Data Processing Agreement

1. Definitions

“Candidate Data” means any personal data relating to candidates that is made available to you through LawBoard, including names, contact details, employment history, qualifications, CVs, and professional preferences.

“Platform” means the LawBoard website and associated services at lawboard.co.uk.

“You” means the firm or recruiter accessing candidate data.

“We” means LawBoard, operated by LawBoard Ltd.

2. Your Obligations

2.1. You will only process Candidate Data for the purpose of legitimate recruitment and talent management activities.

2.2. You will not share, sell, or disclose Candidate Data to any third party without the candidate's explicit consent.

2.3. You will maintain appropriate technical and organisational security measures to protect Candidate Data from unauthorised access, loss, or disclosure.

2.4. You will comply with UK data protection legislation (UK GDPR and the Data Protection Act 2018) in your processing of Candidate Data.

2.5. You will respond to candidate data subject requests (access, rectification, erasure) promptly and in accordance with legal requirements.

2.6. You will notify LawBoard without undue delay if you become aware of any personal data breach affecting Candidate Data.

3. Data Retention

You may retain Candidate Data only for as long as necessary for your recruitment purposes. Where a candidate is not progressed, their data should be deleted or anonymised within 6 months unless you have obtained their separate consent to retain it.

4. Candidate Privacy Settings

You must respect candidate privacy settings as configured on LawBoard. Where a candidate has hidden their employer, salary, or contact details, you must not attempt to circumvent these settings or obtain this information through other means based on data obtained from LawBoard.

5. Protected Firms

If a candidate has designated your firm as protected, you will receive no data about that candidate. Attempting to identify protected candidates through indirect means is a violation of these terms.

6. Termination

If your LawBoard account is terminated, you must delete all Candidate Data obtained through the platform within 30 days, except where retention is required by law.

7. Audit

We reserve the right to audit your compliance with this DPA. You agree to cooperate with reasonable audit requests.

8. Liability

You are independently responsible for your compliance with data protection law. LawBoard's liability for data protection matters is limited as set out in the Terms of Service.

9. Contact

For questions about this agreement, email hello@lawboard.co.uk.