The General Data Protection Regulation replaces the Data Protection Act and came into force on 25th May 2018. Any organisation which processes personal data of EU individuals comes under the GDPR scope wherever they are located in the world.

This document outlines the steps J&L (The creators of Vacancy Lab) have taken to fulfil obligations under the legislation. To find out more about GDPR, the Information Commissioner Office has more information:

Our Undertaking

J&L takes our obligations to keep data secure seriously. As a result, in order to ensure we meet the requirements of the GDPR legislation, we have reviewed our policies to ensure compliance.

Data Protection and GDPR


  • Data Controller: determines the purposes and means of processing personal data
  • Data Processor: is responsible for processing personal data on behalf of a controller
  • 'Personal data' means any information relating to an identifiable person who can be directly or indirectly identified from the data.

In most cases our relationship with you is that you are the Data Controller and Data Processor. J&L Limited provide you tools to help you manage your compliance with the GDPR legislation. However all storage and processing of data is performed on equipment or hosting of your choice. Our systems when used correctly will provide adequate compliance with GDPR requirements.

In the rare case that we take a copy or process your data we will only do so upon the written instructions of your Data Controller; ensuring that people processing the data are subject to a duty of confidence, are aware of their legal responsibilities; take appropriate measures to ensure the security of processing; and destroy all data once the process has been completed.

Third Party and International Transfers

The GDPR imposes restrictions on the transfer of personal data outside the European Union. We are based in the UK and we always aim to store our data within the European Union. We will not transfer data outside of the European Economic Area or to a Third Party without your written consent. However, some organisations which provide services to us such as hosting or backups may transfer personal data outside of the European Union. We will only allow them to do so if your data is adequately protected.


This document is intended to clarify our undertakings and your responsibilities under the GDPR legislation. Should you wish to obtain any more information please contact or telephone: 01293 127128

With a central cloud-based system, everyone can see and search all candidates in one place. It’s given us a more structured approach, and day-to-day tasks are now managed more efficiently.
Fiona Frisson Senior Account Manager at Tarot Recruitment
Our focus is on providing our clients with top-quality candidates suited to their specific requirements. We can only do that because we trust Vacancy Lab to support what we do.
Jonathan Bates Partner at MPQR Resourcing Solutions
We’ve become a more productive and more effective business since we brought in Vacancy Lab. It’s made a real difference to how we deal with candidates and what we can achieve for clients.
Anthony Kelly Public Sector Director at Harvey Recruit Ltd.