Hornsman Group
Specialised Security Placement · London
Last updated: 4 September 2026
This policy explains how Hornsman Group (The Hornsman Group Ltd, "we", "us") collects, uses and protects personal information. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The Hornsman Group Ltd (company no. 17249812) is a London recruitment practice specialising in permanent placement for the corporate security sector, and is the data controller for personal data you provide. For any privacy question, contact info@hornsmangroup.com.
We only collect what you choose to give us when you contact us by email or WhatsApp, or when you register with us as a candidate. This website uses no forms, no analytics, and no advertising or tracking cookies. The only processing by our hosting, security and font providers is described in section 10.
Enquiries: your name, contact details, and the content of your message.
Candidates: where you register with us, the information needed to represent and vet you, including work history, references, right-to-work status, and the background checks and vetting required for security roles.
We use your data to respond to you and to provide recruitment services. Our lawful bases are the performance of our arrangement with you, your consent (for sensitive vetting information), our legitimate interest in making placements, and our legal obligations.
Access is strictly limited to those within the firm who handle your enquiry. Where professionally necessary (for example, legal advice, or introducing a candidate to a prospective employer with the candidate's consent), data may be shared in confidence. We do not sell, trade, or share your data for marketing.
Enquiries reach us by email (Proton Mail) and WhatsApp (operated by Meta), and are then held on our own equipment in the United Kingdom. Sensitive vetting information is held securely and is not stored on any public or online system. Where a provider processes data outside the UK, we rely on appropriate safeguards recognised under UK data protection law.
Sensitive vetting information is deleted once a placement is completed and the final fee has been paid, or earlier at your request. We keep only the limited records the law requires, principally financial records for six years, after which those are deleted too. You may ask us to remove your data at any time and we will action it promptly, unless a legal obligation requires us to keep a specific record.
Under UK GDPR you may:
· request a copy of the personal data we hold about you
· ask us to correct anything inaccurate
· ask us to delete your data ("right to be forgotten")
· withdraw your consent at any time
· object to how we process your data
· lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) if you believe your rights have been breached.
To exercise any of these, email info@hornsmangroup.com. We respond within one month.
We take reasonable steps to keep your data secure, including access controls, strong authentication, secure email handling, and reputable providers. No system is ever completely immune to risk, but we treat your data with the same care we extend to every client relationship.
If we change how we handle data, for example by introducing analytics or a new third-party service, we will update this policy and revise the "Last updated" date above before any new processing begins. Where a material change affects information you have already given us, we will notify you directly.
This website is delivered and secured through Cloudflare, Inc., our hosting, content-delivery and security provider. When you visit, your device's IP address and connection metadata are transmitted to Cloudflare so it can route, deliver and protect the site; this is inherent to how any Cloudflare-served website works, and our lawful basis is our legitimate interest in keeping the site available and secure. Cloudflare may also set strictly-necessary security cookies — but only where a specific security feature (such as bot management or rate limiting) is enabled; on a standard configuration such as ours there may be none. Any such cookies are essential to security and do not require consent.
We do not operate our own website analytics, and we use no advertising, marketing or cross-site tracking cookies of any kind. Cloudflare's platform offers an optional, cookieless analytics feature; our website content-security policy prevents any analytics or third-party script from running, so no analytics data is collected from your visit. Nothing on this site profiles you or follows you across other websites.
To display our typefaces, the site loads fonts from Google Fonts. When your browser requests them, Google receives your IP address as an inherent part of delivering the files; Google does not set cookies through this, and we receive no information back. Our lawful basis is our legitimate interest in presenting the site as intended.
Because Cloudflare and Google are US-headquartered providers that may process data outside the United Kingdom, we rely on the safeguards recognised under UK data protection law (including the International Data Transfer Agreement / UK Addendum), and Cloudflare acts as our processor. Cloudflare's cookie list and privacy policy are published at developers.cloudflare.com and cloudflare.com/privacypolicy. If we introduce analytics in future, we will update this policy and the "Last updated" date before any such processing begins.