StaffPlacer Limited – GDPR Privacy Policy
Effective Date: 01/12/2024 | Last Updated: 01/12/2024
1. Introduction
StaffPlacer Limited is a global recruitment agency committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable UK data protection laws. This policy outlines how we collect, use, disclose, and protect personal data in our capacity as a data controller.
2. Who We Are
- Company Name: StaffPlacer Limited
- Registered Address: [Insert registered company address]
- Contact Email: [Insert data protection contact or DPO email]
- Website: www.staffplacer.com
- ICO Registration Number:
3. What Data We Collect
For Candidates:
- Full name, contact details (email, phone, address)
- CVs and employment history
- Education and qualifications
- Right to work documentation
- Identification documents (e.g., passport, driving licence)
- References and background checks
- Interview notes and communications
- Salary expectations and preferences
For Clients:
- Company name, business address
- Contact person details
- Job descriptions and hiring requirements
- Billing and payment details
For Website Visitors:
- IP address and browser type
- Usage data (e.g., pages visited, time spent)
- Cookies and tracking data (see Cookie Policy)
4. Lawful Basis for Processing
- Consent – where you have given explicit permission
- Contract – to fulfil a contract or take steps prior to entering into one
- Legal obligation – to comply with relevant legal requirements
- Legitimate interests – for the purposes of recruitment and business operations, provided they do not override your rights
5. How We Use Personal Data
- Match candidates with job opportunities
- Communicate with clients and candidates
- Manage recruitment processes
- Conduct background and reference checks
- Comply with legal obligations
- Improve our services and website
6. Sharing Your Data
- Clients seeking candidates
- Third-party service providers (e.g., payroll, background checks)
- Regulatory bodies, if required by law
- Technology providers (e.g., CRM, email services)
We require all third parties to respect the security of your personal data and treat it in accordance with the law.
7. International Transfers
As a global agency, your data may be transferred outside the UK or EEA. When we do, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.
8. Data Retention
- Candidate data: up to 2 years from last contact (unless consent is renewed)
- Client data: up to 6 years for business and legal purposes
- Website visitor data: as per our Cookie Policy
9. Your Data Protection Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (where applicable)
- Lodge a complaint with the ICO (UK Information Commissioner’s Office)
To exercise your rights, contact us at: info@staffplacer.com
10. Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include encryption, secure servers, access controls, and regular audits.
11. Cookies and Tracking
We use cookies and similar technologies on our website for functionality and analytics. Please refer to our Cookie Policy for more information.
12. Changes to This Policy
We may update this GDPR Policy from time to time. Any significant changes will be communicated via our website or directly where appropriate.
13. Contact Us
For any questions about this policy or how we handle your data:
- Email: info@staffplacer.com
- Phone: xxxx
- Post: xxxx
- Data Protection Officer (if applicable): xxxx