PRIVACY POLICY

Protential Resources
Last Updated: 31/07/2025

Who We Are

Protential Resources is an international recruitment company headquartered in Ireland, with offices in the UK and Dubai. We specialize in recruiting skilled workers from various countries for employment opportunities in Ireland and the UK, focusing on sectors including Agriculture, Agri-Business, Horticulture, Food Processing, Transport, Logistics, Engineering, and Construction.

Data Controller Details:

  • Company Name: Bluestone Personnel Limited t/a Protential Resources

  • Address: New Town Centre, 14 Killegland St, Ashbourne, Co. Meath

  • Email: info@protentialresources.ie

  • Phone: +353 1 835 0044

What Information We Collect

From Job Candidates

  • Contact Information: Name, email address, phone number, postal address

  • Professional Information: CV/resume, work history, qualifications, skills, references

  • Background Checks: Reference checks (with your consent)

  • Communication Records: Emails, phone calls, meeting notes, interview feedback

  • Eligibility Information: Right to work status, visa requirements, nationality (where relevant for role eligibility)

From Client Companies

  • Contact Information: Company details, contact person information

  • Job Requirements: Position descriptions, requirements, salary information

  • Communication Records: Emails, phone calls, meeting notes

Website Visitors

  • Technical Information: IP address, browser type, device information (anonymized)

  • Usage Information: Pages visited, time spent on site (anonymized analytics only)

  • Application Data: Information submitted through online application forms

How We Use Your Information

Legal Basis for Processing

We process your personal data under the following legal bases:

  1. Legitimate Interests: For recruitment activities, maintaining our database, and business development

  2. Consent: When sharing your CV with specific clients or sending marketing communications

  3. Contract Performance: When managing your employment placement process

  4. Legal Obligation: For compliance with employment and immigration laws

Purposes of Processing

For Candidates:

  • Matching you with suitable job opportunities

  • Sharing your profile with potential employers (with consent)

  • Conducting reference checks

  • Providing recruitment and career guidance

  • Maintaining our talent database for future opportunities

  • Communicating about job opportunities and our services

For Clients:

  • Understanding your recruitment needs

  • Providing suitable candidate profiles

  • Managing the recruitment process

  • Maintaining business relationships

  • Business development activities

For All Users:

  • Responding to inquiries and providing customer service

  • Improving our services and website functionality

  • Compliance with legal and regulatory requirements

How We Share Your Information

Candidate Information Sharing

We will only share your CV and profile with client companies with your explicit consent for specific roles. We do not share candidate information without prior consent.

Service Providers

We use trusted third-party service providers to help deliver our services:

Primary Data Processor:

  • RecruitCRM (Workforce Cloud Tech, Inc.): Our main recruitment database system, with European/African users served from AWS Dublin, Ireland. Master database located in Dublin with 99.99%+ availability and industry-leading security practices.

RecruitCRM Sub-Processors Include:

  • Amazon Web Services (cloud hosting)

  • SendGrid (email delivery)

  • Twilio (communications)

  • Google Services (various functions)

  • OpenAI (AI-powered features)

  • [Full list of 28+ sub-processors available on request]

All service providers are bound by strict data protection agreements and process data only on our instructions.

International Transfers

Your data may be accessed from outside the European Economic Area (EEA) in limited circumstances:

  • Primary Storage: Your data is stored in AWS Dublin, Ireland (within the EEA)

  • Global Network Synchronization: Data may be briefly synchronized across RecruitCRM's global server network for system performance

  • Our International Offices: UK and Dubai offices may access data stored in Dublin for legitimate business purposes

  • Sub-Processor Services: Some RecruitCRM sub-processors may process data outside the EEA under appropriate safeguards

Data Protection Safeguards:

  • EU Standard Contractual Clauses protect any transfers outside the EEA

  • Master database remains in Dublin ensuring primary data residence in Ireland

  • Millisecond synchronization minimizes data exposure during global updates

  • Encryption and access controls protect data during any international processing

Legal Requirements

We may disclose your information if required by law, court order, or regulatory authority.

Data Retention

We retain your personal data based on our ongoing service relationship and legitimate business interests in providing recruitment services.

Activity-Based Retention Model

Candidates: We retain candidate data for as long as there is a reasonable prospect of providing recruitment services to you. This reflects the long-term nature of career development and the unpredictable timing of suitable job opportunities.

  • Active Candidates: Regular contact and actively seeking roles - data retained indefinitely while relationship continues

  • Passive Candidates: Available for suitable opportunities as they arise - data retained for ongoing service provision

  • Placed Candidates: 6 years minimum retention for employment law compliance, then subject to ongoing service assessment

Clients:

  • Active Relationships: Data retained for duration of business relationship and as long as recruitment services may be required

  • Prospective Clients: Data retained while reasonable prospect of business relationship exists

Regular Review Process

Annual Database Review:

  • We conduct annual reviews of our candidate database

  • Inactive candidates may be contacted to confirm ongoing interest in our services

  • We assess whether there remains a reasonable prospect of providing services

Consent Refresh:

  • Every 2-3 years, we may contact long-term inactive candidates to refresh their consent and confirm they wish to remain in our database

  • This ensures we maintain an active, engaged candidate pool

Easy Opt-Out:

  • You can request removal from our database at any time by contacting us

  • We provide clear, simple methods to withdraw from our services

  • Upon request, we will delete your data unless legally required to retain it

Legal Retention Requirements

Some data must be retained for specific legal periods regardless of our activity-based model:

  • Employment records: 6 years (for successfully placed candidates)

  • Financial records: As required by taxation law

  • Legal proceedings: Until resolution plus applicable limitation periods

Your Control: You can request deletion of your data at any time. We will honor such requests except where we have legal obligations to retain information.

Your Rights Under GDPR

As a data subject, you have the following rights:

Access Rights

  • Request a copy of your personal data

  • Information about how we process your data

Correction Rights

  • Request correction of inaccurate or incomplete data

  • Update your profile and preferences

Deletion Rights

  • Request deletion of your personal data where we no longer have legitimate grounds for retention

  • "Right to be forgotten" applies when data is no longer necessary for our recruitment services

  • Important: We may continue to retain your data if we can demonstrate ongoing legitimate interests in providing recruitment services, unless you object and we cannot show compelling grounds to continue processing

Restriction Rights

  • Request restriction of processing in certain circumstances

  • Object to processing based on legitimate interests

Portability Rights

  • Receive your data in a structured, machine-readable format

  • Transfer your data to another service provider

Objection Rights

  • Object to direct marketing (we will stop immediately)

  • Object to processing based on legitimate interests

Consent Withdrawal

  • Withdraw consent at any time (where processing is based on consent)

  • Will not affect lawfulness of previous processing

To exercise these rights, contact us at: info@protentialresources.com

We will respond to requests within one month of receipt.

Cookies and Website Tracking

Essential Cookies Only

We use only essential cookies necessary for website functionality. We do not use marketing, advertising, or tracking cookies.

Anonymous Analytics

We collect anonymous, non-personal usage statistics to improve website performance. This data cannot identify individual users.

No Third-Party Tracking

We do not use Facebook Pixel, or other advanced third party tracking technologies that collect personal information.

Marketing Communications

Current Practice

We currently do not send marketing newsletters or promotional emails.

Future Communications

If we introduce marketing communications in the future:

  • We will obtain explicit consent before sending

  • Every email will include an easy unsubscribe option

  • We will respect your communication preferences

  • We will not share your information with third parties for marketing

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Security Measures

  • Encryption of data in transit and at rest

  • Access controls and user authentication

  • Regular security audits and penetration testing

  • Staff training on data protection

  • Incident response procedures

Breach Notification

In the event of a data breach that poses high risk to your rights, we will:

  • Notify the Irish Data Protection Commission within 72 hours

  • Inform affected individuals without undue delay

  • Take immediate steps to contain and remedy the breach

Third-Party Websites

Our website may contain links to third-party websites (such as job boards). This privacy policy does not apply to those websites. Please review their privacy policies separately.

Job Board Usage:

  • We use Indeed and LinkedIn for recruitment activities

  • These platforms have their own privacy policies

  • We do not integrate these platforms directly into our website

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in:

  • Our business practices

  • Legal requirements

  • Technology improvements

We will notify you of significant changes by:

  • Posting the updated policy on our website

  • Sending email notifications for material changes

  • Updating the "Last Updated" date

Contact Information

Data Protection Inquiries

For questions about this privacy policy or your personal data:

Email: info@protentialresources.com
Phone: +353 1 835 0044
Address: New Town Centre, 14 Killegland St, Ashbourne, Co. Meath

Complaints

If you believe we have not handled your personal data properly, you can:

  1. Contact us directly to resolve the issue

  2. File a complaint with the Irish Data Protection Commission:

    • Website: www.dataprotection.ie

    • Phone: +353 57 868 4757

    • Email: info@dataprotection.ie

International Offices

This privacy policy applies to all Protential Resources operations, including our offices in:

  • Ireland (Head Office - Data Controller)

All offices operate under this unified privacy framework and Irish data protection law.

This privacy policy is designed to comply with the EU General Data Protection Regulation (GDPR) and Irish data protection law. It reflects our commitment to transparency and your privacy rights.