Privacy Policy

Step First Recruitment & Consulting Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our recruitment and staffing services.

1. Who We Are

Company Name:

Step First Recruitment & Consulting Ltd

Registered Address:

Shop1, Triq ir-Rifug jatiTal-Gwerra, Mosta, MST 385, Malta.
Reg. No.: MT26681237

Website: 

stepfirstrecruitment.com

Email: [email protected]

We operate as a manpower supply and staffing solutions provider in the United Kingdom and internationally.

2. Information We Collect

We may collect and process the following types of personal data:

a) Information You Provide
• Name
• Email address
• Phone number
• Address
• CV / resume details
• Employment history
• Qualifications and skills
• Right-to-work information
• Any information submitted via contact forms or job applications

b) Information We Collect Automatically
• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Cookies and usage data

3. How We Use Your Information

We use your personal data to:

  • Provide recruitment and staffing services

  • Match candidates with suitable job opportunities

  • Communicate with clients and candidates

  • Process job applications and workforce requests

  • Meet legal, regulatory, and compliance obligations

  • Improve our website and services

  • Respond to enquiries and support requests

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent – where you have given clear permission

  • Contractual necessity – to provide recruitment services

  • Legal obligation – compliance with UK employment and immigration laws

  • Legitimate interests – to operate and improve our business responsibly

5. Sharing of Personal Data

We may share your data with:

  • Employers and clients for recruitment purposes

  • Service providers (IT, hosting, compliance partners)

  • Regulatory authorities when legally required

  • Overseas partners where international recruitment applies

We do not sell personal data to third parties.

6. International Data Transfers

Where required, personal data may be transferred outside the UK (including to our Middle East sub-office).
All such transfers are protected by appropriate safeguards in accordance with UK GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil recruitment purposes and legal requirements.

  • Candidate records: retained in line with recruitment regulations

  • Client records: retained for contractual and legal purposes

When no longer required, data is securely deleted.

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, contact us at [email protected].

9. Cookies

Our website uses cookies to improve user experience and analyse website performance.

You can manage or disable cookies through your browser settings.

For more details, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external sites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]

Address: Shop1, Triq ir-Rifug jatiTal-Gwerra, Mosta, MST 385, Malta.
Reg. No.: MT26681237

Last updated: 04 January 2026