Data Processing Agreement

Last updated: 21 April 2026

This Data Processing Agreement (“DPA”) forms part of the LawBoard Terms of Service and applies to all firms and recruiters who access professional data through the LawBoard platform.

1. Definitions

“Professional Data” means any personal data relating to professionals that is made available to you through LawBoard, including names, contact details, employment history, qualifications, CVs, and professional preferences.

“Platform” means the LawBoard website and associated services at lawboard.co.uk.

“You” means the firm or recruiter accessing Professional Data.

“We” means LawBoard, operated by RecQuest Ltd, a company registered in England and Wales (company number 15920307) with registered office at Suite 3, Nix Business Centre, 2 Park Court, Premier Way, Romsey SO51 9DH.

2. Your Obligations

2.1. You will only process Professional Data for the purposes of legitimate recruitment and talent management activities.

2.2. You will not share, sell, or disclose Professional Data to any third party without the professional's explicit consent.

2.3. You will maintain appropriate technical and organisational security measures to protect Professional Data from unauthorised access, loss, or disclosure.

2.4. You will comply with UK data protection legislation (UK GDPR and the Data Protection Act 2018) in your processing of Professional Data.

2.5. You will respond to data subject requests (access, rectification, erasure) promptly and in accordance with legal requirements.

2.6. You will notify LawBoard without undue delay if you become aware of any personal data breach affecting Professional Data.

3. Data Retention

You may retain Professional Data only for as long as necessary for your recruitment purposes. Where a professional is not progressed, their data should be deleted or anonymised within 6 months unless you have obtained their separate consent to retain it.

4. Professional Privacy Settings

You must respect professional privacy settings as configured on LawBoard. Where a professional has hidden their employer, salary, or contact details, you must not attempt to circumvent these settings or obtain this information through other means based on data obtained from LawBoard.

5. Protected Firms

If a professional has designated your firm as protected, you will receive no data about that professional. Attempting to identify protected professionals through indirect means is a violation of these terms.

6. Termination

If your LawBoard account is terminated, you must delete all Professional Data obtained through the platform within 30 days, except where retention is required by law.

7. Audit

We reserve the right to audit your compliance with this DPA. You agree to cooperate with reasonable audit requests.

8. Liability

You are independently responsible for your compliance with data protection law. LawBoard's liability for data protection matters is limited as set out in the Terms of Service.

9. Contact

For questions about this agreement, email hi@lawboard.co.uk or write to us at RecQuest Ltd, Suite 3, Nix Business Centre, 2 Park Court, Premier Way, Romsey SO51 9DH.