Connected, Collaborative, Rewarding.

Recxchange is committed to ensuring that your privacy is protected.

At RecXchange, your trust is our priority. We’re committed to protecting your personal data and being fully transparent about how we use it. Whether you're sharing roles, collaborating on placements, or using our AI tools, your privacy, security, and fairness are at the core of everything we do.

At RecXchange, your trust is our priority. We’re committed to protecting your personal data and being fully transparent about how we use it. Whether you're sharing roles, collaborating on placements, or using our AI tools, your privacy, security, and fairness are at the core of everything we do.

This policy explains how we collect, use, and safeguard your information — and how we uphold the values of transparency, trust, and ethical collaboration across our recruiter community.

1. Who We Are

RecXchange is a networking platform for independent recruitment businesses to collaborate, share vacancies, and grow together. We operate in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

This Privacy Policy explains how we collect, use, share, and protect your personal data, and what your rights are under data protection law.

Data Controller:
RecXchange Portal LLC
PINNACLE SHEIKH ZAYED ROAD, DUBAI, UAE
Company No: 1299571
Email: privacy@recxchange.io

2. Legal Bases for Processing

Under Article 6 of the UK GDPR, we process your personal data using the following lawful bases:

  • Consent – where you actively provide your details (e.g. signing up to our platform or newsletters)

  • Contract – when processing is necessary to fulfil a service you have requested

  • Legal Obligation – e.g. compliance with financial or regulatory requirements

  • Legitimate Interests – where processing is essential for the operation of RecXchange but does not override your rights or freedoms

3. What Personal Data We Collect

We collect the minimum amount of personal data necessary to deliver our services. This may include:

  • Your name

  • Contact details (email, telephone, address)

  • Bank details (for commission payments or fee splits)

  • LinkedIn URL (to verify your role within the Recruitment / Staffing sector)

  • Communications and form submissions

  • Marketing preferences

We do not collect sensitive personal data (also known as "special category data") unless explicitly required and consented to.

4. How We Collect Your Data

We collect data through the following channels:

  • Online registration and contact forms

  • Direct communication (email, phone, video calls)

  • Website cookies and analytics

  • Event or newsletter sign-ups

  • Referrals or partnerships

All data collected is directly from you — we don’t buy or scrape data from third parties.

5. How We Use Your Data

Your data will be used for the following purposes:

  • To register you as a Member

  • To facilitate introductions, role/candidate sharing, or collaborations

  • For communication, support, and service delivery

  • For invoicing, payment and reconciliation purposes

  • To improve our platform, based on user behaviour

  • To comply with legal and tax obligations

  • For sending updates, offers or content (only with consent)

We will never use your data for profiling or automated decision-making without your knowledge or consent.

6. Consent Management

When you submit your information via our forms, we’ll ask for clear, affirmative consent for any marketing or optional communications.

You can withdraw consent at any time by emailing: privacy@recxchange.io or clicking “unsubscribe” on any of our emails.

7. Data Sharing & Third Parties

We may share your data with trusted third parties, such as:

  • Payment processors (e.g. Stripe, PayPal)

  • Marketing platforms (e.g. Force24, Mailchimp)

  • IT providers (e.g. web hosts, CRM tools)

  • Legal or regulatory authorities (where required)

All third-party providers are GDPR-compliant, subject to contracts, and only process data under our instructions.

We do not sell or lease your data to any external organisations.

8. International Data Transfers

Where personal data is transferred outside the UK or EEA (e.g. for cloud storage), we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)

  • Binding Corporate Rules (BCRs)

  • Data adequacy decisions by the UK Government

9. Data Retention

We retain personal data only as long as necessary for the purposes outlined above:

  • Active Members: Your data is retained for the duration of membership

  • Former Members: Data is retained for 7 years for legal and tax compliance

  • Enquiries: Data is retained for up to 12 months unless you become a Member

After these periods, your data will be securely deleted or anonymised.

10. Your Rights Under UK GDPR

You have the right to:

  • Be informed – about what data we hold and how it’s used

  • Access – the personal data we hold about you

  • Rectify – incorrect or outdated data

  • Erase – your data (“right to be forgotten”)

  • Restrict processing – in certain circumstances

  • Data portability – request a copy of your data in a portable format

  • Object – to processing, particularly for direct marketing

  • Not be subject to automated decisions – without human involvement

To exercise any of these rights, email: privacy@recxchange.io
We will respond within 30 days.

If you’re unhappy with how we handle your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
0303 123 1113 | https://ico.org.uk/make-a-complaint/

11. Cookies & Tracking

We use cookies to improve your experience. These include:

  • Essential Cookies – for site operation

  • Performance Cookies – for analytics (Google Analytics)

  • Marketing Cookies – via Force24, with your permission

You can manage cookie preferences via your browser or use the cookie banner on our site.

12. Security

We have put in place robust measures to safeguard your data:

  • Secure servers and SSL encryption

  • Access controls for authorised personnel only

  • Regular data audits

  • Staff trained in data protection best practices

If a data breach is likely to impact your rights, we will notify you and the ICO within 72 hours.

13. External Links

Our site may include links to external websites. We are not responsible for the content or privacy practices of these third parties. Always check their privacy policies before submitting data.

14. Updates to This Policy

We may update this policy from time to time. Any material changes will be communicated to Members. 

 Contact Details

For any queries, concerns or data requests, contact:

Data Protection Officer – RecXchange
privacy@recxchange.com

RecXchange Portal LLC t/a RecXchange

PINNACLE SHEIKH ZAYED ROAD, DUBAI, UAE

Company No: 1299571