Direct Recruitment are fully committed to protecting and respecting the privacy of our candidates, clients and the users of our website.

We will ensure that the information you submit is only used for the purposes set out in this Privacy Notice.

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) replaces the Data Protection Regulation (Directive 95/46/EC) from 25 May 2018.

Your new rights under the GDPR are set out in this notice, but will only apply once the GDPR becomes law on 25th May 2018.

This Privacy Policy is regularly reviewed and may be updated from time to time

Who we are and what we do
• Direct Recruitment are a recruitment agency specialising in marketing roles.
• Direct Recruitment are registered in the UK with Company Number 02238421 and based at 59-60 Russell Square, London. WC1B 4HP
• Direct Recruitment is registered as a Data Controller with the ICO (Information Commissioner’s Office) Certificate Number Z4994499
• Direct Recruitment can be contacted on 02072871171 or via email to sarahb@direct-recruitment.co.uk

Why we collect personal data
We collect and use your personal data to match skills, experience and education with potential employers to help find the right employment opportunities for our candidates and the right employees for our clients.

Who we collect personal data from
We collect personal data for the following types of people so that we can operate our recruitment business successfully:
• Potential, live and placed candidates for permanent and contract roles
• Potential, live and lapsed clients
• Contacts at suppliers who we use to support our recruitment services
• Our employees, consultants and contractors
• Referee contacts provided by candidates

What type of personal data do we collect and hold
• Your name
• Address, phone number, email and other contact details
• Date of birth (if provided)
• Any information provided on your CV which could include job history, qualifications, training courses and personal information (hobbies and interests)
• Current and required salary
• Notice period
• Links to your professional social media profiles
• Nationality, passport, visa and other right to work or identity information
• Details of offers and placements
• Contact details of referees
• Personal preferences
• Marketing preferences

What is sensitive data and why we do not want this
Sensitive personal information includes information on physical and mental health, sexual orientation, race or ethnic origin, religious beliefs, trade union membership and criminal records.
As a Recruitment Agency sensitive personal data is normally not relevant and therefore we would prefer not to receive this and we request you do not provide us with this unless it is absolutely necessary. Sensitive personal data must be protected to a higher level and we will always obtain explicit consent if we do ever need to obtain this information from you.

Where we collect your data from
• Direct from you – for example you may have submitted your CV via our website or by emailing us
• Online jobsites or job boards
• LinkedIn or other social media sites
• A referral from another candidate, client or contact
• At interview or during a conversation with us (whether face to face, on the telephone or via Skype/ FaceTime)
• The public domain

How we use your personal data
We use personal date to:
• Help us to assess your suitability for job opportunities
• To keep you informed of available and relevant opportunities as they arise
• Introduce and supply your CV and details to our clients. (We will always consult you regarding opportunities before passing your CV to a potential employer.)
• Complete employment contracts with our clients or with ourselves
• Comply with legal obligations

Who we share it with
We may share your data with:
• Potential employers (with your permission)
• Outsourced payroll providers
• Legal and professional or insurance providers or accountants

Where we store date
Data is stored with a secure cloud service provider. It is our policy to ensure, in so far as is reasonably practicable, that our systems and records are secure

How long we keep your personal data for
In most circumstances your data will not be retained for more than 6 years from the last point at which we provided any services or otherwise engaged with you

The legal basis we have for using your information
There are six legal bases for processing data, but we will rely on the following four
1) legitimate business interest in processing your personal data.
2) your consent to send future job opportunities or direct marketing messages about our services
3) that it is necessary for the performance of a contract with you
4) legal obligations

Legitimate interests
We will rely on legitimate interests in providing a recruitment service. We have a legitimate interest in processing personal data during the recruitment process and for keeping records of this process. Processing data from our job applicants and candidates is fundamental and essential as it allows us to manage the recruitment process and assess candidates’ suitability for roles.

Consent
We will in some circumstances rely on consent for particular uses of your data. We ask for permission to send you details of future job opportunities or marketing materials. We also always gain consent to introduce you to a client (if you are a candidate). You may withdraw consent at any time.

Performance of a contract
We will rely on “performance of a contract” where the personal data collected is required to fulfil a contract with the data subject. This could be if we are negotiating or have entered into a placement agreement with you or any other contract to provide services to you or receive services from you.

Legal Obligation
We will rely on legal obligation if we are legally required to hold information on to you to comply with the law. This could be related to employment or taxation.

What happens if you do not supply personal data
If you do not provide the personal data necessary, or withdraw your consent for the processing of your personal data, we may not be able to match you with suitable and relevant job opportunities.

Automated decisions
We do not carry out automated profiling

Transferring data outside the EEA (European Economic Area)
Although this is rare, we do work with some clients outside of the EEA. If we wish to send your details for a role outside of the EEA you will be consulted and permission gained

Your data in the event of transfer
In the event of a sale, merger, liquidation, receivership or the transfer of all or part of our assets to a third party, we may need to transfer your information. Any transfer will be subject to the agreement of the third party to this Privacy Notice and any processing being only in accordance with this Privacy Notice.

Your rights under the GDPR
1. The right to be informed
2. The right of access
3. The right to rectification
4. The right to erasure
5. The right to restrict processing
6. The right to data portability
7. The right to object
8. Rights in relation to automated decision making and profiling

Contacting us
If you have any questions concerning your rights or should you wish to exercise any of these rights please contact: sarahb@direct-recruitment.co.uk
If you are dissatisfied about any aspect of the way in which your data is processed you may in the first instance refer the matter to: sarahb@direct-recruitment.co.uk
This does not affect your right to make a complaint to the Information Commissioner’s Office