Privacy Policy

Effective Date: December 2020


At NRL, we (NRL) are committed to protecting and respecting your privacy. This Privacy Policy applies to all data collections and other data processing of NRL Group Ltd, in particular through its service platforms (each referred to herein as a “Site”) owned and operated by NRL Group Ltd, namely,,,, and For purposes of this Privacy Policy any reference to “NRL Group Ltd” (or “our” or “us” or “we”) shall mean NRL Group Ltd, and NRL Ltd. This Privacy Policy describes how NRL Group Ltd collects, uses, shares and safeguards the personal information (or in the EU/Switzerland: “personal data”) you provide to us. It also describes your choices regarding use, access and correction of your personal information. The use of information collected through our service shall be limited to the purpose of providing the Service (“Service”) for which the client has engaged NRL Group Ltd as set out in our Terms of Service, and other agreements with the client and this Privacy Policy.

Changes to this Privacy Policy

We may update this privacy statement to reflect changes to our information practices that will become effective upon posting. We encourage you to periodically review this page for the latest information on our privacy practices. If we make any changes, we will notify you by revising the “Effective Date” at the top of this page.

How do we collect personal data?

We may collect your personal data from anything you have provided us within our own websites, partner websites (e.g. job boards) or provided over direct interactions by telephone, in a letter, e-mail, Mobile Application (App), or via social media such as but not exclusively, LinkedIn, Twitter and Facebook. We may also access information about you that is already publicly available from sources such as social media or technical data from third parties such as Google Analytics and Hotjar. Please note that some outbound and inbound calls may be recorded for training and quality purposes.

What personal data do we process?

We may collect and process the following categories of personal information from our clients, clients’ candidates and Site visitors:

How do we use personal data?

​In order to deliver our services, we need to keep reliable, accurate and up-to-date records of clients’ and candidates’ details as well as any interactions with them related to these services. We use the personal information collected from these individuals only for the following purposes:

​We will only share your personal information with third parties (our agents) in the ways that are described in our client agreements and this Privacy Policy. We do not sell your personal information to third parties. We may email information regarding updates to the Service or additional service offerings to our clients in accordance with the terms and conditions of each client’s agreements with us. Other third parties, such as content or third-party service providers, may provide content or services through the Service and may need access to your personal information to provide their services to you. Clients will be using a Service to host data and information. ​

NRL Group Ltd will not use or disclose your personal information, except (i) to the extent necessary to provide the Service to you or as requested by you, or (ii) pursuant to law, or (iii) by a court order. Individual client or client candidate records may, at times, be viewed or accessed by NRL Group Ltd’s authorised employees or agents only for the purpose(s) of (i) providing the Service and related professional services to client or client candidates, (ii) resolving a support issue affecting any of them, (iii) to inspect and resolve a suspected violation of client agreements with a client, or (iv) as may be required by law, as determined by NRL Group Ltd in its sole discretion, judicial proceeding, legal process or binding court order. We also reserve the right to disclose your personal information as required by law and when we believe, in our sole discretion, that disclosure is necessary to protect our rights and/or comply with a legal proceeding, binding court order, or legal process.

​Personal information may be disclosed or distributed to another party with which NRL Group Ltd enters, or may enter, into a corporation transaction. If NRL Group Ltd is acquired in a merger, acquisition, or sale of all or substantially all its assets, you will be notified via email, on our Site and/or by a prominent notice on our Service of any change in the uses of your personal information, as well as any choices you may have regarding your personal information.

​NRL Group Ltd may disclose personal information to companies that assist us in providing our Services or that partner with us to provide you their services or content. In this context, any such transfers to third parties are governed by our vendor agreements with them, which provide standards of care for the protection for personal and confidential information that are not less stringent than the standards contained in our client agreements, and in no event, less than a reasonable standard of care. Such third-party companies are authorised to use your personal information only as necessary to provide these services to us and/or you and for the purposes for which the personal information was collected. In the case of partners with whom you contract directly, their policies regarding personal information will govern your relationship with them as stated in the applicable agreement between you and the partner and we will not be responsible for any actions or omission of these partners.

​Candidates are solely responsible for maintaining the confidentiality and security of their user registration and password. Site visitors may opt-out of receiving advertisement or promotional emails from us by selecting the opt-out link located in the message body of all our electronic communications. Clients or Site visitors may also opt out of marketing communications via the Your Account page on our Site. We may also track and analyse information that doesn’t directly identify you as a person and aggregate usage and volume statistical information from our site visitors.

​NRL Group Ltd may also ask visitors who register with our Site to provide certain information, such as email addresses to use and receive content from the Site. NRL Group Ltd will provide these visitors with the ability to opt-in or opt-out of future communications from the company. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or on the Your Account page on our Site .

Other things to be aware of

Access to Personal Information Controlled by NRL Group Ltd

​As a data subject, you have a number of rights in relation to your data under UK data protection law. For full information on your rights you can read the guidance from the Information Commissioner’s Office at A summary of these rights are below:

​Upon request and within 30 days, NRL Group Ltd will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. You are not required to pay any charge for exercising your rights. In addition, NRL Group Ltd will take reasonable steps to permit clients to correct, amend, or delete their personal information. Please contact us at if you wish to make a request.

Who can I contact about my personal data?

​If you have any questions about our use of your personal information, you can contact us on the below.

For UK activities – Contract Design (Northern) Limited
Registered address: Building 5, Glasshouse Business Park, Wigan, Lancashire, WN3 6GL – Registration No: 02121749

For Norway activities – Contract Design (Northern) Limited
Registered address: Building 5, Glasshouse Business Park, Wigan, Lancashire, WN3 6GL – Registration No: 897 105 012

​Our nominated representative for the purpose of the Regulation is the NRL Data Protection Officer. He can be contacted on

Whilst we hope that we can address any concerns you may have; you can also contact the ICO if you are unhappy with how we have used your data:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF,

Telephone: 0303 123 1113 Website: