Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is A Recruitment Policy (And Why Your Business Needs One)
What To Include In A UK Recruitment Policy Template
- 1) Purpose And Scope
- 2) Roles And Responsibilities
- 3) Workforce Planning And Vacancy Approval
- 4) Job Descriptions And Adverts
- 5) Sourcing And Shortlisting
- 6) Interviews And Assessments
- 7) Offers, Pre-Employment Checks And Onboarding
- 8) Candidate Data And Records
- 9) Using Agencies And Contractors
- 10) Monitoring, Feedback And Complaints
- How Your Recruitment Policy Connects To Other Documents
- Key Takeaways
Hiring is exciting, but it also carries risk. A clear, compliant recruitment policy helps you run fair, consistent hiring processes, protect candidate data, and avoid discrimination claims.
If you’re building your hiring function for the first time, don’t stress - with the right recruitment policy template, you can scale your team confidently and stay on the right side of UK law.
Below, we break down what to include in a recruitment policy, the key UK laws it should address, and provide a practical template you can tailor to your business.
What Is A Recruitment Policy (And Why Your Business Needs One)
A recruitment policy is your internal playbook for hiring - it sets out how you advertise roles, shortlist, interview, make offers, and onboard new starters, while meeting legal obligations.
For small businesses, a good recruitment policy delivers real benefits:
- Consistency: Everyone follows the same steps, reducing bias and accidental errors.
- Compliance: You align your process with the Equality Act 2010, UK GDPR/Data Protection Act 2018 and right to work rules.
- Risk management: Fewer discrimination complaints, data breaches, or unenforceable offers.
- Candidate experience: Clear timelines and communication improve your employer brand.
Think of your recruitment policy as a living document. As your team grows (or when employment law changes), you’ll update it to reflect new processes, tools, and legal requirements.
The Legal Framework Your Recruitment Policy Must Cover
Recruitment sits at the intersection of employment and privacy law in the UK. Your policy should address, in plain English, how you’ll comply with the following:
Equality And Non-Discrimination
- Equality Act 2010: Prohibits discrimination, harassment and victimisation on protected characteristics (e.g. age, disability, race, religion or belief, sex, sexual orientation, pregnancy/maternity, gender reassignment, marriage/civil partnership).
- Job Ads: Avoid discriminatory language or unjustified criteria (e.g. “young, energetic team” can imply age bias unless objectively justified).
- Selection: Use objective, job-related criteria and keep notes that evidence fair decision-making.
- Interviews: Train interviewers to avoid illegal interview questions and focus on role capability.
Data Protection And Privacy (UK GDPR And DPA 2018)
- Lawful basis: Identify a lawful basis for processing candidate data (often “legitimate interests” or “steps prior to entering a contract”).
- Transparency: Provide a candidate privacy notice explaining what data you collect, why, and for how long.
- Retention: Keep recruitment data only as long as needed, then securely delete. Build a retention schedule into your policy.
- Security: Limit access to hiring data and protect it with appropriate technical and organisational measures.
If your business collects candidate data via your website or ATS, publish a clear Privacy Policy and ensure your recruitment policy aligns with it.
Right To Work Checks
- Immigration, Asylum and Nationality Act 2006: You must check every new employee has the right to work in the UK, following Home Office guidance.
- Timing: Carry out checks before employment starts (not during shortlisting or interviews).
- Process: Use official ID, online share codes where applicable, and keep compliant copies/records.
Rehabilitation Of Offenders
- Rehabilitation of Offenders Act 1974: For most roles, candidates aren’t required to disclose spent convictions. Only request criminal records where justified and lawful (and use DBS checks appropriately).
Offer And Onboarding
- Employment Rights Act 1996: Provide key employment terms in writing by day one (the “written statement”). Best practice is to issue a full Employment Contract covering pay, hours, holidays, and other terms.
- Withdrawals: Be careful with verbal promises and unconditional offers - withdrawals can carry legal risk. Your policy should set out how and when to issue conditional offers.
Young Workers And Working Time
- Working Time Regulations 1998: Limit weekly hours and ensure rest breaks and paid leave.
- Young workers: If you hire under-18s, follow minimum age rules, hours limits and safeguarding considerations.
What To Include In A UK Recruitment Policy Template
Below is a practical structure you can adapt. Keep it concise, action-focused and aligned to your hiring tools and team size.
1) Purpose And Scope
- State that the policy applies to all recruitment activities across the business (permanent, fixed-term, apprentices, interns and, where relevant, contractors via separate processes).
- Confirm the company’s commitment to equal opportunities, fair assessments, and data protection.
2) Roles And Responsibilities
- Hiring Manager: Owns the vacancy, job description, selection criteria, and final recommendation.
- HR/People: Oversees process compliance, advertising, screening, and documentation.
- Interviewers: Prepare, ask structured questions, and score consistently against criteria.
- Data Protection Lead: Ensures candidate data is processed lawfully and securely.
3) Workforce Planning And Vacancy Approval
- Define when a vacancy can be opened (e.g. budget sign-off, business case, grading and salary band).
- Clarify whether you prioritise internal candidates or redeployment before external ads.
4) Job Descriptions And Adverts
- Use clear, accurate job descriptions with essential and desirable criteria.
- Write inclusive adverts (avoid age, gendered language or unjustified criteria).
- State any objective role requirements (e.g. specific qualifications, visas if truly necessary).
5) Sourcing And Shortlisting
- Set routine channels (company website, boards, social, specialist agencies where needed).
- Shortlist against objective criteria; keep brief notes explaining decisions.
- Make reasonable adjustments for disabled candidates.
6) Interviews And Assessments
- Use structured interviews aligned to the role’s competencies.
- Train interviewers to avoid illegal interview questions and handle adjustments sensitively.
- Where you use tasks or tests, ensure they are job-related and accessible.
7) Offers, Pre-Employment Checks And Onboarding
- Issue conditional offers subject to right to work, references, qualifications, and (where lawful) DBS checks.
- Provide a compliant Employment Contract by day one.
- Explain start dates, induction, probation length, and any equipment or policies to review.
8) Candidate Data And Records
- Reference the company’s Privacy Policy and candidate privacy notice.
- Set clear retention periods (e.g. unsuccessful candidate data retained for 6–12 months unless objected to).
- Store data securely; restrict access to those involved in hiring.
9) Using Agencies And Contractors
- If engaging recruiters, confirm terms in writing and appoint them as processors where they handle candidate data.
- Spell out when you hire employees vs engage contractors, and ensure the proper employment status assessment is completed before engagement.
10) Monitoring, Feedback And Complaints
- Explain how candidates can request feedback.
- Include a route for complaints or concerns about discrimination or process issues.
- Commit to periodic policy reviews.
Sample Recruitment Policy Template (Customise To Your Business)
Use this starter template as internal guidance - tailor it to your processes, systems and sector. Avoid sharing the full policy externally; candidates should receive a privacy notice and fair process description in your adverts or careers page.
Recruitment Policy
1. Purpose
We are committed to fair, transparent and lawful recruitment. This policy sets out how we attract, assess and onboard candidates while complying with the Equality Act 2010 and UK data protection laws.
2. Scope
This policy applies to all recruitment activities for permanent, fixed-term and casual roles. Engagement of contractors and agency workers follows dedicated processes outlined by People & Legal.
3. Responsibilities
Hiring Managers own vacancy requests, job descriptions, selection criteria and final recommendations. HR oversees compliance and process. Interviewers are responsible for structured, consistent assessments. Our Data Protection Lead oversees privacy compliance.
4. Vacancy Approval
All vacancies require budget and headcount approval. Hiring Managers must submit a business case and proposed salary band before advertising.
5. Job Descriptions & Advertising
JDs must reflect the role’s purpose, essential and desirable criteria. Adverts must be inclusive and not discriminatory. Objective role requirements (e.g. qualifications) must be justified.
6. Sourcing & Shortlisting
We advertise on our website and selected boards. Shortlisting is based on objective criteria recorded in the ATS. Reasonable adjustments are offered for candidates who request them.
7. Interviews & Assessment
We use structured interviews tied to competencies. Interviewers must avoid prohibited questions and record evidence-based scores. Assessments must be job-related and accessible.
8. Pre-Employment Checks
All offers are conditional on right to work checks and, where relevant, references, qualification verification and lawful DBS checks. Any required checks will be proportionate to the role.
9. Offers & Contracts
Conditional offers will be issued in writing. Successful candidates receive a written Employment Contract and onboarding information before their start date.
10. Data Protection
We process candidate data under a lawful basis and in line with our Privacy Policy and candidate privacy notice. Access is restricted to recruitment personnel. Unsuccessful candidate data is retained for and then deleted, unless retention is legally required or the candidate consents to a longer period.
11. Agencies & Third Parties
Recruitment agencies and screening providers must be engaged under written terms that ensure data protection compliance.
12. Complaints & Feedback
Candidates may request feedback after interviews. Concerns about discrimination or process should be raised via and will be addressed under our complaints procedure.
13. Review
This policy is reviewed annually or sooner if laws or processes change.
Practical Steps To Roll Out Your Recruitment Policy
Drafting a policy is only half the story. Here’s how to put it into practice without overwhelming your team.
Step 1: Map Your Current Process
Document how you actually hire today - who writes the job description, where you post the role, how you shortlist, what questions you ask, and who signs off the offer. This helps you spot compliance gaps and unnecessary steps.
Step 2: Train Hiring Managers And Interviewers
Run a short briefing on fair selection, structured interviews, reasonable adjustments, and avoiding illegal interview questions. Give interviewers a standard scorecard aligned to the job criteria and competency definitions.
Step 3: Align Your Documents And Systems
- Ensure your Employment Contract templates are up to date.
- Add the policy and process summaries to your Staff Handbook for easy access.
- Publish or update your online Privacy Policy and candidate privacy notice on your careers page.
Step 4: Set Data Retention And Access Rules
Pick a sensible retention period for unsuccessful candidates (often 6–12 months) and configure your ATS to auto-delete or flag reviews. Limit who can access candidate data and require shared inboxes or secure portals rather than emailing CVs around.
Step 5: Build Fair, Conditional Offers
Use conditional offers that reference right to work and relevant checks. Make sure the contract aligns with what was promised. If you need to rescind, follow a clear, documented process and take legal advice to manage risk.
Step 6: Review Annually
Schedule an annual policy review. Update it when laws change (for example, data protection guidance) or when your internal process evolves (new ATS, revised interview approach, different onboarding steps).
Common Pitfalls (And How Your Policy Prevents Them)
Recruitment issues often come from well-intentioned shortcuts. Your policy should actively prevent these risks.
Asking Prohibited Interview Questions
Even casual conversation can stray into protected characteristics. Script your interview openers and rely on competency-based questions to stay compliant.
Collecting Too Much Data
Only gather data you need for selection. If you introduce optional equal opportunities forms, keep them separate from selection panels and document why you collect them.
Inconsistent Shortlisting
Set objective, job-related criteria before you screen applications. Record brief notes for every candidate to evidence fair decisions if challenged.
Unclear Employment Status
If you engage freelancers or casual workers, verify employment status early. Misclassification can trigger tax liabilities, holiday pay claims, and tribunal risk. Ensure your process distinguishes between hiring employees and engaging contractors (with a proper Contractors Agreement).
Missing Or Weak Checks
Only run checks that are lawful and proportionate to the role. For example, follow good practice on references and be cautious with criminal record requests. For roles where vetting is appropriate, your policy can reference lawful background checks and how you’ll handle the results fairly.
Poor Record-Keeping
Keep just enough records to evidence fair process: adverts, shortlisting notes, interview scores, offer letters and right to work check copies. Set deletion dates to reduce data risk.
FAQs: Quick Answers For Busy Hiring Teams
Do We Need One Recruitment Policy For All Roles?
Yes - keep one core policy and add short annexes for role-specific checks (for example, regulated roles, safeguarding, driving). This keeps training simple while allowing necessary variations.
Can We Use AI Or Automated Screening?
Potentially, but you remain responsible for fairness and compliance. Document how you mitigate bias, give candidates a way to request human review, and keep transparency about how decisions are made.
How Long Can We Keep Unsuccessful CVs?
There’s no fixed legal period, but retention must be justifiable. Many businesses retain for 6–12 months to defend discrimination claims and re-contact strong candidates. State your period in the policy, tell candidates in your privacy notice, and honour objections or deletion requests (including Subject Access Requests).
What About References?
References should be relevant, factual and proportionate. Your policy can set when you contact referees (usually after a conditional offer) and who does it. If you’re unsure who qualifies, see internal guidance or treat it similar to your approach to references in general HR practice.
We Use Agencies - Anything Extra?
Yes. Agree commercial terms, ensure data protection clauses are in place, and clarify candidate ownership periods. Where agency workers are supplied, align processes with your rules for Agency Worker Hire and the Agency Workers Regulations 2010.
Where Should The Policy Live?
Store it with your HR policies and link it in your Staff Handbook and internal wiki. Train new managers on it as part of their onboarding.
How Your Recruitment Policy Connects To Other Documents
Your recruitment policy doesn’t operate in a vacuum. Make sure it connects cleanly with:
- Employment Contracts: The offer process should feed into a compliant Employment Contract with accurate role, pay, hours and probation terms.
- Staff Handbook: Cross-reference equal opportunities, anti-harassment, and complaints procedures in your Staff Handbook.
- Privacy Notices: Align with your public-facing Privacy Policy and an internal candidate data retention schedule.
- Contractor Processes: If engaging freelancers, include a status check step and issue a tailored Contractors Agreement rather than an employee contract.
- Recruiter Terms: Use written terms with agencies and verify GDPR responsibilities when they process candidate data on your behalf.
Key Takeaways
- A recruitment policy sets a consistent, fair process for advertising, shortlisting, interviewing and offers - and helps you comply with the Equality Act 2010, UK GDPR/Data Protection Act 2018 and right to work rules.
- Cover the essentials: roles and responsibilities, inclusive ads, objective selection criteria, structured interviews, conditional offers, lawful checks, and clear data retention.
- Train interviewers to avoid illegal interview questions and to assess candidates against defined competencies.
- Limit candidate data to what’s necessary, align with your Privacy Policy, and set sensible retention periods you actually follow.
- Pin down employment vs contractor engagements early using an employment status assessment and issue the correct contract type.
- Connect your policy to practical tools: scorecards, structured interview guides, conditional offer templates and compliant Employment Contracts.
- Review annually and update when laws or your processes change - setting strong legal foundations now will protect your business as you grow.
If you’d like help tailoring a recruitment policy template, aligning it with your contracts and privacy documents, or sense-checking a tricky hire, you can reach our team at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.


