Who is responsible for your personal data?
The Highfield Partnership Ltd, a company registered in England a Wales (Registration number 8181162) is registered as a data controller in the United Kingdom for the purposes of the Data Protection Act 1998 or any subsequent UK legislation resulting from EU General Data Protection Regulations (GDPR). We are a specialised consulting firm and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003.
Where is your personal data stored?
All the personal data we have is stored on our database in the UK. The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (”EEA”). It may be transferred to third parties outside of the EEA for the purpose of our recruitment & consulting services. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. This includes staff engaged in, among other things, our recruitment services and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. The Highfield Partnership will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.
The information we collect and how we use it
We collect information that may be provided to us directly by yourself, accessible in the public domain or obtained through third parties sources. Your personal details may include your name, job title, employer, private and corporate e-mail address, and phone number. If provided to us directly by you, we may also details including an address; financial information (including bank details if required to process payments); compliance documentation and references verifying your right to work in the United Kingdom, and/or your qualifications and experience; curriculum vitae and photograph; and links to your professional profiles available in the public domain e.g. LinkedIn, Twitter, business Facebook or corporate website.
This information is held and used by us for the following purposes:
- For matching your skill sets with relevant career opportunities;
- To keep you informed of relevant opportunities as they arise;
- To put forward your details to our clients and prospective employers for you to be considered for prospective employment or engagement;
- For keeping you informed of company services, news and insight related to your specialisms when you have granted us permission to do so;
- To improve our customer service and make our services more valuable to you;
- To notify you about upcoming events when you have granted us permission to do so;
Information we obtain from other sources
This is information we obtain about you from other sources such as LinkedIn, job board websites, online CV libraries, your business card, or personal recommendations. In this case we will inform you of the fact we hold personal data about you, by sending you this privacy notice, within a maximum of 30 days of collecting the data, to explain the purpose we intend to retain and process your personal data.
Disclosure of your information
Your CV and related information will be shared or sent to prospective employers (our clients). If you secure a new role through The Highfield Partnership, additional information may need to be provided to them to enable the engagement to proceed. We may share your information with selected third parties such as:
- Client Recruitment Management systems
- Marketing and technology platforms such as SurveyMonkey
- Our third party business technology supplier (CRM), Invenias
- Our third party Financial Systems service providers
Retention of your data
We understand our legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests and that you are happy for us to do so. We segregate our data so that we keep different types of data for different time periods. The criteria we use to determine whether we should retain your personal data includes:
- The nature of the personal data;
- Its perceived accuracy;
- Our legal obligations;
- Whether an interview or placement has been arranged; and
- Our recruitment expertise and knowledge of the industry by country, sector and job role.
Depending upon the criteria used as to whether we should retain your information we may:-
- Retain all your personal data on our main Customer Relationship Manager (CRM) system and financial systems.
- Archive all or part of your personal data from our main Customer Relationship Manager (CRM) system.
- Retain your personal data on our financial systems only.
- Pseudonymise* parts of your data, particularly following a request for suppression or deletion of your data, to ensure that we do not re-enter your personal data on to our database, unless requested to do so.
- Remove all your personal data on our main Customer Relationship Manager (CRM) system and financial systems.
*For your information, Pseudonymised Data is created by taking identifying fields within a database and replacing them with artificial identifiers, or pseudonyms.
What are your rights?
You have the right to ask us not to process your personal data for marketing purposes. From May 25th 2018 we will always obtain your consent before we use your data for such purposes. You can exercise your right to accept or prevent such processing by checking certain boxes on the forms we use to collect your data. You have the right to request information about the personal data we hold on you at any time. If you would like to make a request for information please email [email protected]. You have the right to request modifications, updates or removal of your data. We may ask you to verify your identify and for more information about your request.
How do we protect your personal data?
We endeavour to take all reasonable steps to protect your personal data but cannot guarantee the security of any data you disclose online. You accept the inherent security implications of sending information over the internet and will not hold us responsible for any breach of security unless we have been negligent.
All information you provide to us is stored on our secure password protected systems; robust firewall. We have company policies in place with regular reminders about not clicking on potentially malicious links or attachments to ensure risk from phishing and other malware is minimal.
A cookie is a piece of data stored on the user’s hard drive containing information about the user. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Once the user closes their browser, the cookie simply terminates. For instance, by setting a cookie on our site, the user would not have to log in a password more than once, thereby saving time while on our site. If a user rejects the cookie, they may still use our site.
We use IP addresses to analyse trends, administer the site, track user’s movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.
Third party links
This web site contains links to other sites. Please be aware that The Highfield Partnership Ltd is not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects personally identifiable information. This privacy statement applies solely to information collected by this website.
The Highfield Partnership Ltd is registered with the Information Commissioner’s Office reference Z3302531.