Privacy Policy

MorganMatch Limited (company no. 17329702, Standon House, 21 Mansell Street, London, E1 8AA) is the data controller for personal data processed via the Platform.

Morgan Hunt UK Limited is an associated company. It may act as a joint or separate controller — or as a processor for payroll and back-office services performed on our behalf — for certain human-backed elements of the Services, as set out in the MorganMatch Terms of Business.

From candidates: name, contact details, CV and LinkedIn profile data, employment and education history, skills and preferences, AI conversation transcripts (voice recordings are deleted after transcription — see section 7), and usage data.

From clients: company details, named user contact details, role briefs, and usage data.

We use personal data:

• to operate our matching technology and generate shortlists and introductions;
• to conduct AI-led conversations and improve our matching models;
• to carry out vetting and compliance checks (identity, right to work, references, professional registration) ahead of an introduction — the Platform's own matching activity is pre-screening only and does not replace these checks;
• to communicate with you about your account, your matches, or your role briefs;
• to detect and prevent circumvention of the Platform;
• to comply with our legal and regulatory obligations, including under the Conduct of Employment Agencies and Employment Businesses Regulations 2003.

We rely on:

• performance of a contract — providing the Services you have signed up for;
• legitimate interests — improving matching quality, fraud prevention, platform-circumvention detection, and business analytics;
• consent — where data is used to train our matching technology beyond providing your own matches, and for marketing communications;
• legal obligation — compliance checks.

Our matching technology ranks, scores and pre-screens candidates against a client's brief. This informs, but does not solely determine, whether you are shortlisted or introduced.

No candidate is removed or excluded from a live process solely by automated means. A trained reviewer within our compliance function reviews and approves the matching technology's reasoning before introductions are made, and before a shortlisted candidate is not progressed.

If you were matched to a role but not put forward, we will tell you, and the reasoning is available on request.

You also have the rights provided by Article 22 of the UK GDPR as amended by the Data (Use and Access) Act 2025 (Articles 22A–22D), including the right to obtain human review of, make representations about, and contest a significant decision based on automated processing.

• Clients — candidate profile data, once you have confirmed interest in an introduction. Anonymised profile data may be visible to clients before that point.
• Quake — our AI matching technology provider, acting as a data processor on our behalf.
• Morgan Hunt UK Limited — where a Morgan Hunt consultant is supporting your match or engagement, or where Morgan Hunt performs payroll or back-office services on our behalf.
• Reference and verification providers — for compliance checks.
• IT and hosting providers supporting the Platform.

We do not sell personal data.

We retain personal data for as long as your account is active, and afterwards only as needed to comply with legal obligations, resolve disputes, or enforce our agreements. Candidate profiles that have been inactive for an extended period may be periodically re-confirmed or archived.

Voice recordings of AI conversations and Platform-hosted sessions are deleted once transcribed and summarised. The transcript is retained for the same period as the related profile or engagement record.

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing — including direct marketing and, where applicable, automated decision-making.

To exercise any of these rights, contact us using the details in section 13. You can also complain to the Information Commissioner's Office at ico.org.uk.

Where any of the recipients listed in section 6 are located outside the UK, we put an appropriate transfer mechanism in place, such as the UK International Data Transfer Addendum.

We use appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit and at rest.

The Services are not directed at, and should not be used by, anyone under 18.

We may update this policy from time to time. Where changes are material, we will notify you via the Platform.

Email: privacy@morganmatch.ai
Address: MorganMatch Limited, Standon House, 21 Mansell Street, London, E1 8AA