This privacy statement was last updated on November 18, 2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.madisonlincoln.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;

• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;

• we first request your explicit consent to process your personal data in cases requiring your consent;

• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;

• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following:

1.1 Contact - Through phone, mail, email and/or webforms

For this purpose we use the following data:

• A first and last name

• A home or other physical address, including street name and name of a city or town

• An email address

• A telephone number

The basis on which we may process these data is: Upon the provision of consent.

Retention period: We determine the retention period according to fixed objective criteria: Until such a time our DPO deems appropriate.

1.2 Website hosting

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including information about your browser, network and device, web pages you visited prior to coming to this website, web pages you view while on this website, and your IP address.

Squarespace needs this data to run this website and to protect and improve its platform and services. Squarespace analyses the data in a de-personalised form.

2. Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

• These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

• These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

3. Analytics

This website collects personal information to power our site analytics, including:

• Information about your browser, network, and device

• Web pages you visited prior to coming to this website

• Your IP address

This information may also include details about your use of this website, including:

• Clicks

• Internal links

• Pages visited

• Scrolling

• Searches

• Timestamps

We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

We have concluded a data Processing Agreement with Google.

Google may not use the data for any other Google services.

The inclusion of full IP addresses is blocked by us.

4. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

5. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

6. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

7. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.

• Right of access: You have the right to access your personal data that is known to us.

• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.

• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.

• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.

• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

8. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

9. Contact details

Madison Lincoln
91 Wimpole St, London W1G 0EF
United Kingdom

Website: https://www.madisonlincoln.com
Email: info@madisonlincoln.com
Phone number: +44 (0)207 099 9453

10. Call Recording Privacy Policy (EU)

10.1 Introduction

This Call Recording Privacy Policy explains how Madison Lincoln Limited (“we”, “our”, “us”) collects, uses, stores, and protects personal data when we record telephone calls as part of our recruitment services. We are committed to complying with the UK GDPR and the Data Protection Act 2018.

10.2 What Personal Data We Collect

• Your name, contact details, and job-related information

• Your voice and anything you say during the call

• Employment history, skills, and other recruitment-related data

• Any information you voluntarily provide during the call

We do not intentionally collect special category data unless directly relevant to the recruitment process and you choose to provide it.

10.3 Why We Record Calls (Purpose of Processing)

Madison Lincoln Limited records calls for one or more of the following purposes:

• Quality assurance and training of recruitment staff

• Monitoring and improving our recruitment services

• Ensuring accuracy of job-matching and candidate communication

• Handling queries, disputes, or complaints

• Verifying information or instructions

• Regulatory compliance within the recruitment sector

• Establishing, exercising, or defending legal claims

10.4 Legal Basis for Processing

We rely on one or more of the following lawful bases under UK GDPR:

• Legitimate interests (Article 6(1)(f)) – such as quality monitoring, service improvement, and ensuring accurate recruitment activity

• Contract performance (Article 6(1)(b)) – where recording supports the delivery of recruitment services

• Legal obligation (Article 6(1)(c)) – where required for compliance

• Consent (Article 6(1)(a)) – where no other lawful basis is appropriate

Where consent is used, you may withdraw it at any time.

10.5 How Long We Keep Recordings

Madison Lincoln Limited retains call recordings for: 12 months

Recordings may be retained longer if required for legal reasons, regulatory requirements, or the resolution of disputes.

10.6 Who We Share Your Data With

We may share call recordings with:

• Authorised employees, consultants, and management

• Technology providers that securely process or store call recordings

• Regulators or law enforcement where legally required

• Professional advisers (e.g., auditors, legal counsel)

We do not sell your personal data.

All third parties are subject to strict confidentiality and data protection requirements.

10.7 International Data Transfers

If we transfer call recordings outside the UK, we ensure appropriate safeguards such as:

• UK adequacy regulations

• International Data Transfer Agreements (IDTAs)

• Standard Contractual Clauses (SCCs)