Only what the search actually needs
- Your CV and work history
- Your search preferences — targets, locations, salary floor, deal-breakers
- The answers employers commonly ask for, so we don’t keep asking you
- A record of every application we sent on your behalf
- Portal credentials, only where you choose to give them, only in an encrypted vault
- Nothing else. We don’t buy data, enrich profiles, or sell anything
Your online banking, your personal email password, your government identity logins, or your bank details and National Insurance number before you have a written offer in hand. If anyone contacts you claiming to be from Second Wind and asks for those, it is not us — forward it to hello@secondwind.careers.
The measures behind that
- Least-privilege access — operators reach only the accounts they work on
- Encrypted credential vault, never a tracker or a spreadsheet
- Two-factor authentication on our own systems
- Written confidentiality and data protection agreements with everyone who touches client data
- A documented operations manual every operator works to
- Breach process — ICO within 72 hours where required, you told without undue delay where the risk is high
- Data minimisation and a retention schedule, both in our privacy notice
- UK IDTA and a transfer risk assessment for any operator outside the UK
We set up a dedicated secure address for your search, so your personal inbox stays yours and nothing gets lost among everything else. It is deleted when your search ends.
What your supplier questionnaire will ask
| Item | Position |
|---|---|
| ICO registration | Registered with the ICO — number on request |
| Cyber Essentials | In progress — ask us for the current position |
| Professional indemnity & public liability | In place — certificate on request |
| Data processing agreement | We will sign yours or provide ours |
| Role under UK GDPR | Where you fund the programme we act as processor on your instructions, with our operators as sub-processors |
| Sub-processors | Full list provided with our DPA |
| Data location | UK and EU, with a UK IDTA for any transfer outside |
| Retention | Set out in the privacy notice — see the privacy notice |
| Supplier security questionnaire | We will complete yours |
| DPIA | Available on request |
Some rows above are still being completed. We would rather show you the table with gaps in it than imply certifications we do not yet hold. Ask where any of them stand and you will get a date, not a deflection.
Anything your team needs
Send us your questionnaire, your DPA, or just the question that is holding things up. A person will answer it, usually the same day.