Privacy Notice for Candidates and Clients

Last Updated: 14th August 2026

1. Introduction

iSearch LTD (“we”, “us”, “our”) is a recruitment agency incorporated and operating in Malta. We provide recruitment, talent acquisition, executive search, staffing, and employment placement services to candidates and employers internationally.

This Privacy Notice explains how we collect, use, disclose, and protect personal data relating to individuals who use our recruitment services, apply for employment opportunities, interact with our consultants, or engage with us as clients.

We process personal data in accordance with:

• Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”);
• The Data Protection Act (Chapter 586 of the Laws of Malta);
• Other applicable European and international data protection laws.

Protecting your personal data is important to us, and we are committed to processing information fairly, lawfully, and transparently.

2. Data Controller

The controller responsible for your personal data is:

iSearch LTD
Registered Office: 97, O’Reilly’s Pub, Triq il-Halel, Bugibba. SPB2529. Malta
Company Registration Number: C92474
Email: info@isearchltd.com
Telephone: +35679033366

If you have any questions regarding this Privacy Notice or how we process your personal data, please contact us using the details above.

3. Personal Data We Collect

When you register with us as a candidate, apply for a vacancy, or use our recruitment services, we may collect the following information:

Candidate Information

This may include:

• Full name;
• Contact details;
• Residential address;
• Date of birth where required;
• Nationality and residency information;
• CV/resume;
• Employment history;
• Education and qualifications;
• Professional certifications;
• Skills and experience;
• Career objectives and preferences;
• Desired employment conditions;
• Salary expectations;
• Availability and notice period;
• Interview notes and assessment information;
• References and referee details;
• Right-to-work documentation;
• Passport, visa, or immigration information where relevant.

We may also collect information from publicly available professional sources, including professional networking platforms, where this assists us in identifying suitable employment opportunities.

4. Client and Employer Information

Where you engage us as an employer or business client, we may collect:

• Company name and registration information;
• Contact details;
• Names and details of hiring managers;
• Recruitment requirements;
• Vacancy details;
• Business communications;
• Contractual and billing information.

5. Special Categories of Personal Data

In certain circumstances, we may process special categories of personal data, including:

• Health information where required to support workplace adjustments;
• Disability information;
• Diversity and inclusion information;
• Criminal record information where legally permitted;
• Other sensitive information required by law or necessary for recruitment purposes.

We only process special category data where:

• processing is necessary for employment-related purposes;
• we have obtained your explicit consent where required;
• processing is required or permitted by applicable law.

6. How We Obtain Personal Data

We may collect personal data from:

• Information provided directly by you;
• Your CV or application forms;
• Our website and recruitment platforms;
• Job boards;
• Professional networking websites;
• Referrals;
• Previous employers or referees;
• Clients who provide candidate information;
• Background verification providers;
• Publicly available professional sources.

7. How We Use Your Personal Data

We use personal data to:

• Provide recruitment and employment placement services;
• Assess suitability for available roles;
• Match candidates with employment opportunities;
• Present candidate profiles to prospective employers;
• Arrange interviews;
• Communicate recruitment updates;
• Provide career advice and guidance;
• Verify qualifications and employment history;
• Conduct reference and background checks where appropriate;
• Maintain recruitment records;
• Manage client relationships;
• Improve our services and website;
• Comply with legal and regulatory obligations.

8. Legal Basis for Processing Personal Data

We process personal data under the following lawful bases:

Legitimate Interests

We rely on legitimate interests where processing is necessary to:

• Provide recruitment services;
• Identify suitable employment opportunities;
• Maintain candidate databases;
• Communicate with candidates and clients;
• Improve our business operations.

Contractual Necessity

We process personal data where required to:

• Provide recruitment services;
• Manage agreements with candidates or clients;
• Take steps requested before entering into a contract.

Legal Obligations

We process personal data where necessary to comply with legal obligations, including employment, immigration, tax, and regulatory requirements.

Consent

Where required, we request your consent before processing specific information.

You may withdraw consent at any time. Withdrawal of consent does not affect processing carried out before withdrawal.

9. Sharing Personal Data

To provide recruitment services, we may share personal data with:

• Employers and hiring organisations;
• Clients seeking recruitment assistance;
• Recruitment partners;
• Companies within our corporate group where applicable;
• Background screening providers;
• Reference providers;
• Recruitment technology providers;
• Cloud hosting and IT providers;
• Professional advisers;
• Government authorities or regulators where legally required.

We only disclose information where necessary and ensure appropriate confidentiality and security measures are maintained.

We do not sell personal data.

10. International Transfers

Because we operate internationally, your personal data may be transferred to countries outside Malta or the European Economic Area (“EEA”), including where:

• You apply for international employment opportunities;
• Employers are located outside the EEA;
• We cooperate with international recruitment partners.

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are implemented, including:

• European Commission adequacy decisions;
• Standard Contractual Clauses approved by the European Commission;
• Other lawful transfer mechanisms recognised under GDPR.

11. Automated Processing and Artificial Intelligence

We may use recruitment technologies, applicant tracking systems, search tools, and artificial intelligence-supported solutions to assist our consultants.

These technologies may help us:

• Organise candidate information;
• Search recruitment databases;
• Identify potential matches between candidates and vacancies;
• Improve recruitment efficiency.

Automated tools assist our recruitment processes but do not make decisions producing legal or similarly significant effects without appropriate human involvement.

12. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Candidate information may be retained while we maintain an active recruitment relationship with you and afterwards where there is a legitimate business reason, such as identifying future employment opportunities.

We periodically review our records and delete or anonymise information that is no longer required.

You may request deletion of your information, subject to legal obligations requiring retention.

13. Cookies and Website Technologies

Our website may use cookies and similar technologies to:

• Operate website functions;
• Analyse website usage;
• Improve user experience;
• Understand visitor preferences;
• Provide relevant communications.

Where required under applicable law, we will request your consent before placing non-essential cookies.

You can manage cookie preferences through your browser settings or our cookie management system.

14. Marketing Communications

We may contact candidates and clients regarding:

• Suitable job opportunities;
• Recruitment updates;
• Industry information;
• Our services.

You may unsubscribe from marketing communications at any time by contacting us or using the unsubscribe option provided in communications.

15. Your Data Protection Rights

Under GDPR, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate information;
• Request deletion of your personal data;
• Object to certain processing;
• Restrict processing;
• Withdraw consent;
• Request portability of your personal data.

To exercise your rights, contact:

info@isearchltd.com

We may request verification of your identity before responding to requests.

You also have the right to lodge a complaint with:

The Office of the Information and Data Protection Commissioner (IDPC Malta)
Website: https://idpc.org.mt

or another relevant supervisory authority within the European Union.

16. Security of Personal Data

We implement appropriate technical and organisational security measures designed to protect personal data against:

• Unauthorised access;
• Accidental loss;
• Destruction;
• Alteration;
• Unlawful disclosure.

Access to personal data is limited to authorised personnel and trusted service providers who require access for legitimate business purposes.

17. Third-Party Websites

Our website may contain links to external websites.

We are not responsible for the privacy practices or content of third-party websites and recommend reviewing their privacy policies before providing personal information.

18. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect:

• Changes in our services;
• Changes in technology;
• Changes in legal requirements;
• Changes in our processing activities.

The latest version will always be available on our website.

19. Contact Us

If you have questions about this Privacy Notice or the way we process personal data, please contact:

iSearch LTD
Address: 97, O’Reilly’s Pub, Triq il-Halel, Bugibba. SPB2529. Malta
Email: info@isearchltd.com
Telephone: +35679033366