Privacy Policy

1. Who we are

Kaidon AI Ltd (“Kaidon AI”, “we”, “our”, “us”) is a recruitment agency registered in England and Wales. We operate the website kaidon.ai and provide retained executive search, contingent recruitment, and interim placement services.

As a data controller, we are responsible for the personal data we collect and process. If you have any questions about this policy, please contact us at louise@kaidon.ai.

2. Data we collect

We may collect the following categories of personal data:

• Contact information — name, email address, telephone number, company name.
• Professional information — CV/résumé, employment history, qualifications, skills, LinkedIn profile.
• Correspondence — emails, messages submitted through our contact form, and notes from calls or meetings.
• Usage data — IP address, browser type, pages visited, and other technical data collected automatically when you visit our website (via Vercel infrastructure logs).

3. How we collect your data

• Directly from you via our contact form, email, or telephone.
• From publicly available sources such as LinkedIn, company websites, or professional directories.
• From clients who refer you for a role, or from other candidates and referees.

4. Why we process your data and our legal basis

5. How long we keep your data

We retain candidate data for up to 2 years from the date of last contact. If you are placed in a role, we may retain limited data for up to 6 years for legal and contractual record-keeping purposes. Contact form submissions are retained for up to 12 months.

You can ask us to delete your data at any time (see Section 8).

6. Who we share your data with

We do not sell your personal data. We may share it with:

• Prospective employers — only with your explicit consent before any submission.
• Service providers — Vercel Inc. (website hosting, EU/US data transfer covered by Standard Contractual Clauses); Resend Inc. (transactional email). These providers act as data processors under our instruction.
• Regulators and law enforcement — where required by law.

7. International transfers

Some of our service providers are based outside the UK/EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place (such as UK Standard Contractual Clauses or adequacy decisions).

8. Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where we have no lawful reason to retain it.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests, including direct marketing.
• Withdraw consent — where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email louise@kaidon.ai. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses only essential session cookies required for the operation of the site (authentication). We do not use advertising or third-party tracking cookies. No consent banner is required for strictly necessary cookies under UK PECR.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date. We encourage you to check this page periodically.