Privacy Policy

Privacy Policy

Last updated: 2026-04-29

This policy explains how Hire Stack Limited ("Hire Stack", "we", "our", "us") collects, uses, and protects personal data. It applies to visitors to hirestack.co.uk and to customers using the Hire Stack recruitment CRM.

Who we are

Hire Stack Limited is the data controller for personal data collected through hirestack.co.uk. We are registered in England and Wales, company number 15670387, with our registered office at Trafalgar House, Malpas Road, Truro, England, TR1 1QH.

For data processed inside the Hire Stack CRM on behalf of our customers (recruiters processing candidate data), Hire Stack is the data processor and the customer is the controller. A Data Processing Addendum (DPA) is available on request.

What we collect

  • Contact form submissions: name, email, company name, message content. Used to respond to your enquiry and create a sales record in our CRM (Pipedrive).
  • Calendly bookings: name, email, scheduled time, and any answers you provide on the booking form. Processed by Calendly Inc. on our behalf.
  • Analytics: anonymised usage data (page views, clicks, viewport, approximate location from IP) collected via PostHog. Used to improve the site.
  • Cookies: essential cookies for site function and anti-bot protection (Cloudflare Turnstile). PostHog uses first-party cookies for session continuity.

Lawful basis

We process contact form data on the basis of legitimate interest (responding to your enquiry) or consent (where you have explicitly opted in to marketing communications). We process analytics data on the basis of legitimate interest in improving the service.

Sub-processors

We use the following sub-processors:

  • Vercel Inc. — site hosting and edge delivery.
  • SendGrid (Twilio Inc.) — transactional email.
  • Pipedrive OÜ — sales CRM for enquiry handling.
  • PostHog Inc. — product and site analytics.
  • Calendly LLC — meeting scheduling.
  • Cloudflare Inc. — anti-bot challenge (Turnstile).

How long we keep data

Contact form data is retained for up to 24 months after last contact, then deleted. Analytics data is retained for up to 12 months. Customer data inside the CRM is retained for the duration of the customer contract plus 30 days, then deleted.

Your rights

Under UK GDPR you have the right to access, correct, delete, port, and object to processing of your personal data. To exercise any of these rights, email privacy@hirestack.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We will update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.