How we source data
Elephant provides recruitment agencies with professional contact data about hiring decision makers at UK companies with live job vacancies. Here's exactly what we hold and where it comes from:
| Source | What we collect |
|---|---|
| Company websites | Names, job titles, and contact details from public team/about/careers pages |
| UK Companies House | Director and officer names, appointment dates (public register) |
| Licensed B2B data providers | Work email addresses, work phone numbers, professional profile data |
How we protect data
- Encryption in transit and at rest — all data is encrypted using TLS in transit and AES-256 at rest via our hosting provider (Supabase on AWS).
- Credit-gated access — contact details are not freely visible. Recruiters must spend credits to reveal an email or phone number. Every reveal is individually logged and auditable.
- Row-level security — our database enforces access controls so customers can only see data they are authorised to access.
- Automatic data expiry — records that haven't been re-verified within 12 months are automatically purged. Unverified records expire after 6 months.
- EU-hosted infrastructure — our primary database runs on AWS Frankfurt (EU). No personal data is stored outside the EU/UK without appropriate safeguards.
Your obligations as a customer
When you use Elephant data to contact people, you become a data controller for that outreach. The Privacy and Electronic Communications Regulations (PECR) set the rules. Here's the practical summary:
| Contact method | Ltd / LLP (corporate) | Sole trader (individual) |
|---|---|---|
| Email or SMS | Allowed — identify yourself and include an opt-out | Prior consent (opt-in) required |
| Phone call | Allowed — check TPS/CTPS register first | Allowed — check TPS register first |
| Automated call | Prior consent required | Prior consent required |
You must not use Elephant data for anything other than genuine recruitment outreach. Reselling, redistributing, or using data for non-recruitment purposes is prohibited under our Terms of Service and may breach UK GDPR.
Our legal basis
We process professional data under Legitimate Interests (Article 6(1)(f) of UK GDPR). We've conducted a full Legitimate Interests Assessment which concludes that:
- There is a genuine commercial need — recruitment agencies need to identify the right decision makers at companies with live vacancies
- The processing is necessary — no less intrusive alternative exists to achieve the same outcome
- Impact on individuals is low — we process only professional data, and people in senior hiring roles generally expect to be contacted about recruitment
- Clear opt-out — anyone can remove themselves from our database at any time, permanently
For our paying customers, we process account data under Contract (Article 6(1)(b)) — it's necessary to provide the service you've subscribed to.
Copies of our full Legitimate Interests Assessment, Data Protection Impact Assessment, and Data Retention Policy are available on request. Email privacy@elephantrecruit.io.
Your data, your choice
If your information appears in our database and you'd like it removed, we'll delete it permanently and add you to our suppression list so you're never re-collected.
Request removalYour rights
Under UK GDPR, you have the right to:
| Right | What it means |
|---|---|
| Object / opt out | We delete your record and add you to our suppression list so you're never re-collected. This is permanent. |
| Access | Request a copy of all data we hold about you. We respond within 30 days. |
| Rectification | If we hold inaccurate data (wrong title, outdated company), ask us to correct it. |
| Erasure | Request full deletion. We recommend opt-out (includes suppression) to prevent re-collection. |
| Complain | Contact the ICO if you're unsatisfied with how we've handled your data. |
To exercise any of these rights, email privacy@elephantrecruit.io. We aim to respond within 7 days.
Company details
| Registered name | Elephant Apps LTD |
| Registered in | England and Wales |
| ICO registration | ICO:00013592316 |
| Privacy contact | privacy@elephantrecruit.io |
| General contact | support@elephantrecruit.io |