In line with the General Data Protection Regulation, Niche Recruitment Limited is committed to…
Posted by Niche Recruitment
16th May 2018
In line with the General Data Protection Regulation, Niche Recruitment Limited is committed to providing clarity regarding the types of personal information we collect, how we use the information, who we share it with, and your data rights in terms of how your information is used, stored and shared.
Personal Information That We May Request from You
We will collect personal information about you using a variety of methods, such as (but not limited to) through our website, social media channels, events, surveys, job applications and interview and subsequent online, telephone and email contact. As part of providing our recruitment service, we may request the following types of personal information from you:
- Contact information (name, address, email address and telephone number).
- Employment history, education, qualifications, professional registrations and information about you provided in your CV or that you complete in our application form.
- Details of your skills, competencies and capability.
- Results of skills assessments,
- Information about citizenship, visa status and right to work in the UK.
- Results of criminal and other background checks.
- NI number.
- Date of birth.
- Details provided relating to age, gender, disabilities / health related information as well as information relating to other protected characteristics as defined under the Equality Act 2010 which may be gathered to support diversity monitoring.
- Details of those you provide as emergency contacts.
- Information provided about you in references.
- Information you provide about family, friends or other people you would like us to contact.
- Information you provide us with in surveys.
- Information about your performance on temporary assignments.
- Payroll and financial information (such as bank details, tax-related information, benefits you receive etc).
- Login details required for use of our website.
PLEASE NOTE: by completing our registration form and other company or registration documentation, you are giving consent for us to use, store and share your personal data for the purpose of sourcing suitable work for you, monitoring/managing your assignments or placements and occasionally marketing relevant services that we provide to you. This is the legal basis on which we process your personal data and you can withdraw your consent at any time by emailing Niche Recruitment at firstname.lastname@example.org or writing to Niche Recruitment Limited, 51 Basepoint Business Centre, Rivermead Drive, Swindon, SN57EX. We will stop processing if we have no other legal basis or requirement to do so.
Where the personal data collected includes sensitive/special category data, we will obtain a separate, explicit consent from you for this, which may be withdrawn in the same way. Examples of special category data include but are not limited to information about your health, race, sexual orientation, criminal convictions etc.
How We Use the Information We Collect
We will use the information you provide to:
- Provide you with our recruitment services.
- Respond to your enquiries.
- Assess your suitability as a candidate and validate your experience, competence, qualifications, registrations etc as required by the position for which you are applying.
- Provide you with job opportunities and work.
- Provide career advice.
- Process payments to you and send you payslips.
- Monitor and manage your performance and discipline.
- Audit compliance with prevailing employment law and honour contractual agreements with our clients.
- Manage client relationships.
- Analyse data and trends from our websites and using data held on our recruitment software.
- Send you information about vacancies, promotional material and other communications (e.g. invitations to participate in our surveys or events).
- Prevent fraudulent and unlawful activity and comply with legal requirements, industry standards, contractual obligations and company policies/procedures.
- Improve our business services and the performance of our website.
Information We Share
We will only disclose personal information we collect about you to facilitate delivery of our services. As such your personal data may be shared with clients or organisations with whom we work to help you find a job.
[We may disclose your personal data to third parties in the event that we sell or buy any business or assets. If we merge with, or are acquired by, another business, personal data held by us may be shared, but you will be sent notice in advance]
Where personal information is shared with a managed service provider or other 3rd party supplier, we do not authorise them to use or disclose your personal data except in the provision of the service that they have been engaged to supply or to comply with legislation.
Finally we may disclose your personal data to comply with any applicable law, in connection with an investigation of suspected or actual fraudulent activity or is based on a lawful disclosure request.
We will never:
- Sell your personal data to a third party.
- Share your personal data with a third party for marketing purposes without your consent.
How Long We Will Retain Your Personal Data
We will retain your personal information for a reasonable duration to provide you with our services and to comply with prevailing legislation and regulation as follows:
|Type of Records||Statutory Retention Period||Statutory Authority|
|Accident book / accident records & reports||3 years from date of the last entry (or if the accident involves a child, until that person reaches the age of 21.||Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 1995 (RIDDOR) (SI 1995/3163) as amended, and Limitation Act 1980.|
|Accounting records||3 years
|Section 221 of the Companies Act 1985 modified by the Companies Acts 1989 and 2006.|
|Income tax and NI returns, income tax records and correspondence with HMRC||Not less than 3 years after the end of the financial year to which they relate.||The Income Tax (Employments) Regulations 1993 (SI 1993/744) as amended, for example by The Income Tax (Employments) (Amendment No. 6) Regulations 1996 (SI 1996/2631).|
|Statutory maternity pay records, calculations, certificates or other medical evidence||3 years after the end of the tax years in which the maternity period ends.||The Statutory Maternity Pay (General) Regulations 1986 (SI 1986/1960) as amended.|
|Wage / salary records, overtime, bonuses, expenses||6 years||Taxes Management Act 1970.|
|National minimum wage records||3 years after the end of the pay reference period following the one that the records cover.||National Minimum Wage Act 1998|
|Records relating to working time||2 years from the date on which they were made||The Working Time Regulations 1998 (SI 1998/1833).|
For many types of HR records, there is no definitive retention period and we are entitled to decide how long to keep them. Niche Recruitment Limited has based our records retention periods below on the time limits for potential UK tribunal or civil claims and guidance in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. The UK Limitation Act 1980 contains a 6-year time limit for starting many legal proceedings, so where documents may be relevant to a contractual claim, we will keep these records for at least this period. Other records may be retained longer or permanently. These retention periods are in line with CIPD recommendations.
|Type of Records||Minimum Retention Period|
|Actuarial valuation reports||Permanently|
|Application forms and interview notes (for unsuccessful candidates)||3 years|
|Assessments under health and safety regulations and records of consultations with safety representatives and committees||Permanently|
|Inland Revenue/HMRC approvals||Permanently|
|Parental leave||5 years from birth/adoption of the child or 18 years if the child receives a disability allowance.|
|Pension scheme investment policies||12 years from the ending of any benefit payable under the policy.|
|Placed candidate files, personnel files and training records (including disciplinary records and working time records)||7 years after the date on which we last provide services to the associated applicant or client or 7 years after employment has ended.
We may hold data significantly longer if contractually required to do so, and for contract clients we will hold all data relating to service provided for a minimum of seven years after the contract expires. Where such records could be relevant to a claim for personal injury, we will retain them for a minimum of 21 years from contract expiry.
|Redundancy details, calculations of payments, refunds, notification to the Secretary of State||6 years from the date of redundancy|
|Senior executives’ records (that is, those on a senior management team or their equivalents)||Permanently|
|Statutory Sick Pay records, calculations, certificates, self-certificates||6 years after the employment ceases.
|Timesheets||2 years after audit|
|Trade union agreements||10 years after ceasing to be effective|
After these durations have elapsed, your personal data will be securely deleted or destroyed.
Automated Information We May Collect from You
When you visit our website, we may collect certain information by automated means, such as using cookies, web beacons and web server logs. The information we may collect in this manner includes IP address, unique device identifier, browser characteristics, device characteristics, operating system, language preferences, referring URLs, information on actions taken on our website, dates and times of visits to our website and other usage statistics.
A cookie is a small file that asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
What Cookies Do We Collect?
PHPSESSID [stores your php session id]
log [Internal tracking id]
__utmc [Google Analytics]
__utma [Google Analytics]
__utmb [Google Analytics]
__utmz [Google Analytics]
utmcsr [Google Analytics]
utmccn [Google Analytics]
utmcmd [Google Analytics]
Google AdWords Remarketing Cookie
We may use Google AdWords Remarketing to advertise trigger across the Internet. AdWords Remarketing will display relevant ads tailored to you based on what parts of the Niche Recruitment website you have viewed by placing a cookie on your machine.
THIS COOKIE DOES NOT IN ANYWAY IDENTIFY YOU OR GIVE US OR ANY THIRD PARTY ACCESS TO YOUR COMPUTER.
The cookie is used to say “This person visited this page, so show them ads relating to that page.”
To summarise, the Google AdWords remarketing Cookie connects the activity of www.nicherecruitment.co.uk and www.nicherecruitment.co.uk with the Adwords advertising network and the Doubleclick Cookie.
You can opt out of the cookie tracking here:
Links to Other Websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
How We Protect Your Personal Information
We maintain administrative, technical and physical safeguards to protect the personal information you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
Your Rights & Choices
If you have any questions about the use of your personal information or would like to update your preferences, please contact us as specified below.
Your Right to Object: You have the right to ask us not to process your personal data if you do not believe we are permitted to do so, including for marketing purposes. Following such notification, we will stop processing your personal data unless there is a legal basis or requirement to do so.
Marketing: We will inform you (before collecting your data) if we intend to use your data for marketing purposes. We will only use your data for this if you have agreed in advance.
Correction of Information: If you notify us that the personal data we hold is complete or inaccurate we will correct or complete the information as soon as possible.
Deletion of Information: You have the right to request that your personal data be deleted; including if we no longer need it for the purpose we collected it, or you withdraw your consent. Following such a request we will erase your personal data without undue delay unless continued retention is necessary and permitted by law. If we made the personal data public, we will take reasonable steps to inform other data controllers processing about your erasure request.
Restriction on Processing: You have the right to request that we stop processing your personal data, but hold it for you, in the event the personal data we hold is inaccurate, the processing is unlawful or we no longer need the personal data. Once the processing is restricted, we will only continue to process your personal data if you consent or we have another legal basis for doing so.
Access to Information: You have the right to access information held about you and any access request will usually be free of charge and responded to within 30 days. We will endeavor to provide information in a format requested, but we may charge you a reasonable fee for additional copies.
Data Portability: You have the right to receive a copy of your personal data which you gave to us. The copy will be provided in a commonly used and machine-readable format. You can also have it transmitted directly from us to another data controller, where technically possible.
If we fail to respond to your Subject Access Request (SAR) within 30 days of receipt or you wish to make a complaint relating to our response to your SAR or any other data rights request, you should initially contact:
Michelle Graham, Director / Data Protection Officer.
51 Basepoint Business Centre, Rivermead Drive, Swindon, SN57EX
We will aim to acknowledge a complaint within 24 hours an Investigation will commence immediately with an assessment of the situation and contact with all individuals involved.
Where appropriate, internal interviews will be held as soon as possible.
In every case we will take all reasonable and practicable steps to resolve the complaint within 15 working days of its receipt unless the nature of the complaint requires additional investigation or action by an appropriate third party in which case the complaint will be resolved as soon as possible thereafter.
During the complaints resolution process we will ensure that you are kept abreast of progress in resolving the complaint.
We maintain a written log of all complaints which includes your name and contact details, nature of the complaint, actions taken to resolve it and any changes to procedures to prevent recurrence.
If the Data Protection Officer cannot resolve the problem or if you are dissatisfied with any aspect of the handling of your complaint, you should contact Michelle Graham (details above), outlining the details in full.
You also have the right to complain to the Information Commissioner’s Office if you believe that we have not complied with the above policy or the law pertaining to your personal information on the following number: 0303 123 1113.
We are registered with the Information Commissioner’s Office and our registered number is ZA165805