Privacy Notice
reaney.ai · Last updated 20 October 2026
Who we are
Reaney AI Limited, trading as reaney.ai, is the data controller for the personal data described in this notice.
Company: Reaney AI Limited, trading as reaney.ai.
Registered in England and Wales, company number 16357213
Registered address: Flat 5, 30-32 Catterick Road, Manchester M20 6HJ
Contact for data matters: matt@reaney.aiI CO registration ZB942251
We are a boutique retained search firm. We find and introduce senior people in AI, machine learning, cyber security and deep tech, mainly across Europe and APAC. Handling personal data is central to that work, and this notice explains how we do it.
What we collect
If you are a candidate, or someone we think might be: your name, contact details, employer, job title, career history, qualifications, CV content, salary expectations, notice period, right to work and location or relocation preferences, your public professional profiles, and our notes of conversations with you.
If you are a client or a prospective client: your name, job title, employer, business contact details, and our record of our dealings with you, including the roles you are hiring for and correspondence between us.
If you contact us through the website: whatever you put in the form or attach to it, and your email
address.
We do not ask for special category data — health, ethnicity, religion, political views and similar. If it appears incidentally in something you send us, we do not use it to assess you and we remove it when we notice it.
Where we get it
Most of it comes from you, when you apply, send us your CV, fill in the form or speak to us.
We also obtain personal data without you giving it to us directly. Search work means finding people who have not approached us. Specifically, we use:
-
Public professional sources — LinkedIn and similar professional networks, company websites, published team pages, conference speaker listings, published research and public funding announcements.
-
Our own historic records. We hold a database built up over more than a decade of technical recruitment, including records from a predecessor business founded and run by our founder. These cover people and companies dealt with since around 2013.
-
Referrals, where someone suggests we speak to you.
-
Your employer or a recruiter acting for you, where you have asked them to put you forward.
Because our older records date back several years, we check and update them against public sources before we use them — confirming whether someone is still in a role, and finding current contact details where they are not. That updating is itself processing of your personal data, and it is covered by this notice.
Where we obtain your data from somewhere other than you, we will tell you within one month of
obtaining it, or when we first contact you, whichever is sooner. This notice is how we do that.
Why we use it, and our legal basis
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. We think a targeted, relevant approach about a specific opportunity, from a firm that works a small number of searches at a time, is something most people in these roles reasonably expect. You can object at any time and we will stop.
One thing we commit to beyond what the law requires: we will never send your CV or your details to a client without speaking to you about that specific role first.
Who we share it with
Clients, but only once you have agreed to be put forward for that particular role.
Members of our expert panel, who are practising technology leaders and who technically assess
candidates before they reach a client. They are bound by confidentiality obligations to us.
Service providers who process data on our behalf — our email and document providers, our database and applicant tracking systems, email verification services, and the software we use to manage outreach.
These act only on our instructions, under written terms.
Professional advisers and authorities, where we are required to disclose or need advice.
We do not sell your personal data, and we do not share it with anyone for their own marketing.
Some of the tools we use rely on AI services to process text. Where they do, our terms with those
providers prohibit using your data to train their models.
Where it is stored
Our systems are hosted in the UK and the European Economic Area.
Some of our suppliers process data outside the UK, including in the United States. Where that happens we rely on an approved transfer mechanism — UK adequacy regulations, or the UK International Data Transfer Agreement or Addendum — and we will tell you which one if you ask.
We work with clients and candidates in APAC, Europe and North America, so introducing you to a client may mean your details go to a company outside the UK. We will tell you where a client is based before we send anything.
How long we keep it
Recruitment is a long game and good people stay relevant for years, which is why candidate records are kept rather than deleted after a single process. If you would rather we did not hold yours, say so and we will remove them.
Your rights
Under UK data protection law you can ask us to:
-
tell you what we hold about you, and give you a copy
-
correct anything that is wrong or incomplete
-
delete what we hold
-
restrict what we do with it while a question is sorted out
-
send your data to you or to someone else in a portable format
-
stop processing it, where we rely on legitimate interests
-
stop sending you marketing, which you can do at any time and for any reason
Email matt@reaney.ai. We will respond within one month. There is no charge unless a request is clearly unfounded or excessive.
If you want us to delete everything we hold about you, including our historic records, just say so. We do not require a reason.
The website
Our website is built on Wix. It uses cookies that are necessary for the site to work, and cookies set by Wix to measure the site’s performance and give us basic, anonymous statistics about visits, such as which pages are viewed. We don’t use Google Analytics, advertising cookies or any other third-party tracking tools.
When you submit the contact form, the content goes to us by email and is held in our systems as
described above. We keep your details secure using access controls, encryption in transit and at rest, and restricted access to our systems. No system is perfectly secure, but if a breach affects you and is likely to put your rights at risk, we will tell you.
Complaints
If you are unhappy with how we have handled your data, tell us first at matt@reaney.ai and we will try to put it right.
You can also complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first.
Changes
We will update this notice when how we work changes. The version date is at the top.