GDPR

Company Name:Phillip Shaun Construction Limited
Company contact details:Phillip Shaun Construction Limited. Hamilton House, Mabledon Place, London, WC1H 9BB
0204 530 5581
Document:Candidate Privacy Policy
Topic:Data Protection
Date:12 February 2021

Phillip Shaun Construction Limited is a recruitment business which provides work-finding services to its clients and work-seekers. The Company must process the personal data (including special categories of personal data) of work-seekers and prospective work- seekers, so that it can provide these services. In doing so, the Company acts as a data controller, which means we determine the purpose and means of the processing of your personal data. ‘Personal data’ means information which relates to a living person who can be identified from that data (a ‘data subject’) on its own, or when taken together with other information which is likely to come into our possession. ‘Special categories of personal data’ include: your biometric data, your health and any disabilities, any criminal convictions. ‘Processing’ means any operation which is performed on personal data such as: collection, recording, organisation, structuring or storage; adaption or alteration; retrieval, consultation or use; disclosure by transmission, dissemination or otherwise making available; alignment or combination; and restriction, destruction or erasure. For the purposes of this policy ‘personal information’ includes personal data and any data that falls within the special categories of personal data.

This policy explains how the Company will hold and process your personal information, and it also explains your rights as a data subject. This policy does not form part of any contract you may have with the Company and can be amended by the Company at any time. It is intended that this policy is fully compliant with the Data Protection Act 2018 Act (2018 Act) and the EU General Data Protection Regulations (GDPR). If any conflict arises between those laws and this policy, the Company intends to comply with the 2018 Act and the GDPR.

You, as a work-seeker or prospective work-seeker, may give your personal information to the Company directly, such as by telephone, by email, on an application or registration form or via our website, or we may collect them from another source such as a jobs board. The Company must have a legal basis for processing your personal information. For the purposes of providing you with work- finding services and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement. The Company may record telephone calls for quality and training purposes and to protect the interest of both parties.

We may amend this Privacy Policy from time to time.

1. Collection and processing of personal information

The Company will collect your personal information and will process your personal information for:

We can process your personal information for these purposes without your specific consent. We will not use your personal information for an unrelated purpose without telling you about it and the legal basis that we intend to rely on for processing it. We will collect personal information that will help us in such processing, such as your name, location, profession, skills, qualifications, employment history, references, contact details, right to work details, and where appropriate, details relating to health and criminal convictions. We may store further personal information relating to any engagement/ potential engagement such as interviews, start and end dates, pay history, third party company details, and bank details.

If you choose not to provide us with certain personal information you should be aware that we may not be able to carry out certain parts of the contract between us, or certain parts of the services we usually provide for work-seekers. For example, if you do not provide us with your bank account details we may not be able to pay you. It might also stop us from complying with certain legal obligations and duties which we have such as to pay the right amount of tax to HMRC or to make reasonable adjustments in relation to any disability you may suffer from.

We have to process your personal information in various situations, such as:

For example (and see below for the meaning of the asterisks):

We might process special categories of your personal data for the purposes in the paragraph above which have an asterisk beside them. In particular, we may use information in relation to:

We do not take automated decisions about you using your personal information or use profiling in relation to you.

The Company may process your personal information to carry out our contractual obligations or for our legitimate interests. For example, we may share your personal information with potential employers, hiring clients or Managed Service Providers working on behalf of end clients. Your personal information may also be shared confidentially with third party providers used in the operation of our business such as cloud hosted email or database provision. If you undertake temporary assignments through the Company, we may share certain payroll and pension data with our service providers as necessary. We will not share more information than is reasonably necessary or desirable in order to perform these objectives.

We require third parties with whom we share your personal information to keep your personal information confidential and secure and to protect it in accordance with the law and our policies. They are only permitted to process your data for the lawful purpose for which it has been shared and in accordance with our instructions.

We do not send your personal information outside the European Economic Area. If this changes you will be notified of this and the protections which are in place to protect the security of your data will be explained.

If the Company sells or buys any business or assets at any point in the future we may share your personal information with the prospective seller or buyer or such business or assets.

The protection of your personal information and your privacy are important to us. All information that you provide to us is stored within our database on our servers at a secure datacentre. We have a range of suitable electronic and managerial procedures to safeguard that information.

2. Data retention

The Company will retain certain personal information (name, contact telephone, email address, date of birth, trade/profession and, if applicable, the latest version of your CV) to enable us to advise you from time to time of potential job opportunities that may be of interest to you.

Since the purpose for processing this personal information is to provide you with work-finding services potentially for your entire working life, the Company does not propose to put a time limit on the length of time it retains this information referred to above, but you are entitled to require us to delete or rectify/update any such data at any time (please refer to part 5 (your rights) below. Other information (such as bank account details and National Insurance number) will not be retained for more than three years from the date of the end of your last assignment through us.

In addition, we must keep where appropriate your payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation. Different laws require us to keep different data for different periods of time.

3. Data breaches

We have robust measures in place to minimise and prevent data breaches from taking place. Should a breach of personal information occur (whether in respect of you or someone else) then we must take notes and keep evidence of that breach. If the breach is likely to result in a risk to the rights and freedoms of individuals then we must also notify the Information Commissioner’s Office within 72 hours.

If you are aware of a data breach you must contact the Company’s Compliance Team on the phone number or email address as set out at the top of this policy immediately and keep any evidence you have in relation to the breach.

4. Subject access requests

Data subjects can make a ‘subject access request’ (‘SAR’) to find out the information we hold about them. This request must be made in writing to the Company. We must respond within one month unless the request is complex or numerous in which case the period in which we must respond can be extended by a further two months. There is no fee for making a SAR. However, if your request is manifestly unfounded or excessive we may charge a reasonable administrative fee or refuse to respond to your request.

5. Your rights

You have the following data protection rights:

Any requests made by you in respect of your personal information should be made on the phone number set out at the top of this policy. We will respond to requests regarding your rights within 30 days. Many of the rights listed above are subject to certain defined circumstances and we may not always be able to comply with your request. We will tell you if this is the case.

6. Complaints or queries

If you have any complaints of queries about this privacy policy or any of the procedures set out in it or our processing of your personal information please contact The Compliance Team at the Reading office (see above).

You also have the right to raise concerns with Information Commissioner’s Office on 0204 530 5581 or at https://www.phillipshaun.co.uk, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.