THE COOKIES THAT WE USE, AND WHY
This Privacy Notice tells you what to expect in relation to the personal information about you which is collected, handled and processed by Blueprint Recruitment Solutions Ltd.
We acknowledge and agree that any personal data of yours that we handle will be processed in accordance with all applicable data protection laws. For the purpose of the General Data Protection Regulation (“GDPR”), Blueprint Recruitment Solutions Ltd, Faretec, Carnac Court, Cams Hall Estate, Fareham, Hampshire, PO16 8UY is the Data Controller.
1. The purpose of this statement
We are committed to protecting the privacy and security of your personal information.
This privacy statement describes how we collect and use personal information about you during and following your relationship with us, in accordance with the General Data Protection Regulation (GDPR) as updated from time to time. It applies to all clients, candidates and contractors.
We will comply with data protection law and the personal information we hold about you will be:
1. Used lawfully, fairly and in a transparent way.
2. Collected only for valid purposes and not used in any way that is incompatible with those purposes.
3. Relevant to the purposes we have told you about and limited only to those purposes.
4. Accurate and kept up to date.
5. Kept only as long as necessary for the purposes we have told you about.
6. Kept securely.
2. The legal basis for using your personal information
For prospective candidates, contractors, referees and clients, we will only collect, store, use, process, transfer and disclose personal data in so far as it is necessary for our legitimate interests in that we need the information in order to assess suitability for potential roles, to find potential candidates, to contact referees and to perform services for clients (for example to discuss relevant vacancies and suitable candidates.)
In the event that we need to collect and hold special category personal data about you, such as health information that you or others provide, we always ask for your consent before undertaking such processing.
3. What personal data will we collect from you?
We may collect, store and process the following categories of personal data:
3.1 Personal data you provide to us
You may give us personal data through our website or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you subscribe to our service and submit your CV to us.
Here are some examples of the type of personal data you may give us:
· Personal contact details such as name, title, addresses, telephone numbers and personal email addresses.
· Date of birth.
· Your CV / work history.
· Your job preferences and requirements.
· Next of kin and emergency contact information.
· National Insurance number.
· Bank account details, payroll records and tax status information.
· Recruitment information (including copies of right to work documentation, such as a passport or work permit references and other information included in a CV or cover letter or as part of the application process).
· Professional Indemnity Insurance and other certification where applicable.
· Details of your connection with the intermediary through which you may be supplying services.
3.2. Special category personal information
We may collect and process special category or more sensitive personal data only so far as is necessary to ensure we conform to legal requirements, such as equal opportunities laws or legal obligations imposed upon us by our clients. We must have your explicit consent to collect and store such data. Special category data is any of the following:
· Information about your race or ethnicity, religious beliefs, health or sex life, sexual orientation and political opinions.
· Trade union membership.
· Information about criminal convictions and offences.
3.3. Information automatically collected
We may also collect the following type of personal data when you visit our website:
· Technical information, including the internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
· Information about your visit, including the full uniform resource locators (URL) clickstream to, through and from our site (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any phone number used to call our consultants.
3.4 Personal data we receive from other sources
We may receive personal data about you if you use any third parties that we work with (for example, business partners, sub-contractors, payment services, advertising networks, and analytics providers).
We use LinkedIn, job boards and their affiliate partners as publicly available sources of personal data for recruitment purposes. We may also receive information about you by word of mouth, for example by a recommendation from a friend, or former or current colleague.
4. How will we use your personal data?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To make it (including your CV) available to our consultants in connection with the recruitment process.
- The information you provide, including your CV identifying you by name, will be used to determine your suitability for a position.
- For the purposes of ensuring the validity of right to work documents and security checks as may be required by our clients and as permitted by law.
- For the purposes of finding you employment or work with prospective employers and clients in connection with the recruitment process.
- To contact you about industry specific information and opportunities that might be of interest to you.
- To deal with legal disputes involving you, or other employees, workers, contractors or clients, including accidents at work.
- To notify you about changes to our service.
- To put in place contractual arrangements and documentation once a role has been secured, including payment and taxation processes if you are a temporary worker or contractor.
5. How will we share or disclose your personal information?
We may share your personal data with selected third parties including:
- Prospective employers and/or clients for the purposes of assessing your suitability.
- Relevant third party partners, including job boards and supplies of business services (where appropriate).
- Identity verification companies for the purpose of validating right to work documents and ID documents.
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If our assets are acquired by a third party, in which case personal data held by us about our candidates and clients will be one of the transferred.
6. Where is your personal data stored?
All information you provide to us is stored on our secure servers and is protected using industry standard Secure Layer (SSL) Encryption Technology.
We will do our best to protect your personal information, although as the transmission of information via the internet is not completely secure we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, misuse or loss.
If you suspect any unauthorised access to or misuse or loss of your data, please contact us immediately using our contact details.
6.1 How we hold the information
All personal data we have stored is stored on our database in the UK.
7. How long do we keep your personal data?
We keep your personal data in accordance with the following data retention periods:
Candidate personal data – 5 years since the last contact with you, where contact means addition of your personal data to our database, placement into a role or where there is a record of verbal or written communication with you.
Contractor financial data – 7 years following the last payment made. Contractors includes any Candidate who we have placed and made a payment to.
We will endeavour to permanently erase your personal data once it reaches the end of its retention period or where we receive a valid request from you to do so. However some of your data may still exist within our systems. For our purposes, this data will be put beyond use, meaning that while it still exists on a system, it cannot be readily accessed by operational systems, processes or staff.
8. Access to and correction of your information
- Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
8.2 Your rights in connection with your personal information
Under certain circumstances, by law you have the right to:
· Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;
· Request erasure of your personal information. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
· Object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and your particular situation makes you want to object to processing on this basis. You also have the right to object where we are processing your personal data for direct marketing purposes;
· Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal data about you.
· Request the transfer of your personal data to another party.
· Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
If you want to verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, or request access to your personal data, please contact us using the details in the 'How can you contact us?' section below in writing.
We will confirm with you what the response date will be, which will usually be within one month. We are entitled to refuse the request if it is deemed excessive or a repetition of a previous request.
9. Changes to our privacy statement
Any changes we may make to our privacy statement in the future will be posted on our websites and, where appropriate, notified to you by e-mail.
10. Links to other sites
Our site may, from time to time, contain links to and from the sites of our partner networks, advertisers and affiliates. If you follow a link to any of these sites, please note that these sites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these sites.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
A cookie is a small text file that is stored by your browser on your device or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer's hard drive or device.
You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies you may not be able to access all or parts of our site.
13. How will we contact you?
We may contact you by telephone, sms or email.
Changes to your preferences will be updated within 30 days of your request.
14. How can you contact us?
To contact us with any queries around data or this privacy statement, you can get in touch with us in the following way:
Please note we may keep a record of your communications to help us resolve any issues which you raise.
15. How can you contact the supervisory authority?
The supervisory authority in the UK is the Information Commissioner's Office (ICO). You can contact them in the following ways:
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF