Tower House Consulting Ltd understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website. We will only collect and use personal data in ways that are described here, and in a manner that is consistent with UK Data Protection legislation and the EU General Data Protection Regulation 2016/679 (“GDPR”).
Information About Us
mywork is a registered trading name of Tower House Consulting Ltd registered in England and Wales under company number 10904884, with a registered office address of First Floor, Office 3, 389 Ringwood Road, Poole, Dorset, BH12 4LT. Licenced by the Information Commissioner’s Office (ZA283504).
What Does This Policy Cover?
What Personal Data Do We Collect?
Personal data means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give us via our website, registration and conducting business with us.
We may collect some or all of the following personal and non-personal data which we have grouped together as follows:
- Identity Data includes first name, last name, marital status, number of dependents, title, date of birth and gender.
- Contact Data includes physical address, email address and telephone numbers.
- Documentary Data includes passport, driver’s licence, birth certificate and National Insurance Number
- Employment Data includes job history, educational qualifications, profession, references, other relevant information from your Curriculum Vitae (“CV”).
- Financial Data includes bank account and payment card details, employment details and expenses/lifestyle details.
- Marketing and Communications Data includes preferences in receiving marketing from us and our third-party providers and communication preferences (email, SMS, telephone, post).
- On occasion we may need to collect or process special category data (which includes details about criminal records, race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about health and genetic and biometric data). We may also be requested to conduct historical, criminal, legal and finance searches.
How Do We Use Your Personal Data?
Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract/employment services with you, because you have consented to our use of your personal data (e.g. by registering with us, subscribing to job alerts, engaging in employment services with us), or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:
- To provide our services to you;
- To maintain our business relationship, where you are a user of our website, a client or a candidate;
- To enable you to submit your CV for general applications to apply for specific jobs;
- To supply you with email and job alerts that you may have opted into (you may unsubscribe at any time);
- To match your details with job vacancies, to assist us in finding a position that is most suitable for you and to send your personal data (including sensitive personal data) to clients in order to apply for jobs;
- To retain your details and notify you about future job opportunities other than the specific role for which you have contacted us;
- To reply to emails, telephone calls and texts from you;
- Market research;
- To release personal data to regulatory/law enforcement agencies, if we are required or permitted to do so.
With your permission and/or where permitted by law, we may also use your data for marketing purposes which may include contacting you by email and telephone and text message and post with information, news and offers on our services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003. You can request to opt-out of direct marketing at any time.
Where Do We Store Your Personal Data?
Your personal data may be held within the European Economic Area which comes under the GDPR. Where personal data is transferred or stored outside of the European Economic Union we check whether the EU Commission has issued an adequacy decision, which is a confirmation from them that the personal data will be afforded the same level of protection as if it was within the European Economic Union.
If there is not an adequacy decision in place, and to comply with GDPR requirements, we will ensure the transfer of personal data is protected by other means, including where explicit consent from the data subject has been received or through contractual obligations with relevant third parties regarding usage of the personal data.
How Do We Protect Your Personal Data?
We have adopted appropriate technical, organisational and security measures designed to prevent unlawful or unauthorised processing or access to personal data or the accidental loss of or damage to personal data.
How long do we hold your Personal Data?
The length of time we will hold or store your personal data for will depend on the services we perform for you and for how long you require these. As we may support candidates with placements over many years, and potentially throughout their careers, the purpose for which we retain candidate data is often an ongoing purpose. We conduct regular data-cleansing and updating exercises with our candidates to ensure that (a) the data that we hold is accurate and (b) we are not holding data for too long.
Our standard terms of business state that our clients should retain candidate data such as CVs for the purposes of the specific role you apply for and that, as controllers of your data, they should inform you if they plan to retain your CV on file in order to notify you about potential future roles, or to otherwise hold or use your data for other purposes.
We do we share your Personal Data with?
We will share your personal data with:
- Clients – who have vacancies for jobs in which you are interested;
- Trusted Third Parties – we will share your personal idata and, where necessary, your sensitive personal data with trusted third parties where we have retained them to provide services that you or our client have requested such as:
Employment reference checking, qualification checking, criminal reference checking (as required); verification of details you have provided from third party sources; and/or psychometric evaluations or skills tests.
We may also share your personal data with third parties who perform functions on our behalf and provide services to us such as:
Professional advisors, data analytics providers, IT consultants carrying out testing and development work on our business technology systems.
- Regulatory/Law Enforcement Agencies – in certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, where we are complying with legal obligations, a court order, or a governmental authority.
Under Data Protection law the way we process your personal data is protected by certain legal rights set out below. If you wish to exercise any of these rights please email us at firstname.lastname@example.org.
Right of access – You have the right to know who has access to your personal data, what it is being used for, where it’s kept, and everything about your personal data as it passes through our data process.
A ‘Subject Access Request’ (SAR) can be made requesting us to supply you with all reasonable information or documentation that we hold relating to your personal data. Before providing any information we will verify the identity of the person making the request.
Right to restrict processing – You can ask us to stop or restrict processing your personal data. It is an alternative to requesting erasure of your data.
This is not an absolute right and will only apply in certain circumstances such as:
• Where you are contesting the accuracy of your personal data and we are verifying the accuracy of the data.
• The data has been unlawfully processed (i.e. in breach of the lawfulness requirement)
• We no longer need the personal data but we need to keep it in order to establish, exercise or defend a legal claim.
Right to erasure – In certain circumstances, you can ask us to erase your personal data, unless we have a legal obligation to hold/process your data.
Right to rectification – You can ask us to correct personal data we hold about you, if you are able to evidence that the data we hold is inaccurate.
Right to object to processing – Depending on the legal basis for which we are using your information, you may be entitled to object if you believe there are lawful grounds to do so.
Right to data portability – You may ask us to provide you with a copy of your personal data in a commonly used electronic format so that you can transfer it to other businesses. Before transferring your personal data we will carry out rigorous checks to verify your identity.
Rights in relation to automated decision making and profiling – You have the right to object to automated decision making, and are entitled to ask for human intervention, and an explanation of the decision with the right to challenge it.
Right to withdraw consent – Where you have provided consent, we and our third-party partners will provide you with information about related products, services and offers that may be of interest to you.
This consent can be withdrawn at any time by opting out of marketing messages we send by clicking the unsubscribe link within the communication. Alternatively you can email us at email@example.com.
To opt out of marketing received from any of our third-party partners you will need to unsubscribe via the links provided in their communications with you
Like most websites, when you visit our website we place cookies on your computer or other device. For the most part, these cookies are used to enable the websites’ functionality, improve the user experience or help us to optimise our websites, measure traffic and other internal management purposes.
We are an equal opportunities employer and a company committed to diversity. This means that all job applicants and members of staff will receive equal treatment and that we will not discriminate on grounds of gender, marital status, race, ethnic origin, colour, nationality, national origin, disability, sexual orientation, religion or age.
If you have any complaints about how we have used your personal data please contact our Data Protection Officer at firstname.lastname@example.org.
We will do our best to resolve your complaint but if you remain unsatisfied with any aspect relating to your personal data you have the right to complain to the Information Commissioner’s Office:
Telephone: 0303 123 11113
Information Commissioner’s Office