Connected, Collaborative, Rewarding.
Recxchange is committed to ensuring that your privacy is protected.
At RecXchange, your trust is our priority. We’re committed to protecting your personal data and being fully transparent about how we use it. Whether you're sharing roles, collaborating on placements, or using our AI tools, your privacy, security, and fairness are at the core of everything we do.
At RecXchange, your trust is our priority. We’re committed to protecting your personal data and being fully transparent about how we use it. Whether you're sharing roles, collaborating on placements, or using our AI tools, your privacy, security, and fairness are at the core of everything we do.
This policy explains how we collect, use, and safeguard your information — and how we uphold the values of transparency, trust, and ethical collaboration across our recruiter community.
1. Who We Are
RecXchange is a global recruiter-to-recruiter collaboration platform operated by RecXchange Portal LLC, a company registered in Dubai, United Arab Emirates (Trade Licence No. 1508955). Our platform enables independent recruitment professionals to connect, share vacancies and candidates, and enter into split-fee arrangements in a trusted network. While headquartered in the UAE, our services are governed by the laws of England and Wales for consistency, as stated in our Terms & Conditions.
RecXchange Portal LLC is the data controller responsible for your personal data in connection with our services. We are committed to protecting your privacy and operate in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and other applicable data protection laws globally. This Privacy Policy explains how we collect, use, share, and safeguard your personal data, and outlines your rights under relevant data protection laws.
2. What Personal Data We Collect
We only collect the personal information necessary to provide and improve our services. This may include recxchange.io:
Identity and Contact Data: Your name, business or personal contact details (email address, telephone number, physical address).
Professional Information: Your company or agency name, job title, and LinkedIn profile URL (used to verify your role in the recruitment industry).
Financial and Transaction Data: Payment or billing information such as credit card details or bank account information (for subscription payments, commission disbursements or split-fee transactions). For example, we may collect your bank details if needed to facilitate commission payments between Members.
Profile and Membership Data: Information you provide when registering or filling out your profile on RecXchange (e.g. business specialties, regions, and any content you upload to the platform).
Candidate/Client Data (Third-Party Personal Data): Details of candidates or client contacts that you choose to share on the platform (e.g. candidate CVs or client contact information). You must ensure you have the right and consent to share this data – see Section 8 below.
Communications: Records of our correspondence with you and any information you submit through forms or messages on the platform.
Usage Data: Technical and usage information when you use RecXchange, such as log-in times, the pages or vacancies you view, search queries, and your interactions with other Members. We may also collect standard technical information sent by your browser or device (IP address, browser type, operating system). This usage data helps us understand platform activity and improve performance recxchange.io.
Marketing Preferences: Your preferences for receiving marketing or updates from us (only collected if you opt-in).
Cookies and Tracking Data: Information collected via cookies and similar technologies when you use our website or platform (see Section 13 on Cookies & Tracking).
We do not intentionally collect any sensitive personal data (also known as special category data, such as information about health, race, religion, or biometrics) unless it is absolutely necessary and you have explicitly consented. We also do not knowingly collect data from anyone under 18, as our platform is for professional use by adults.
3. How We Collect Personal Data
We collect personal data through various channels, including:
Directly from You: When you fill out our online registration forms, update your profile, submit a candidate or vacancy, contact us via email/phone, or communicate through the platform. This includes data you provide at networking events, via video calls, or through any direct correspondence.
Through Our Website: Via cookies and analytics tools that track your usage of our site (see Section 13). For example, we use website cookies to remember your login and gather analytics on how members use our platform.
Referrals or Partnerships: If you were invited to the platform by another Member or through a referral program, we may receive basic information about you from the referrer (with your consent).
Newsletters or Events: If you sign up for our newsletter or attend a RecXchange event/webinar, we may collect your name and contact details.
No Third-Party Data Purchasing: All personal data we process is obtained directly from you or your authorized actions. We do not buy, rent, or scrape personal data from third-party sources.
4. How We Use Your Personal Data
We use your personal data to run and improve the RecXchange platform and to provide our services to you. Specifically, we use data for the following purposes:
To register and identify you as a Member: Creating your account and verifying your credentials so you can access the platform.
To facilitate recruiter collaborations: Enabling introductions, vacancy postings, candidate profile sharing, and communications between Members for potential split-fee placements. For example, if you share a candidate’s CV with another recruiter through RecXchange, we use the data to display that candidate to the intended Member.
For communication and support: To send service messages, respond to your inquiries, provide customer support, and keep the platform running smoothly. This includes platform notifications (e.g. a new collaboration request), administrative emails, or important announcements about the service.
To provide and record payments and transactions: Using your data for subscription billing, invoicing, commission splits and reconciliation. For instance, we use billing information to charge your membership fees and bank details to facilitate commission payments between recruiters when applicable.
To facilitate secure fee transfers (Escrow service): If you opt to use our escrow protection service (once available), we will use relevant data to enable that transaction. For example, we may share your name and payment details with our trusted escrow partner who holds the funds until a placement is confirmed. This service adds security to split-fee payments by holding fees in a neutral third-party account until the agreed conditions are met.
To improve our platform and services: Analyzing usage data and feedback to develop new features, enhance user experience, and ensure the platform’s effectiveness. We only use aggregated or de-identified data for analytics wherever possible.
For marketing (with consent): Sending you newsletters, industry updates, new feature announcements, or promotions only if you have agreed to receive them. You can opt out at any time (see Section 6). We will not spam you — communications are targeted and infrequent.
To comply with legal and tax obligations: Fulfilling our duties under applicable laws, such as maintaining transaction records for tax auditing, complying with lawful requests from authorities, or honoring data protection regulations. For example, we keep invoicing records for accounting rules and may disclose data if required by a court order.
To ensure platform integrity and enforce our terms: Monitoring and using data to prevent fraudulent, unauthorized or harmful activities on RecXchange. This includes enforcing our Terms & Conditions, such as detecting and preventing attempts at circumvention, data scraping, or other prohibited conduct. We may use personal data (like user activity logs or communications) to investigate and address violations of our rules.
To support dispute resolution and legal processes: In the event of a dispute between Members or a legal claim related to platform use, we may process and retain relevant data to help resolve the issue. For example, if two recruiters have a disagreement over a split fee and enter arbitration, we might hold escrow funds until instructed to release them, or provide factual records (like message logs or agreement timestamps) to the arbitrator or court if lawfully required. Similarly, if an escrow payment is contested, we use your data to maintain the hold on funds and execute the resolution outcome.
We do not use your personal data for any kind of automated decision-making or profiling that has legal or significant effects on you without your explicit consent. Any automated features (e.g. matching algorithms) are only to assist you and do not replace human judgment.
5. Legal Bases for Processing
We process personal data only when we have a valid legal basis under the GDPR and equivalent laws. Under Article 6 of the UK GDPR, the primary lawful bases we rely on are:
Consent: We will ask for your consent in situations where it is required, for example, when you subscribe to marketing emails or when you share a candidate’s data with us for purposes outside our contractual necessity. You have the right to withdraw consent at any time (see Section 6).
Contract: We process data that is necessary to perform our contract with you – i.e., to provide the RecXchange services you signed up for. This includes using your details to create your account, enable recruiter collaborations, process subscription payments, and otherwise fulfill our obligations to you as a Member.
Legal Obligation: If we have a legal duty to process or disclose your data, we will do so. For instance, complying with tax law (retaining invoices), complying with employment placement regulations, or responding to a valid legal warrant or court order are processed under this basis.
Legitimate Interests: We may process your data for the purposes of our legitimate interests (or those of a third party) provided that your rights and interests do not override those interests. Our legitimate interests include maintaining the security of the platform, preventing fraud, improving our services, and facilitating the recruiter network. For example, monitoring accounts for signs of misuse or retaining certain records to resolve disputes are activities pursued under legitimate interests. We always consider your rights and will not use legitimate interest as a basis if your privacy interests outweigh our purpose.
If we ever need to process personal data for a purpose that is incompatible with the above bases, we will seek your consent or provide necessary notice as required by law.
6. Consent and Marketing Communications
We will only send you marketing communications if you have given us clear, affirmative consent to do so. At the point of collecting your contact information (for example, signing up for a newsletter or opting in during account registration), we will ask you to confirm that you wish to receive such emails or updates from us.
You have full control over your marketing preferences. If you choose to subscribe, you can withdraw your consent at any time. Every marketing email we send will include an “unsubscribe” link that you can click to stop further emails. You can also change your preferences by contacting us at privacy@recxchange.com or through your account settings if available. Once you opt out, we will cease using your contact details for non-essential communications. (Please note, even if you opt out of marketing, we may still send you essential service or account communications as these are not promotional in nature.)
We do not sell or share your personal data with third parties for their own direct marketing purposes without your consent.
7. Data Sharing and Disclosures
We value your privacy and share personal data only when necessary. When we do share data, we impose contractual obligations on recipients to safeguard it. We do not sell or rent your personal information to third parties. However, we may disclose your data to the following categories of recipients in order to run our business and comply with our obligations:
Service Providers: Trusted third-party companies that help us operate RecXchange. This includes:
Payment Processors (e.g. Stripe, PayPal) for secure processing of subscription payments or escrow transactions.
Escrow Agent or Payment Intermediary: If you use the optional escrow service, we will share necessary information with the neutral escrow provider that holds and releases funds (such as your name, contact, and bank details needed for the escrow). This third party will use the data solely to facilitate the escrow transaction and will keep it secure.
Cloud Hosting and IT Infrastructure: We use reputable cloud servers and IT providers to host our platform and data (for example, web hosting services or CRM tools). These providers process data on our behalf to store data and ensure the platform functions 24/7.
Analytics and Marketing Tools: We may utilize tools or platforms (for example, Google Analytics for site traffic analysis, or email marketing services like Force24/Mailchimp) that process data (like cookies or email addresses) under our instructions. Such tools help us understand usage patterns or send out newsletters (only to users who opted in). They are not allowed to use your data for their own purposes.
Other Members of RecXchange: By the nature of the platform, certain information you post may be visible to other approved Members. For example, if you share a job vacancy or candidate profile on RecXchange, those details will be viewable by other recruiters in the network as part of the collaboration workflow. Similarly, your basic profile information (name, agency, location, and verified status) is visible to other Members so that they know who they are collaborating with. We design the platform so that only necessary information is shared, and sensitive details (like full candidate contact info) are typically exchanged only after mutual agreement and within a Split Fee Agreement context. All Members are required to handle any personal data obtained through the platform in accordance with our Terms and data protection laws (see Section 8).
Legal Obligations and Safety: We may disclose personal data when required to do so by law or when that disclosure is reasonably necessary to: (i) comply with a legal obligation, regulatory requirement, or governmental request; (ii) enforce our Terms & Conditions or other agreements; or (iii) protect the rights, property, or safety of RecXchange, our Members, or the public. For example, if ordered by a court or regulator, we might provide logs or communications relevant to an investigation. If a Member engages in fraud or illegal activity, we may share information with law enforcement agencies as permitted by law.
Business Transactions: In the unlikely event that RecXchange undergoes a major business transaction, such as a merger, acquisition, corporate reorganization, or sale of assets, your personal data might be transferred to the new owner or successor entity as part of that deal. If this happens, we will ensure the new owners use your data in line with this Privacy Policy and applicable law, and we will notify you of any changes.
All third parties that process personal data on our behalf are contractually obligated to uphold strict confidentiality and security standards in line with GDPR and this Privacy Policy. They may only use your data for the specified purposes we’ve contracted them for, and not for anything else. RecXchange remains responsible for the protection of your data throughout these transfers.
Finally, we reiterate: we do not sell your personal data to marketers or unrelated parties. Any sharing is only to support RecXchange’s services or fulfill our legal duties, as outlined above.
8. Member Responsibilities (Candidate Data & Compliance)
RecXchange takes data protection seriously, and we require our Members to do the same. If you, as a Member, upload or share personal data about other individuals (for example, candidate CVs or client contact details), you must ensure you have a lawful basis to do so and that you handle that data responsibly. In particular:
➤ Obtain Candidate Consent Before Sharing: You must have the candidate’s explicit permission before sharing any candidate’s personal information on RecXchange. This means, prior to uploading or forwarding a candidate’s CV, contact details, or any identifiable data to another recruiter through our platform, you should inform the candidate and get their clear consent. The candidate should understand that their information will be shared with another independent recruiter (and potentially with an end client) for the purpose of pursuing a job opportunity. Do not submit any candidate’s data to RecXchange without their knowledge and agreement. This is not only a requirement of our Terms, but also a fundamental principle of privacy law and ethical recruiting practice – it protects the candidate’s rights and our community’s trust.
➤ Comply with Data Protection Laws: You are responsible for handling all personal data accessed through RecXchange in compliance with applicable data protection laws, including UK GDPR, EU GDPR, and any analogous laws in other jurisdictions (such as UAE data protection law, U.S. state privacy laws, etc.). Any personal data you obtain via the platform – whether it’s a candidate’s details provided by another recruiter or a client contact – must be kept confidential and used only for the intended recruitment purpose for which it was shared. You should not export, reuse, or disclose that data outside of the agreed collaboration without permission. For example, if a fellow Member shares a candidate with you for a specific job, you should not add that candidate to your general database for other roles without obtaining fresh consent from the candidate.
➤ No Circumvention or Misuse of Data: In line with our non-circumvention rules, you must not use personal data obtained via RecXchange to go around another Member. In practical terms, if another recruiter introduces a candidate or client to you through the platform, you should not later approach that candidate or client independently for any other business without the original introducer’s prior consent. This obligation typically applies for a defined period (e.g. 24 months) following the introduction. Using someone’s data to cut out the person who provided it is a serious breach of trust and of our Terms. For example, you may not save a candidate’s CV obtained via RecXchange and then attempt to place that candidate on your own for a different client outside the platform – unless you have written permission from the recruiter who shared them. Such actions are considered “poaching” or circumvention and are strictly prohibited.
➤ Consequences of Misusing Personal Data: Any misuse of personal data on the platform – whether by sharing without consent, using it for unrelated purposes, or attempting to circumvent another recruiter – is taken very seriously by RecXchange. We reserve the right to remove and ban Members who engage in such behavior. In addition, you could face legal consequences under applicable data protection laws for unauthorized use of personal information. Both data protection regulators and courts can impose penalties for misusing personal data. By respecting these rules, you not only avoid penalties but also contribute to a community built on trust and cooperation.
In summary, treat any personal data you access through RecXchange with the same care you would expect others to treat your candidates’ or clients’ data. Obtain consent, use it only for the intended collaboration, and do not betray the trust of introductions. RecXchange will assist with compliance where possible (e.g. we can provide a basic Data Processing Addendum if needed for your records), but ultimately each Member is responsible for the data they handle. If you have questions about data responsibilities, please reach out to us.
9. International Data Transfers
RecXchange operates a global platform, which means personal data may be transferred to or stored in different countries. We are headquartered in the UAE, and we use cloud infrastructure that may be located in the United Kingdom, the European Economic Area (EEA), the United Arab Emirates, or other jurisdictions. Regardless of where data is processed, we apply strong protections to it.
If you are located in the UK, EU or another region with data transfer restrictions, know that when you use RecXchange your data might be transferred internationally (for example, to our hosting providers or support team outside your country). We take steps to ensure any such transfers comply with applicable laws:
Standard Contractual Clauses: For transfers of personal data out of the UK/EEA, we rely on approved safeguards like the European Commission’s or UK’s Standard Contractual Clauses (SCCs). These are legal contracts that require the recipient of the data in a third country to protect the data to EU/UK privacy standards.
Adequacy Decisions: Where possible, we may host or transfer data to countries that have been officially recognized by the UK Government or European Commission as having adequate data protection laws (meaning your data gets essentially the same protection as in the UK/EU). For example, if our servers are in a country deemed “adequate,” we can transfer data there lawfully.
Other Safeguards: In some cases, we might use Binding Corporate Rules or other mechanisms approved under GDPR to legitimize data flows. We also employ technical measures (like encryption in transit and at rest) as an additional layer of security for international data.
By using RecXchange, you acknowledge that your personal data (and any candidate data you input) may be transferred and stored across international borders as needed for the platform’s functionality. However, this will always be done in accordance with this Privacy Policy and applicable law. We will inform you if we need to store your personal data in a new country not previously disclosed, especially if that country is outside the UK/EU and not subject to an adequacy decision.
If you require more information about our international data transfer practices or need a copy of the relevant safeguards (e.g. SCCs), please contact us. We are happy to provide transparency on how your data moves globally and how it remains protected.
10. Data Retention
We retain personal data only for as long as it is necessary to fulfill the purposes described in this policy, or as required by law or legitimate business needs. Retention periods will vary depending on the type of data and the context of your relationship with us:
Active Members: If you are an active Member, we retain your personal data for the duration of your membership. Your profile and related data will be kept as long as you have an account with us and have not requested deletion.
Former Members: If you choose to leave the platform or your membership is terminated, we generally will retain your data for up to 7 years after the end of the membership. This retention period allows us to meet any legal, accounting, or reporting requirements (for example, tax record-keeping) and to have information available in case of any later disputes or inquiries.
Prospective Members and Inquiries: If you contact us but do not ultimately sign up (for instance, you inquire about our services or start an application but don’t complete it), we may keep your information for up to 12 months. If you haven’t become a Member in that time, we will delete or anonymize your inquiry data, unless we have another lawful reason to keep it.
Candidate/Placement Data: If you have engaged in a split-fee placement via RecXchange, details of that transaction (including any candidate data that was shared for the placement) may be retained as part of the business record of the deal. We generally align this with the 7-year retention for former members or longer if required by contract or law. However, we encourage Members to only retain candidate CVs or personal data for as long as necessary. If you received candidate data through RecXchange, you should also abide by any agreement with the other Member or the candidate regarding how long you keep it.
Cookie Data: Short-term tracking data (like cookies) is retained according to the typical lifespans of those cookies. For example, analytics cookies might persist for a few months unless you clear them, while session cookies expire when you log out. (See Section 13 for managing cookies.)
After the applicable retention period ends, we will either securely delete or anonymize your personal data. “Anonymize” means we strip out personal identifiers so that the information can no longer be linked to you, and then use it in a de-identified form (for instance, for aggregate analytics).
In certain cases, we may need to keep data longer than the times above, such as if required for an ongoing legal dispute, investigation, or enforcement of our Terms. We will only retain what is necessary in those scenarios. We continuously review the data we hold and securely dispose of anything no longer needed.
11. Data Security
We employ strong security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We understand that your data is sensitive and we treat it with the utmost care. Our security program includes:
Encryption: All communications with our website are protected by SSL/TLS encryption (HTTPS). Sensitive data is also encrypted at rest in our databases or servers. This means that whether your data is in transit or stored on our systems, it is encoded to prevent unauthorized reading.
Secure Infrastructure: We use reputable cloud hosting providers who implement robust physical and network security. Our servers are kept in controlled facilities, and we apply firewalls and monitoring to prevent intrusions. Data backups are performed regularly and stored securely to prevent data loss.
Access Controls: Personal data is accessible only by those at RecXchange who need it to perform their job (on a “need-to-know” basis). Employee and contractor access to databases is limited and protected with strong authentication (passwords, two-factor authentication, etc.). We review access privileges periodically.
Staff Training and Policies: Our team members are trained in data protection best practices and are bound by confidentiality obligations. We maintain internal policies to ensure we handle data in line with GDPR and other regulations. Any staff or subcontractors with access to personal data must adhere to our standards and are subject to discipline (or termination of contract) if they fail to meet these obligations.
Testing and Auditing: We conduct regular security audits and risk assessments. Our systems are kept up-to-date with security patches. We also utilize monitoring tools to detect suspicious activities. If we introduce new technology or changes, we consider privacy and security impact (often through a Data Protection Impact Assessment process for major changes).
Despite all these measures, it’s important to note that no system can be 100% secure. However, we strive to reduce risks to a minimum. In the unlikely event of a data breach that could pose a risk to your rights or freedoms, we have a breach response plan in place. We will notify you and the appropriate supervisory authority (such as the UK Information Commissioner’s Office) of significant breaches as required by law, and within 72 hours of becoming aware of the breach wherever feasible. We will also take all necessary steps to mitigate the breach and prevent future occurrences.
Your role: You also play a part in security. Please keep your account credentials (username and password) confidential. Notify us immediately at support@recxchange.com if you suspect any unauthorized use of your account. We will never ask you for your password via email, so beware of phishing attempts.
12. Your Rights
As an individual using RecXchange, you have a number of important rights regarding your personal data. We respect and uphold these rights, which are provided under the UK GDPR, EU GDPR, and similar data protection laws. Your key rights include the right to:
Be Informed: You have the right to clear and transparent information about how we use your data. This Privacy Policy is part of fulfilling that right. We will also provide notices when we collect your data for specific purposes (e.g. explaining data uses on a form).
Access Your Data: You can request a copy of the personal data we hold about you. This helps you understand how and why we are using your information. Upon request, we will confirm if we’re processing your data and provide additional details such as what data we have, the purposes of processing, and who we share it with.
Rectification: If any personal data we have is inaccurate or incomplete, you have the right to have it corrected. For example, if you change your email address or notice we have a misspelled name, let us know and we will update our records promptly. In many cases, you can directly edit certain profile information via your account settings as well.
Erasure (Right to be Forgotten): You can ask us to delete your personal data in certain circumstances. For instance, if you deactivate your membership and want all personal data removed, or if you initially consented to a use of your data but later withdraw consent and there is no other legal ground for us to keep it. We will honor deletion requests to the extent required by law and will inform you if any data must be retained (e.g. for legal compliance).
Restrict Processing: You have the right to request that we limit the processing of your data in certain situations. This could apply if you contest the accuracy of the data or object to us processing it, and you want us to pause use while we verify or resolve your concern. When processing is restricted, we can still store the data but not use it further without your consent (unless for legal reasons).
Data Portability: For data you provided to us and which we process by automated means on the basis of consent or contract, you can request to receive it in a structured, commonly used, machine-readable format, and you have the right to have that data transmitted to another controller where technically feasible. In plain terms, you can ask us for an electronic copy of the information you gave us (for example, the account data you filled in) and we will provide it in a format like CSV or JSON.
Object to Processing: You have the right to object to certain types of processing. Notably, you can object to processing carried out for direct marketing at any time, and we will stop using your data for that purpose. You can also object if we are processing under “legitimate interests” or “public interest” grounds and you have a particular reason to object based on your situation. We will comply with your objection unless we have compelling legitimate grounds that override your rights or if we need to continue processing for legal claims.
Not Be Subject to Automated Decisions: You have rights related to automated decision-making and profiling. RecXchange does not currently make any purely automated decisions that produce legal or similarly significant effects on individuals without human involvement. If that ever changes, you have the right not to be subject to such a decision unless it’s necessary for a contract, authorized by law, or based on your explicit consent, and even then you would have the right to contest it or request human intervention.
To exercise any of these rights, please contact us at privacy@recxchange.com with your request. We may need to verify your identity for security purposes (to ensure we don’t disclose your data to someone else). We will respond as soon as possible and at the latest within one month (30 days) of receiving your request, as required by GDPR. For complex requests or multiple requests, we can extend this by a further two months, but if so we will inform you of the extension and explain why.
These rights are generally free to exercise. We will not charge you a fee for handling a reasonable request. However, if a request is manifestly unfounded or excessive (for example, repetitive requests), data protection law allows us to either charge a reasonable fee or refuse the request. We will communicate with you transparently in such cases.
If you believe we have not handled your personal data properly or fulfilled your rights, you also have the right to lodge a complaint with a data protection supervisory authority. Our lead supervisory authority is the UK Information Commissioner’s Office (ICO). You can contact the ICO at 0303 123 1113 or through their website (ico.org.uk) to report concerns. If you are based in the European Union or another country, you may prefer to contact your local data protection authority. We will of course work with the ICO or any other authority to resolve issues.
We encourage you to come to us first with any concerns, and we will do our best to address them. Your privacy is of utmost importance to us, and we are committed to working with you to achieve a fair resolution of any issue.
13. Cookies & Tracking Technologies
When you visit the RecXchange website or use the platform, we use cookies and similar tracking technologies to provide and improve our services. Cookies are small text files stored on your device which allow us to recognize you and remember your preferences. We use the following types of cookies and trackers on our site:
Essential Cookies: These are necessary for the website and platform to function properly. For example, they keep you logged in as you navigate pages, or remember your session details. You cannot opt out of essential cookies because the service would not work without them.
Analytics/Performance Cookies: These cookies collect information about how users interact with our site, such as which pages are visited and any errors encountered. We use this data (through tools like Google Analytics) to understand usage patterns and improve the platform’s performance and design. The information collected is aggregated and does not directly identify individuals. You can opt out of Google Analytics by using a browser add-on if you wish.
Functionality Cookies: These help to personalize your experience by remembering choices you’ve made (e.g., your region or preferred settings) and providing enhanced features. For instance, a cookie might remember that you dismissed a one-time announcement so it doesn’t show again.
Marketing Cookies: We may use these in our communications or site to track engagement if you have given permission. For example, if we send an email via our marketing platform (like Force24), it might include a pixel or link that lets us know if you clicked on something. On our website, marketing cookies could be used to tailor content or measure the effectiveness of a promotional campaign, but only if you have opted in. We currently have minimal marketing cookies, and any such cookies will only be activated with your consent (e.g., via our cookie banner).
When you first visit our site, you will see a cookie notice or banner that lets you know we use cookies and, where applicable, asks for your consent for non-essential cookies. You can manage your cookie preferences at any time in a few ways:
Via our site’s cookie settings tool (if available) – this allows you to toggle certain categories of cookies on or off.
Through your web browser settings – you can usually configure your browser to refuse some or all cookies, or to prompt you before accepting. You can also delete cookies that have already been set. Keep in mind, blocking all cookies (especially essential ones) might impair your ability to use the platform.
Via industry opt-out sites for certain trackers – for example, you can opt out of Google Analytics or out of interest-based advertising via websites like aboutads.info.
For more detailed information on the specific cookies we use and their lifespans, please see our Cookie Policy (if provided on our website) or contact us. By continuing to use our site with cookies enabled, you are agreeing to our use of cookies as described here.
14. External Links
Our platform or website may contain links to websites, plugins, or services that are not operated by RecXchange. For example, a Member could share a LinkedIn profile link or you might see a link to an article or a third-party service. Please note that if you click on a third-party link, you will be redirected to that third party’s site, which is outside of our control.
This Privacy Policy does not cover those external websites. We are not responsible for the content, security, or privacy practices of any third-party sites. We strongly encourage you to review the privacy policies of every website or service you interact with outside of RecXchange, especially before submitting any personal data to them.
If you believe a link on our platform is pointing to a malicious or inappropriate site, please notify us so we can take action if necessary.
15. Updates to This Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our business, legal obligations, or the services we offer. If we make material changes (for example, changing how we use personal data or introducing new purposes), we will notify you in a timely manner and as required by law. Notification may be done via email to our Members, an in-app alert, or an announcement on our website. We will also update the “Last updated” date at the top of this Policy.
We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information. If you continue to use RecXchange after updates to the Policy take effect, we will consider that as acceptance of the new terms to the extent permitted by law. Should you not agree with any changes, you have the right to stop using the platform and request that we remove your data (consistent with Section 12).
All prior versions of this Privacy Policy will be archived and available upon request for your reference. We maintain transparency about our privacy practices, and we’re happy to explain any changes or provisions – just reach out to us if you have questions.
16. Contact Details
We welcome any questions, concerns, or requests regarding this Privacy Policy or your personal data. Please feel free to contact us through any of the methods below:
Email: legal@recxchange.io
Postal Address: RecXchange Portal LLC, Pinnacle Building, Sheikh Zayed Road, Dubai, United Arab Emirates
For the fastest response, we recommend contacting us by email. We will strive to respond to all legitimate inquiries within 2 business days. If you are contacting us to exercise one of your data protection rights (see Section 12), please provide enough information to verify your identity and clearly describe your request so we can efficiently fulfill it.
Governing Law: This Privacy Policy is governed by the laws of England and Wales, reflecting the choice of law in our Terms & Conditions. This does not affect any mandatory rights or protections you have under local data privacy laws. If you have an issue that we cannot resolve together, you agree that the courts of England and Wales will have jurisdiction, unless applicable law in your country of residence requires otherwise.
Thank you for taking the time to read our Privacy Policy. We are dedicated to protecting your personal data and ensuring that RecXchange remains a secure and trustworthy platform for all members. If anything is unclear or you need further information, please contact us and we’ll be happy to assist.