Privacy & GDPR Compliance Policy

Introduction

We are committed to protecting and respecting the privacy of our candidates, clients, suppliers, employees, subcontractors and website users.

CCR Recruitment Limited recognises the importance of maintaining the security and confidentiality of personal information and is committed to processing personal data lawfully, fairly and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all applicable data protection legislation.

This Privacy Policy explains how we collect, use, store and protect personal information obtained through our website, recruitment activities and business operations.

Company Commitment

We are committed to this Policy and shall ensure it is communicated throughout our business and to relevant stakeholders.

As a recruitment business, we process personal information relating to candidates, clients, suppliers, contractors and employees. We recognise our responsibility to protect personal data and to ensure appropriate safeguards are in place to prevent unauthorised access, misuse, loss or disclosure.

We work with a wide range of clients, suppliers, subcontractors and technology partners, each of whom may process personal information on our behalf. We are committed to ensuring that all third parties handling personal data maintain appropriate levels of security and compliance.

Information We Collect

We may collect and process the following categories of personal information:

• Name, address and contact details
• Email addresses and telephone numbers
• Curriculum vitae (CV), employment history and qualifications
• Right to work documentation and identification records
• Payroll and payment information
• References and background verification information
• Website usage data and analytics information
• Information submitted through contact forms, job applications and enquiries
• Any other information voluntarily provided to us in connection with recruitment activities

How We Use Personal Information

We shall:

• Process personal information for recruitment and employment purposes
• Match candidates to suitable employment opportunities
• Communicate with candidates, clients and suppliers
• Verify identity, qualifications and right to work status where required
• Process payroll and payment administration
• Comply with legal, regulatory and contractual obligations
• Improve our recruitment services and website functionality
• Maintain accurate business records
• Prevent fraud and protect the security of our systems and information
• Respond to enquiries and requests submitted through our website

Data Protection Processes

We shall:

• Process personal information lawfully, fairly and transparently
• Collect only information necessary for legitimate business purposes
• Ensure personal data is accurate and kept up to date where possible
• Implement appropriate technical and organisational security measures
• Restrict access to personal information to authorised personnel only
• Conduct due diligence on third-party service providers handling personal information
• Maintain appropriate retention and deletion procedures
• Provide data protection training and guidance to our workforce
• Investigate and respond appropriately to any suspected data breaches
• Report notifiable breaches to the Information Commissioner's Office (ICO) where required by law
• Review and update our data protection procedures on a regular basis

Sharing Personal Information

We may share personal information with:

• Prospective employers and clients
• Payroll providers and professional advisers
• Government bodies and regulatory authorities where legally required
• IT service providers and technology partners
• Recruitment software providers and cloud-based systems used to deliver our services

We do not sell personal information to third parties.

Data Retention

Personal information will be retained only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting and reporting requirements.

When information is no longer required, it will be securely deleted or anonymised.

Individual Rights

Individuals have the right to:

• Access their personal information
• Request correction of inaccurate information
• Request erasure of personal information where applicable
• Restrict or object to certain processing activities
• Request transfer of personal data where legally applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

Requests relating to personal information should be submitted to CCR Recruitment Limited using the contact details available on our website.

Website Cookies

Our website may use cookies and similar technologies to improve user experience, analyse website performance and support website functionality.

Users may manage cookie preferences through their browser settings.

Policy Review

This Privacy Policy shall be reviewed periodically to ensure ongoing compliance with applicable legislation and best practice.

The above processes are designed to:

• Protect the privacy and rights of individuals
• Ensure compliance with UK GDPR and Data Protection legislation
• Reduce the risk of unauthorised access, loss or misuse of personal information
• Promote transparency and accountability in the handling of personal data
• Provide appropriate safeguards for all information processed by CCR Recruitment Limited