (for example our CRM and email delivery). If our business is sold or integrated with another business, your Information may be passed to the new owners and their advisers. We never sell your data.

4. How long we keep it (retention)

We keep candidate data for as long as it is useful for the recruitment relationship, and review it periodically.

Introductions and placements. Where we have introduced you to, or represented you to, one of our clients, we retain a record of that introduction and the associated data for as long as necessary to protect our legitimate business and contractual interests — for example, to evidence that an introduction was made and to enforce the terms of business that apply to it. Such records are retained on the basis of our legitimate interests and legal obligations and are not subject to deletion on request while that interest subsists.

5. Job alerts

If you subscribe to job alerts you provide your email address so we can keep you informed of the latest relevant vacancies. Every job-alert email contains an unsubscribe link, and you can opt out at any time.

6. Your rights

Under the Act you have the right to access, correct, restrict or object to the processing of your data, to data portability, and (subject to the retention exceptions in section 4) to have your data deleted. To exercise any of these, or to request a copy of the data we hold about you, email hello@gtm-people.com; we aim to respond within 14 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to resolve your concern first.

7. Security

We have put in place appropriate technical and organisational measures to protect your Information. Our systems are operated on infrastructure provided by Supabase and Cloudflare, both of which are independently certified to ISO/IEC 27001 and SOC 2 Type II, and your data is stored behind secured networks accessible only to authorised personnel. However, due to the nature of the internet, no transmission of data can be guaranteed to be completely secure, and any transmission is at your own risk.

8. Third-party links

Our website — including our Partners & Perks area — may contain links to third-party websites, tools and services. Clicking those links may allow the third party to collect or share data about you. We do not control those websites and are not responsible for their privacy practices. When you leave our site, we encourage you to read the privacy policy of every website you visit.

9. Cookies & analytics

Our website uses strictly necessary cookies to function and privacy-friendly analytics (Google Analytics) to understand, in aggregate, how visitors use the site. Analytics data does not identify you personally. You can control or block cookies through your browser settings.

10. Changes to this policy

We may change this Privacy Policy at any time. Any changes will be posted here so that you always know what information we gather, how we use it, and to whom we may disclose it.

11. Contact

Questions about this policy or about your data can be sent to hello@gtm-people.com or by post to our registered address. Switchboard: +44 20 3841 2600.

← Back to GTM People