Last updated: 17 October 2026
Who we are
Apollon Hospitality Ltd ("Apollon", "we", "us") is a hospitality recruitment agency, a private company registered in England and Wales (company number 16803835), with its registered office at 124 City Road, London EC1V 2NX, United Kingdom. We are the controller of the personal data described in this policy. For any privacy question or request, email info@apollonhospitality.com. We have not appointed a data protection officer; that address reaches the person responsible for data protection.
We work with employers in the United Kingdom, Greece, Germany and Austria, and with candidates from many countries. This policy applies the UK GDPR and the Data Protection Act 2018, and gives the same protection to people in the European Union, the European Economic Area and Switzerland, to whom the EU GDPR and the Swiss Federal Act on Data Protection may also apply.
Data we collect
Candidates. Your name, email, phone number, where you live, your CV, work history, job titles, languages, availability, the countries you want to work in, your LinkedIn address if you share it, notes from our conversations and references. We may record your nationality or work permit only to confirm your right to work in a country. We do not ask for health information, religion, ethnicity or similar sensitive data, and we do not need your date of birth, photo or marital status. If your CV contains them, we do not use them to make decisions.
Employers and hotel contacts. Your name, job title, work email and phone number, your property or company, and details of the roles you are hiring for.
Job-alert subscribers. Your email address, the regions and departments you choose, and your language.
Visitors. What you type into our forms, any file you upload, and the language you choose. Our website host also processes technical data needed to deliver and secure the site (for example your IP address, the time of the request and the page requested) in server logs. When you send a form, our website host also stores your IP address and the time with the submission; we use them only to limit spam and abuse, and they are deleted with the submission. We do not use advertising trackers and we set no cookies. See our Cookie Policy.
Where it comes from. Mostly from you. We may also receive your details when you email us your CV, when a colleague, hotel or other candidate recommends you, or from a professional profile you have made public (for example on LinkedIn). If we obtain your details from someone else, we tell you who we are and why we hold them within one month.
How we use your data, and our legal basis
| Purpose | Legal basis |
|---|---|
| Assessing candidates, talking to you and matching you with roles | Legitimate interests in providing recruitment services, and steps you ask us to take before a contract |
| Showing an anonymised profile of you (role, level, base, languages, general experience) to hotels on our website and in the Apollon Resort | Your consent. We show a profile only if you have agreed to it. You can withdraw consent at any time. |
| Sending your full CV and contact details to a specific employer | Your consent, which we ask for before each introduction |
| Replying to enquiries and profile requests, and managing client relationships | Legitimate interests in running our business and answering the people who contact us |
| Sending job alerts | Your consent, given when you sign up |
| Sending occasional news and market updates (only if you ticked "Yes" on a form) | Your consent, which you can withdraw at any time |
| Keeping the website secure, preventing spam, fraud and misuse (including checking that a request comes from a person) | Legitimate interests in protecting our business, our candidates and our clients |
| Keeping records we are required to keep, for example under the Conduct of Employment Agencies and Employment Businesses Regulations 2003, and for tax and accounting | Legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You may object at any time (see "Your rights"). If you withdraw consent, this does not affect what we did lawfully before.
You do not have to give us your data, but we cannot assess an application, answer an enquiry or send alerts without the details those services need. We do not make decisions about you by automated means that have legal or similarly significant effects. People at Apollon review applications and make introductions.
How your form reaches us
When you apply as a candidate, your application and CV are sent to careers@apollonhospitality.com. Employer enquiries and profile requests go to info@apollonhospitality.com. Only our recruitment team reads these mailboxes. Your details are also saved in our client and candidate records system (Attio), our website host keeps a copy of each form submission in our account until we delete it, and you receive an automatic email confirming that we have it. Job-alert sign-ups are stored by our website host and used to send you alerts.
The Apollon Resort and anonymised profiles
The Apollon Resort shows hotels anonymised profiles of candidates in our network. A profile shows a reference number, job title, department, level, general location, languages and a few highlights from your experience. It never shows your name, contact details, photo, current employer or salary. A hotel that is interested can only request the full profile through us, and we ask you before we share it. If you ask us to withdraw your profile, we remove it from the website; email careers@apollonhospitality.com with your reference number or the email address you applied with.
News by email
Our forms ask whether you would like occasional news from us: market updates for hotels, new roles and career news for candidates. The answer is "No" unless you change it, and sending a form never depends on it. If you choose "Yes", we record your choice with the date and send such emails only until you tell us to stop: every email has an unsubscribe link, or write to info@apollonhospitality.com. Separately, every form asks you to confirm that you have read this Privacy Policy; that confirmation is not consent to marketing.
Job alerts
If you sign up for job alerts, we first email you a link to confirm that the address is yours (double opt-in). We send alerts only after you click it, and we delete sign-ups that nobody confirms after 7 days. We keep your email address, the regions and departments you chose and your language, and use them only to email you new roles that match. Every email has an unsubscribe link; using it deletes your sign-up straight away. You can also email careers@apollonhospitality.com to be removed.
Who we share your data with
- Employers you agree to be introduced to.
- Service providers (processors) that help us run our business, under contracts that protect your data: Netlify, Inc. (website hosting, form storage and server functions; its spam filter, Akismet, may analyse form submissions), Resend, Inc. (delivery of our emails), Attio (our client and candidate records) and Microsoft (our business email). If we switch on the security check for our forms, Cloudflare, Inc. (Turnstile) checks that a submission comes from a person; it starts only when you begin filling in a form. If you choose to allow visitor statistics on our Cookie Policy page, Umami counts visits without cookies.
- Professional advisers, insurers and authorities where the law requires it or where we need advice to protect our rights.
We never sell personal data and we do not use it for advertising. The website loads no fonts, scripts or images from third parties; it is served from our own host, apart from the optional items named above and in our Cookie Policy.
International transfers
We are based in the United Kingdom. The UK, the EU/EEA and Switzerland recognise each other's data protection as adequate, so data can flow between them. Netlify, Resend and some of our other providers are based in or use servers in the United States. Where we transfer personal data there or to other countries without an adequacy decision, we rely on safeguards approved by law, such as the EU-US Data Privacy Framework (and its UK Extension) for certified providers, or standard contractual clauses and the UK International Data Transfer Agreement. You can ask us for details at info@apollonhospitality.com.
How long we keep data
| Data | How long |
|---|---|
| Candidate records and CVs | Up to two years after our last meaningful contact with you, so we can offer you future roles. We then delete them unless you ask us to keep them. |
| Records of placements and introductions | As long as the law requires, normally up to six years for tax, accounting and employment-agency record-keeping |
| Employer and client contacts | While we work together, then up to six years for accounting and contract records, or until you ask us to stop contacting you |
| Enquiries that lead nowhere | Up to two years |
| Job-alert sign-ups | Until you unsubscribe. Sign-ups that are not confirmed by email are deleted after 7 days. |
| Website server logs | Kept by our website host for a short period for security and fault-finding |
Security
Our website is served over HTTPS. Access to candidate and client records is limited to our recruitment team, protected by passwords, and our providers are bound by confidentiality and data processing terms. No system is perfectly secure; if a breach is likely to put your rights at risk, we will tell you and the regulator as the law requires.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict our use of it, or move it to another provider. You can object to processing based on our legitimate interests, and you can withdraw consent at any time (which, for example, removes your anonymised profile from our website). Email info@apollonhospitality.com. We may need to check your identity, and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live or work, for example the Hellenic Data Protection Authority (Greece), the data protection authorities of the German federal states, the Austrian Datenschutzbehörde, or the Swiss Federal Data Protection and Information Commissioner. We would appreciate the chance to resolve it first.
Fake recruiters and impersonation
People sometimes pretend to be recruitment agencies to take money or personal details. Apollon never charges candidates a fee for finding or applying for work, and never asks for payment, card or bank details, or a deposit for a visa, training or accommodation. Our emails come from addresses ending in @apollonhospitality.com and our website is apollonhospitality.com. If someone claiming to be Apollon asks for money or sensitive documents from an address that does not match, do not reply, and tell us at info@apollonhospitality.com. See also our Terms of Use.
Children
Our services are for people aged 18 and over. We do not knowingly collect data from anyone younger.
Other websites
Our website links to other sites, such as our social media pages and booking tools. Their privacy practices are their own; please read their policies.
Changes
We will update this page if we change how we use personal data, and change the date at the top. If a change affects you materially, we will tell you directly.