Personal information about unsuccessful candidates will be held for 6 months after the recruitment exercise has been completed, it will then be destroyed or deleted. Once a person has joined us, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be processed for purposes directly relevant to that contract. Once their person’s employment employment has ended, we will retain the file in accordance with the requirements of our Data Assets Register and then destroy it. For people who make enquiries or requests under the Data Protection Act 2018 We may be asked by any person (including clients and former clients) what personal information we hold about them and about their rights under Data Protection Act 2018. In order to respond to such enquiries we will normally ask for some personal data (and we may have to establish the ID) for example their name, person’s address and email address. For visitors to our website When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this for example, to show the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. Processing data via outsourced services that we use The table below gives details. Outsourced What data is Where is it Is it shared How is it When is it service used? stored? further? protected? destroyed? provider Overflow A record of our Computer No Restricted Subject to telephony telephone system access data retention calls policy Compliance, We may share Server, No Restricted Subject to auditing personal Case access data retention information for management policy compliance database, and planned Office auditing premises purposes but only where this helps us to fulfil effectively our statutory and regulatory functions
Personal information about unsuccessful candidates will be held for 6 months after the recruitment exercise has been completed, it will then be destroyed or deleted. Once a person has joined us, we will compile a file relating to their employment. The information contained in this will be kept secure and will only be processed for purposes directly relevant to that person’s employment contract. Once their employment has ended, we will retain the file in accordance with the requirements of our Data Assets Register and then destroy it. For people who make enquiries or requests under the Data Protection Act 2018 We may be asked by any person (including clients and former clients) what personal information we hold about them and about their rights under Data Protection Act 2018. In order to respond to such enquiries we will normally ask for some personal data (and we may have to establish the person’s ID) for example their name, address and email address. For visitors to our website When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this for example, to show the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. Processing data via outsourced services that we use The table below gives details. Outsourced service provider What data is used? Where is it stored? Is it shared further? How is it protected? When is it destroyed? Overflow telephony A record of our telephone calls Computer system No Restricted access Subject to data retention policy Compliance, auditing We may share personal information for compliance and planned auditing purposes but only where this helps us to fulfil effectively our statutory and regulatory functions Server, Case management database, Office premises No Restricted access Subject to data retention policy
Privacy_Policy_for_Clients_and_Contacts.docx