Privacy Policy

Privacy Policy

Fluid Fusion is committed to protecting the privacy of our clients and candidates. We take reasonable steps to ensure that any information we receive remains secure and is used solely for the purposes outlined below.

We do not sell, rent, or disclose your personal information to outside parties, other than to prospective employers you are being actively put forward to, and always with your prior knowledge.

How this policy works

This policy explains how Fluid Fusion handles personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Fluid Fusion is a specialist drinks industry recruitment consultancy, operating as the data controller for the personal data described in this policy. Fluid Fusion is a sole operator business based in North Yorkshire, UK.

Website forms

If you contact us, sign up for news updates, or register your details via our website, we collect the information you provide — such as your name and email address — solely to respond to your enquiry, send the updates you’ve opted into, or process your registration. You can unsubscribe from news updates at any time using the link provided in any email we send.

What we collect from candidates

-Contact details (name, email, phone number, location)

-CV and covering letter content, including work history, qualifications, and career achievements

-Salary and package expectations, where provided

-Any additional information you choose to share with us

-Correspondence relating to your application or candidacy

Why we process candidate data

We process candidate data to identify and progress suitable job opportunities, under the lawful basis of legitimate interest (Article 6(1)(f) UK GDPR), or, where you apply directly for an advertised role, under Article 6(1)(b) as steps taken at your request prior to a contract.

Where your data is stored

Candidate data is held securely on Manatal, our recruitment CRM platform, hosted via Amazon Web Services (AWS) in the United States. This transfer is covered by Standard Contractual Clauses embedded in Manatal’s Data Processing Addendum, together with the EU-U.S. Data Privacy Framework. Data in transit is protected using TLS 1.2 or higher; data at rest is protected using AES-256 encryption.

How long we keep it

CVs and personal information received by email are deleted from our inbox within a few weeks. Records held in Manatal are reviewed and purged periodically, at minimum every 12 to 18 months. In all cases, candidate data will not be held for longer than 24 months from our last contact with you. News sign-up data is retained only for as long as you remain subscribed or until you ask us to remove it.

Your rights

Under UK GDPR, you have the right to access, correct, or request erasure of your personal data, object to or restrict our processing, and request a portable copy of your data. To exercise any of these rights, simply email us — we aim to action requests within 14 days, well within the statutory one-month deadline.

Contact

If you have any questions about this policy, please get in touch via the contact details on our website.

Last reviewed: August 2026