AI-RD1 Privacy Policy

1. Introduction

This Privacy Policy explains how Recruitment Direct UK Ltd ("we", "us", "our") processes personal data in connection with the AI-RD1 platform.

We are committed to complying with:

• UK GDPR
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)
• Applicable telecommunications legislation

2. Role of the Parties

In relation to personal data processed through AI-RD1:

• The Client acts as Data Controller.
• Recruitment Direct UK Ltd acts as Data Processor.
• The Client determines the purpose and lawful basis for communications conducted through the platform.
• AI-RD1 processes personal data solely on documented Client instructions.

3. Personal Data We Process

4. Audio Processing

AI-RD1 does not provide call recording functionality.

Audio transmitted through the platform:

• Is processed in real time;
• Is not recorded;
• Is not stored;
• Is not archived.

No permanent audio files are retained.

5. Transcript Handling

AI-RD1 does not store transcripts by default.

Clients may optionally enable temporary transcript storage for quality assurance or operational review.

Where enabled:

• Retention is fully controlled by the Client;
• A recommended maximum retention period of five (5) days applies;
• Transcripts are automatically deleted after the configured period;
• No permanent transcript archives are maintained.

The Client is responsible for ensuring transcript retention complies with UK GDPR and the Data Protection Act 2018.

6. Lawful Basis for Processing

The lawful basis for outreach communications is determined by the Client.

This may include:

• Consent (where required under PECR);
• Legitimate interests;
• Contractual necessity.

Recruitment Direct UK Ltd does not determine lawful basis on behalf of Clients.

7. International Data Transfers

AI-RD1 may utilise global cloud infrastructure.

Where personal data is transferred outside the United Kingdom, appropriate safeguards are implemented in accordance with UK GDPR, including contractual and technical protections.

8. Security Measures

We implement appropriate technical and organisational measures including:

• Encrypted transmission (TLS);
• Role-based access controls;
• Secure hosting infrastructure;
• Monitoring and incident management procedures.

Access to personal data is restricted to authorised personnel.

9. Data Retention

Client account data is retained for the duration of the contractual relationship and a reasonable period thereafter.

Transcript data (if enabled) is automatically deleted after the Client-configured retention period.

Audio recordings are not retained.

10. Data Subject Rights

Under UK GDPR, individuals may have rights to:

• Access their personal data;
• Rectify inaccurate data;
• Request erasure;
• Restrict processing;
• Object to processing.

Requests relating to communications should be directed to the relevant Client as Data Controller.

Requests relating to platform processing may be directed to the Company using the contact details below.

11. Complaints

Individuals may lodge a complaint with the Information Commissioner's Office (ICO) if they believe their personal data has been processed unlawfully.

12. Updates

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes.

Company Information

Contact