Skip to content
TRG GTMSubmit a vacancy

Privacy notice

Last updated 2 November 2026The Resource Group Limited, trading as TRG GTM

We collect as little as we need, keep it only as long as we need it, and never sell it.

Who we are

This website (www.trggtm.com) is run by The Resource Group Limited, a company registered in the United Kingdom, trading as TRG GTM. We are a specialist recruitment business for go-to-market roles (sales, marketing, customer success, solutions engineering, revenue operations and partnerships) at software and technology companies in the UK and the US. We are the data controller for the personal data described in this notice.

You can contact us about anything in this notice, or about your data, at info@trggtm.com.

This notice covers the website and the forms on it. If you are a candidate, our candidate privacy notice explains in more detail how we handle your CV and the information we use to introduce you to employers. Our cookie policy explains the cookies and browser storage the site uses.

What we collect, and why

  • Employer vacancy briefs. Your name, company, work email, phone number (if given), the role you are hiring for and anything you tell us about it. We use this to call you back, run the search and, if you engage us, to deliver our services.
  • Contact form. Your name, email address, phone number and company (if given), the reason for your message and the message itself. We use this to reply to you.
  • CV registrations and job applications. Your name, contact details, current job title, the disciplines and locations you are interested in, your CV, your LinkedIn profile (if given), whether you would need visa sponsorship and any notes you add. We use this to consider you for roles. See the candidate privacy notice for full details.
  • Email this job. When you ask us to email a role to you, we use your email address only to send that role. If you don't tick the job-alert box we keep no marketing record: just a one-way hash of your address and the role, so we can stop the feature being abused.
  • Job alerts. Your email address and the function, specialism and market you choose, plus a record of your consent (when, where you signed up, the wording you agreed to, and your browser type), so we can email you matching roles at most once a day.
  • Newsletter. Your email address and the page you subscribed from, so we can send you our monthly email. We record opens and clicks to see what is useful.
  • Website analytics. Our own cookieless analytics record the page visited, the referring site, campaign tags in the link, your approximate country, the width of your screen and a visitor code that is a one-way hash of your IP address and browser and changes every day. It does not identify you and does not use cookies. With your consent, we also use Google Analytics (see below).
  • Spam protection. When you submit a form we record a one-way hash of your IP address so we can limit abuse. We do not store your IP address itself.

Please do not include special category data (for example health information) in a form or CV unless we ask for it for a specific, lawful reason. We do not sell personal data and we do not share it with anyone for their own marketing.

Our lawful bases

  • Employer briefs and enquiries: our legitimate interests in responding to people who contact us and in running our business, and, once you engage us, performance of a contract.
  • Candidate registrations and applications: our legitimate interests in finding suitable roles for people who ask us to, and steps you ask us to take before a contract. Where we rely on your consent (for example, to send your CV to a particular employer), we ask for it first.
  • Job alerts and newsletter: your consent, confirmed by clicking the link in our confirmation email (double opt-in). You can withdraw it at any time with the unsubscribe link in every email.
  • First-party analytics and spam protection: our legitimate interests in understanding how the site is used and keeping it secure, carried out in a way that does not identify you.
  • Google Analytics: your consent, given through the cookie banner under the Privacy and Electronic Communications Regulations (PECR).
  • Legal obligations: where we must keep or disclose information by law, for example under the Conduct of Employment Agencies and Employment Businesses Regulations 2003 or tax law.

Who we share it with

We use a small number of service providers (processors) to run the website and our recruitment service. Each acts only on our instructions under a written agreement.

  • Vercel hosts the website and processes the requests your browser makes to it.
  • Supabase stores form submissions, CVs (in a private storage bucket), subscriptions and analytics in a database hosted in the EU/London region.
  • Brevo sends our emails (confirmations, replies, job alerts and the newsletter) and records delivery, opens and clicks.
  • AI Talent Pro, our own recruitment platform, holds candidate records and applications and helps our consultants match people to roles.
  • Google Analytics (Google Ireland Limited) processes usage data only if you accept analytics cookies.
  • Anthropic provides the AI model we use to help draft articles for the Insights section. We do not send it personal data.
  • Make.com posts our new articles to LinkedIn. It receives only the article details, not personal data.

If you are a candidate, we share your details with an employer only after discussing the role with you and getting your agreement. We may also share information with professional advisers, or where the law requires it.

International transfers

Some of our providers are based in, or use sub-processors in, countries outside the UK, including the United States. Where personal data is transferred outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.

How long we keep it

  • Candidate records (registrations, applications and CVs): 2 years after our last contact with you, then deleted, unless you ask us to delete them sooner or we have placed you and must keep certain records for longer by law.
  • Employer enquiries and briefs that do not lead to work: 2 years after our last contact, then deleted. Client records: for the length of our relationship and up to 6 years afterwards for legal and accounting purposes.
  • Job alerts and newsletter: until you unsubscribe. We then keep a suppression record of your email address so we do not contact you again. Unconfirmed sign-ups are removed.
  • Analytics: first-party analytics for up to 26 months. Google Analytics data is kept for 14 months.

Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it (including the absolute right to object to direct marketing), to data portability, and to withdraw consent at any time where we rely on it. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To use any of these rights, email info@trggtm.com. We will respond within one month. We may need to confirm your identity first.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.

Visitors and candidates in the United States

We do not sell personal information, and we do not share it for cross-context behavioural advertising. Wherever you are in the US, you can ask us to tell you what personal information we hold about you and how we use it, to correct it or to delete it, by emailing info@trggtm.com. We will not treat you differently for making a request. The categories of information we collect, why we collect it, who we share it with and how long we keep it are set out above.

Security

We protect personal data with encryption in transit, access controls limited to the people who need it, private storage for CVs and reputable providers with strong security practices. No system is perfectly secure, so if you think something is wrong, please contact us straight away.

Changes to this notice

We will update this notice when our practices change. The date at the top shows when it was last updated.