Who is responsible for your personal data?
The Highfield Partnership Ltd, a company registered in England a Wales (Registration number 8181162) is registered as a data controller in the United Kingdom for the purposes of the Data Protection Act 1998 or any subsequent UK legislation resulting from EU General Data Protection Regulations (GDPR). We are a specialised consulting firm and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003.
Where is your personal data stored?
All the personal data submitted to MyHiringBuddy will be stored on our database in the UK, and only used in respect to services offered by MyHiringBuddy. It may be processed by staff operating outside the EEA who work for us or for one of our service providers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.
The information we collect and how we use it
We collect information that may be provided to us directly by yourself, accessible in the public domain or obtained through third parties sources. Your personal details may include your name, job title, employer, private and corporate e-mail address, and phone number. If provided to us directly by you, we may also details including an address; financial information (including bank details if required to process payments); compliance documentation; and links to your professional profiles available in the public domain e.g. LinkedIn, Twitter, business Facebook or corporate website.
This information is held and used by us for the following purposes:
- For keeping you informed of company services, news and insight related to your specialisms when you have granted us permission to do so;
- To improve our customer service and make our services more valuable to you;
- To notify you about upcoming events when you have granted us permission to do so;
Information we obtain from other sources
This is information we obtain about you from other sources such as LinkedIn, business publications, your business card, or personal recommendations. In this case we will inform you of the fact we hold personal data about you, by sending you this privacy notice, within a maximum of 30 days of collecting the data, to explain the purpose we intend to retain and process your personal data.
Disclosure of your information
Your personal data will not be disclosed to third parties, other than operational service providers which could include:
- Marketing and technology platforms such as SurveyMonkey & MailChimp
- Our third party business technology supplier (CRM)
- Our third party Financial Systems service providers
Retention of your data
We understand our legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests and that you are happy for us to do so. We segregate our data so that we keep different types of data for different time periods. The criteria we use to determine whether we should retain your personal data includes:
- The nature of the personal data;
- Its perceived accuracy;
- Our legal obligations;
Depending upon the criteria used as to whether we should retain your information we may:-
- Retain all your personal data on our main Customer Relationship Manager (CRM) system and financial systems.
- Archive all or part of your personal data from our main Customer Relationship Manager (CRM) system.
- Retain your personal data on our financial systems only.
- Pseudonymise* parts of your data, particularly following a request for suppression or deletion of your data, to ensure that we do not re-enter your personal data on to our database, unless requested to do so.
- Remove all your personal data on our main Customer Relationship Manager (CRM) system and financial systems.
*For your information, Pseudonymised Data is created by taking identifying fields within a database and replacing them with artificial identifiers, or pseudonyms.
What are your rights?
You have the right to ask us not to process your personal data for marketing purposes. From May 25th 2018 we will always obtain your consent before we use your data for such purposes. You can exercise your right to accept or prevent such processing by checking certain boxes on the forms we use to collect your data. You have the right to request information about the personal data we hold on you at any time. If you would like to make a request for information please email firstname.lastname@example.org. You have the right to request modifications, updates or removal of your data. We may ask you to verify your identify and for more information about your request.
How do we protect your personal data?
We endeavour to take all reasonable steps to protect your personal data but cannot guarantee the security of any data you disclose online. You accept the inherent security implications of sending information over the internet and will not hold us responsible for any breach of security unless we have been negligent.
All information you provide to us is stored on our secure password protected systems; robust firewall. We have company policies in place with regular reminders about not clicking on potentially malicious links or attachments to ensure risk from phishing and other malware is minimal.
A cookie is a piece of data stored on the user’s hard drive containing information about the user. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Once the user closes their browser, the cookie simply terminates. For instance, by setting a cookie on our site, the user would not have to log in a password more than once, thereby saving time while on our site. If a user rejects the cookie, they may still use our site.
We use IP addresses to analyse trends, administer the site, track user’s movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.
Third party links
This web site contains links to other sites. Please be aware that MyHiringBuddy or The Highfield Partnership Ltd is not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects personally identifiable information. This privacy statement applies solely to information collected by this website.
The Highfield Partnership Ltd is registered with the Information Commissioner’s Office reference Z3302531.