Data Protection Policy for Perfect Hire Global Recruitment
1. Introduction
Perfect Hire Global Recruitment is committed to safeguarding the privacy and security of the personal data we hold and process. This Data Protection Policy outlines how we manage personal data in compliance with data protection laws, including the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
2. Scope
This policy applies to all personal data collected, processed, and stored by Perfect Hire Global Recruitment. This includes information relating to clients, candidates, employees, and other individuals whose data we process in the course of providing recruitment services.
3. Principles of Data Protection
We are committed to ensuring that personal data is:
•Processed lawfully, fairly, and transparently.
•Collected for specified, legitimate purposes and not further processed in a manner that is incompatible with those purposes.
•Adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
•Accurate and kept up to date.
•Retained only for as long as necessary to fulfil the purposes for which it was collected.
•Processed in a secure manner, including protection against unauthorised or unlawful processing, and against accidental loss, destruction, or damage.
4. Data Protection Officer (DPO)
The Data Protection Officer (DPO) is responsible for overseeing the implementation of this policy and ensuring compliance with data protection laws.
Contact details: Sandra Clegg, sandra@perfect-hiregr.com
5. Legal Basis for Processing Personal Data
We ensure that all personal data is processed based on one or more of the following legal bases:
•Consent: When individuals provide clear and informed consent to process their data.
•Contractual Necessity: To fulfil a contract or take steps to enter into a contract (e.g., recruitment services).
•Legal Obligation: Where processing is necessary to comply with legal obligations (e.g., tax or employment laws).
•Legitimate Interests: When we have a legitimate interest in processing data, provided that this interest is not overridden by the individual's rights and freedoms.
6. Data Collection and Use
We collect and process personal data for the following purposes:
•To assess and match candidates to job opportunities.
•To maintain records for recruitment activities.
•To manage contracts and communications with clients and candidates.
•To comply with legal, regulatory, and contractual requirements.
7. Data Security and Confidentiality
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, destruction, or loss. This includes encryption, firewalls, secure servers, access control policies, and regular security audits.
8. Access to Personal Data
Access to personal data is restricted to authorised personnel who require access to perform their job responsibilities. All employees and contractors are required to undergo data protection training and are bound by confidentiality agreements.
9. Data Subject Rights
Individuals have the following rights regarding their personal data:
•Right to Access: The right to request a copy of the personal data we hold about them.
•Right to Rectification: The right to request correction of inaccurate or incomplete data.
•Right to Erasure: The right to request deletion of personal data under certain circumstances (e.g., when data is no longer necessary for the purposes for which it was collected).
•Right to Restrict Processing: The right to request restriction of processing in certain situations (e.g., when the accuracy of data is contested).
•Right to Object: The right to object to processing, including processing for direct marketing purposes.
•Right to Data Portability: The right to receive personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
•Right to Withdraw Consent: If processing is based on consent, individuals can withdraw their consent at any time, without affecting the lawfulness of processing before consent was withdrawn.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once personal data is no longer needed, it is securely deleted or anonymized in accordance with our data retention procedures.
11. Data Transfers
If personal data is transferred outside of the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legal mechanisms for international data transfers.
12. Data Breach Reporting and Management
In the event of a data breach that risks individuals' rights and freedoms, we will promptly notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Affected individuals will be informed if the breach poses a high risk to their rights and freedoms.
13. Third-Party Processors
Where we use third-party service providers (data processors) to process personal data on our behalf, we ensure that these providers are GDPR-compliant and have appropriate measures in place to safeguard personal data. We will enter into Data Processing Agreements (DPAs) to establish the terms of data processing and security.
14. Staff Training and Awareness
All employees and contractors of Perfect Hire Global Recruitment are required to complete regular training on data protection principles and best practices. They are also informed of their responsibilities in handling personal data securely and in compliance with this policy.
15. Review and Updates
This policy will be reviewed annually or more frequently if necessary, to ensure ongoing compliance with data protection laws and best practices. Any updates to this policy will be communicated to staff and made available to clients and candidates upon request.
16. Contact Details
If you have any questions or concerns about this policy or how we handle your personal data, please contact us at:
Email: info@perfect-hiregr.com
Phone: 0191 8290077
Address: Office 2, Armadillo Self Storage, Newcastle upon Tyne NE6 5XB
.
Company number 15867088