This Privacy Notice tells you what to expect in relation to personal information about you which is collected, handled and processed by Locke & McCloud Ltd.
Locke and McCloud Ltd of Waterside, 1 Station Rd, Harpenden AL5 4US is the Data Controller.
We acknowledge and agree that any personal data of yours that we handle will be processed in accordance with all applicable data protection laws in force from time to time. Currently, the Data Protection Act 1998 applies. With effect from 25 May 2018, the General Data Protection Regulations (“GDPR”) will come into force, which will change the law.
The information we may collect
The information about you we may collect, hold and process is set out below:
(A) Information collected and processed for finding you a suitable role is as follows:
Your email address
Your telephone number
Job preferences including role, geographical areas and salary
Any other work-related information you provide, for example, education or training certificates
(B) Information in respect to individuals that have worked for us previously or may work for us is as follows:
In some cases, permits and visas
National insurance number
Full details of job offers and placements
Outcome of criminal record checks and security clearance for certain roles
In certain cases, medical information
Financial information (including but not limited to payroll details and terms, HMRC data, pension scheme details, court orders and statutory payments)
A log of our communications with you by email and telephone
This information will have been provided, or will be provided, by you or a third party who we work with, such as a Job Board Company or another employment business or agency. In the case of references, these will be from your previous employer. Medical information may be supplied by a third party such as your GP, Consultant or Occupational Health. The outcome of criminal record checks and security clearance checks, where relevant, will be supplied by the Disclosure and Barring Service or other external company applicable to the placement.
How we use the information
The above information is used to provide our services to you in our capacity as an employment business / agency to find you suitable work whether on a temporary or permanent basis based on your requirements as set out below.
The information under A above may be used as follows:
To match your skill sets with job vacancies to assist in finding you the positions that most suit you
To put forward your details to our clients and prospective employers for you to be considered for vacancies
To place you with our clients and prospective employers
To keep you informed of available opportunities as they arise
To keep you informed of the services offered by us
The information under B above may be used as follows:
To establish that you have the right to work
To undertake relevant security and criminal record checks as required by our clients and prospective employers and as permitted by law
To deal with any medical and health and safety issues relating to certain positions
To put in place contractual arrangements and documentation once a role has been secured
To pay you if placed
How we hold the information
Personal data we have is stored on our on-premise computers and servers, and also 3rd Party Cloud Hosted servers of Bullhorn CRM (please see https://www.bullhorn.com/uk/gdpr-commitment-statement/). Our contractors & permanent placements personal information is also held with TBOS -https://www.tbos.com/ .
Disclosure of your information
Your CV and related information will be shared or sent to prospective employers and our clients. Once you have secured a placement additional information will be provided to them to enable the placement to proceed. Such employers and clients will usually be located inside the European Economic Area (EEA) but may be outside of the EEA. Personal data shall not be transferred to a country or territory outside the EEA unless that country or territory ensures an adequate level of protection or the appropriate safeguards are in place for your rights and freedoms. Before such a transfer takes place outside of the EEA, we will provide you with further information concerning this.
Other trusted third parties that we may share your data with are as follows: HM Revenue and Customs, pension scheme providers, legal advisors and other companies for the purpose of undertaking pre-engagement checks for the role or for paying you.
What is the legal basis for processing the information?
We will rely on your consent to process the information marked with an * above which is collected at the outset of the recruitment process.
Information and documentation to establish your right to work is processed by us as we are legally obliged to do so.
In respect of medical information, the basis for us processing this will depend on the circumstances but will usually be for one of the following reasons: it is necessary to protect health and safety or to prevent discrimination on the grounds of disability or where consent has been obtained, if required.
Information in relation to criminal record checks, which are relevant for some roles, will be processed on the basis that it is necessary for us to comply with the law or consent will be obtained, if required.
Once a position has been found for you, we will process your personal data, including financial information, for the purpose of you entering into a contract to fulfil your role and to enable us to pay you, depending on the specific contractual arrangements and circumstances.
For the purposes of paying you, where relevant, we are legally obliged to provide information to HMRC.
Once a placement has been secured, we may also process your data on the basis of our legitimate interests i.e. for administrative purposes.
You currently have the right at any time to ask for a copy of the information about you that we hold. Currently, we have the right to charge an administration fee for this service. When the GDPR comes into force, we will no longer have the right to charge a fee. If you would like to make a request for information, please email email@example.com.
In addition to this right of access, when the GDPR comes into force, you will also have the following rights: erasure, restriction of processing, objection and data portability. We will update you further in connection with these rights when they come into force.
Retention of your data
Your data will be retained for no longer than is necessary and in accordance with our Data Retention Policy.
Withdrawal of consent
If you have provided us with your consent to process your data, for the purpose of using our services and us finding you suitable work, you have the right to withdraw this at any time. To do so you should contact us by emailing firstname.lastname@example.org
To subscribe to job alerts emails, you will be required to provide your email address. We will use your email address to keep you informed of the latest jobs relevant to your skills and/or provide you with industry news via job alerts. If you no longer wish to receive this information, unsubscribe links are provided in every job alert email. You can also receive job alerts via RSS feeds without the requirement to provide your email address or you can use our smartphone apps to receive job adverts, but to do that, you need to provide us with the registration details required by the app.
Curriculum vitae (‘CV’)
We provide you with the option of submitting your CV via our website or by sending your CV to one of our consultants. You can do this to apply for a certain advertised job or to be considered by our recruitment consultants for positions as they come up. Your CV will be stored in our database, and will be accessible by any of our recruitment consultants across the world. You can update your CV at any time, simply by following the same procedure to submit a new CV.
We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure we have put in place suitable physical, electronic, managerial and contractual procedures to safeguard and secure the information we collect online.
Aggregate information about online visitors
We gather information and statistics about all visitors to our website (e.g. which area users access most frequently, or which services users access the most). We only use this kind of data in aggregate form. The information helps us to identify the services most beneficial to our users. It also helps us to continually improve our online services and provide a better overall experience to our users. We may publish some of this information on the website. We may also undertake marketing profiling to help us identify services or jobs which may be of interest to you.
We use several different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit www.aboutcookies.org for detailed guidance.
The list below describes the cookies we use on this site and what we use them for. Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari.)
How to disable Cookies
All modern browsers allow you to change your cookie settings. These settings will typically be found in the ‘options’ or ‘preferences’ menu of your browser. To understand these settings, the following links may be helpful, otherwise you should use the ‘Help’ option in your browser for more details.
First Party Cookies
These are cookies that are set by this website directly.
You can find out more about Google’s position on privacy as regards its analytics service athttp://www.google.co.uk/intl/en/analytics/privacyoverview.html
Third Party Cookies
These are cookies set on your machine by external websites whose services are used on this site. Cookies of this type are the sharing buttons across the site allow visitors to share content onto social networks. Cookies are currently set by LinkedIn, Twitter, Facebook and Google+. In order to implement these buttons, and connect them to the relevant social networks and external sites, there are scripts from domains outside of our website. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on this website.
You should check the respective policies of each of these sites to see how exactly they use your information and to find out how to opt out, or delete, such information.
We use a session cookie to remember your log-in details for you. These we deem strictly necessary to the working of the website. If these are disabled then various functionality on the site will be broken, including the ability to log-in.
Flash cookies may be used to store user preferences for media player functionality and without them some flash content (such as our interactive map) may not render correctly.
Links to other websites
Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to Information Commissioners Office at https:\\ico.org.uk\concerns\.
Please address any questions, comments and requests regarding our data processing practices to email@example.com.
Changes to the Privacy Notice
This Privacy Notice may be changed by us at any time. This Privacy Notice will be updated in due course to comply with the further requirements under the GDPR which comes into force on 25 May 2018.