Abbott Risk Consulting Limited, "We", is committed to protecting and respecting your privacy. We gather/use and keep information in line with the Data Protection Act 1998, General Data Protection (GDPR) and all relevant regulations.

This policy and any other documents referred to set out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. 

This Privacy Policy applies to the personal data of our:


Data controller(s)

For the purpose of data protection law Abbott Risk Consulting Limited at 11 Albyn Place, Edinburgh, EH2 4NG, United Kingdom has two Data Controllers:

John Abbott is the Data Controller for staff and their emergency contacts, clients and suppliers.

Andrew Hopkinson is the Data Controller for Candidates, their referees and/or emergency contacts.

All queries, comments or requests related to this Privacy Policy should be e-mailed to dataprotection@consultarc. com 


Where we store your personal data

The data that we collect from you may be transited to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA, who works for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

We cannot guarantee the security of your data transmitted to our site via the Internet; any such transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent unauthorised access and storage of your data.



You have a number of rights under the data protection laws.  In order to exercise any of the rights listed in this section then please e-mail the Data Controller with your request.

Please note that many of the rights listed in this section are limited to certain defined circumstances and we may not always be able to comply with your request.  We will tell you if this is the case and why.

Right to object

You have the right to ask us not to process your personal data and we will cease to process the data immediately.

Right to withdraw consent

You have the right to withdraw your consent to process your personal data, if applicable, and we will cease to carry out the particular activity that you previously consented to.

Data Subject Access Request (SAR)

You have the right to request access to the data we hold on you. 

Additionally, you have the right to request from us:

  • that any inaccurate information we hold about you is corrected,
  • that information about you is deleted in certain situations,
  • that we stop using your personal information for certain purposes,
  • that your member profile is provided to you in a portable format,
  • that decisions about you are not made by wholly automated means.

We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). 

Right to complain

If you are unhappy with how we are using your personal information or if you wish to complain about how we have handled a request contact

You also have the right to complain to your local Data Protection Authority, the details of which can be found here

Changes to our privacy policy and data protection policy

All changes to this Privacy Policy will be posted here. Please visit this page regularly to stay up to date. This policy was last amended on 11-05-2018.




What data do we collect?

When you visit our website there is certain information that we may automatically collect, whether or not you decide to use our services. We will also collect data from you when you contact us via the website, for example by using the chat function. 

We collect a limited amount of data about your computer, including but not limited to, where applicable your; IP address, operating system, browser type and version, pages visited and duration, device used and geographical location. 

How do we collect it?

We collect your data automatically into Google Analytics via cookies, in line with cookie settings in your browser. This is statistical data about your browsing actions and patterns and does not directly identify you as an individual. 

Why do we store it?

The information collected is used to improve our website services and offerings. 

Where do we store it?

Data collected via our website is stored in Google Analytics. 

Who do we share it with and how do we share it with them? 

We will only share data collected within Google Analytics, by direct access, with website developers where required in updating or designing our website.

How long do we keep the data for?

Google Analytics will automatically delete data obtained on this website after 14 months from your last visit.



What do we collect?

In order to provide the best possible employment opportunities that are tailored to you, we need to process certain information about you. We may store pertinent details of our relationship with you which could include elements such as; current and previous employers, and details of your work, skills and experiences, education and qualifications, records of interviews, opportunities we have put you forward for, and any additional information you have provided to us in forms such as a CV/resume and any correspondence.

We may then store further information if we have placed you in a permanent position, or you are subcontracted to us which could include start and end dates, pay history, umbrella company details and bank details.

It is extremely unlikely we will require or process any data which would be categorised as Special under the relevant data protection legislation, but should we need to do so we would contact you and get your explicit consent to do so.

How do we collect it?

Personal data you provide to us:

There are numerous ways you may have shared your data with us including:

  • Emailing your CV to any ARC member of staff or email address
  • Leaving a hard copy of your CV at a conference or office
  • Connecting and contacting an ARC employee on social media such as LinkedIn

By submitting your CV you are confirming your consent to allow Abbott Risk Consulting Limited to record and process the information detailed in your application. You are also confirming that the information contained within your application form is correct.

Personal data from other sources:

We may also receive personal data about you from other sources. Depending on the relevant circumstances and applicable local laws and requirements, these may include personal data received in the following situations:

  • Your referees may have disclosed personal information about you
  • Our Clients may share personal information about you with us
  • We may obtain information about you from searching for potential Candidates from third party sources, such as LinkedIn and other job sites

Why do we store it?

We use your data specifically to:

  • Match your skill sets with opportunities that most suit you
  • Propose your CV to either our staff or clients for an opportunity with your prior agreement
  • Keep you informed of available opportunities as they arise
  • Comply with our legal and regulatory obligations

Where do we store it?

All information that you provide to us, or we collect about you is stored on our third party secure servers. We understand that this includes confidential information and we have put in place a range of suitable physical, electronic and managerial procedures to safeguard and secure your information.

Our staff have the minimum required access to your data, and are trained to ensure that it is protected, and kept secure.

Who do we share it with and how do we share it with them? 

We will obtain your permission (before or when collecting your data) if we intend to use your data for marketing purposes or if we intend to disclose your information to any third party (client).

Where appropriate and in accordance with local laws and requirements, we may share your personal data, in various ways and for various reasons, with the following categories of people:

  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Abbott Risk Consulting Limited. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;
  • Third party service providers who perform functions on our behalf (including external consultants, business associates and professional advisers such as lawyers, auditors and accountants, technical support functions and IT consultants carrying out testing and development work on our business technology systems);
  • If you have provided your personal data specifically for recruitment, we may share your information with our clients where opportunities may exist for you. This will only be done after we have your consent to pass your information on to them;
  • Individuals and organisations who hold information related to your reference or application to work with us, such as current, past or prospective employers, educators and examining bodies and employment and recruitment agencies; and
  • In the event that we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets.

How long do we keep the data for?

We will only hold your personal data if we have a legitimate interest in doing so and will not hold your data for longer than is deemed necessary in accordance with the following: 

We will hold your data for no longer than 2 years before seeking confirmation that you are happy for us to continue to hold your data
If we have placed you either with one of our clients or you have been employed directly by us, we are required by law to hold your data

Automated Decision Making

During our processing of your information we may occasionally use functions that could be defined as automated decision making. Typically, this would be where you have submitted a CV/resume to us and we use an industry standard 3rd party product which uses complex proven semantic and natural language algorithms to “read” and extract data from the submitted document and create a profile for you in our database. This information could later be used to then match your profile against vacancy profiles also stored within our database. We have conducted a Data Protection Impact Assessment and matched profiles and vacancies are assessed by our staff before we contact you in regard to the position to ensure suitability. All data processed or added to our database is carried out manually by experienced staff. No data is added to or processed through our database automatically. If you have any questions about this process or to request that we do not use this process during our relationship with you, please contact us.




This section will be updated soon



This section will be updated soon



This section will be updated soon