This Privacy Notice details how and why your personal information will be collected and processed by Grist Legal, a trading name of Grist Personnel Limited.
Grist Personnel Limited, Enterprise House, Ocean Village Marina, Southampton SO14 3XB is the data controller.
We acknowledge and agree the practices in which your personal data will be handled in accordance to current data protection laws (Data Protection Act 1998). From 25th May, 2018 the General Data Protection Regulations (“GDPR”) will change the law.
We are a recruitment agency as defined in the Employment Agencies and Employment Business Regulations 2003. We collect the personal data of the following types of people;
- Prospective and placed candidates for permanent or temporary roles
- Prospective and live client contacts
- Employees and consultants
We collect information about you to carry out core business and ancillary activities
The information provided by you or we collect
The information that you provide us, we retain and process which are as follows:
Information we may collect and process for finding you a suitable role;
- Your name
- Your address
- Your mobile telephone number
- Your home telephone number
- Your email address
- Your CV or work history summary
- Employment preferences to include, salary, notice period, geographical location, type of roles
- Any other work related information you provide for example, education, professional qualifications, SRA number (if applicable)
- Identification documentation such as Passport or Driving Licence
- A log of communications with you
- Right to work in the UK
- National Insurance Numbers
- Job offers
- Links to professional profiles available in the public domain e.g. Linkedin, Twitter, Facebook or corporate website
- Employment details
This information will have been provided, or will be provided by you or a third party who we work with, or via our website contact form www.gristlegal.co.uk, or by corresponding with us by telephone, email or otherwise. It includes information you provide when you subscribe to our services, participate in discussion boards, or social media on our site.
How we use the information
The above information is used to provide our services to you in our capacity as a recruitment agency to find you suitable work. All our clients are located inside the European Economic Area EEA, however, in the event of working with clients outside of the EEA personal data shall not be transferred unless that country ensures adequate level of protection or the appropriate safeguards in place. Before any transfer such transfer takes place outside the EEA we will provide you with further information relating to this.
- To match your skill sets with job vacancies
- To submit your details to our clients and prospective employers for you to be considered for appropriate roles
- To place you with our clients and prospective employers
- To establish you have a legal right to work in the UK
- To keep you informed of available opportunities
How we hold your personal data
All your personal data we have stored is on our UK proprietary recruitment database, Voyager Software Infinity SaaS based on SaaS Azure infrastructure is hosted in the EEA, Netherlands with failover to Ireland.
Disclosure of your information
Your CV and related information will be shared or sent to prospective employers and our clients. Once you have been successfully placed with a client additional information will be provided to them to enable the placement to succeed.
We may share your personal data with trusted third parties such as pension scheme providers, HM Revenue and Customs and legal advisors.
Legal basis for processing your data
Our legal basis for the processing of your personal data is our legitimate business interests. As a recruitment agency we introduce candidates to clients for permanent employment and fixed term employment. The exchange of personal data of our candidates and our clients is fundamental, essential part of this process.
We will rely on legal obligation if we are legally required to hold information on you to fulfil our legal obligations.
We will in some circumstances rely on consent for particular use of your data and you will be asked for your express consent, if legally required. Examples of when consent may be the lawful basis for processing include permission to introduce you to a client (if you are a candidate).
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you, before collecting your data, if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes we will collect express consent from you if legally required prior to using your personal data for marketing purposes.
You have the right at any time to ask for a copy of the information about you that we hold. If you would like to make a request for information please email firstname.lastname@example.org
You will, under GDPR, have additional rights such as; erasure, correction, restriction of processing, objection and data portability.
Retention of your data
We understand our legal duty to retain accurate data and only retain personal information as long as we need it for our legitimate business interests and that you are happy for us to do so. We run data routines to remove data that we no longer have a legitimate business interest in maintaining. We keep in touch with you so you can let us know of changes to your personal data
Withdrawal of consent
If you have provided us with your consent to process data, for the purpose of using our services and us finding you suitable work, you have the right to withdraw this at any time. In order to do so you should contact us by email at email@example.com
If you have any complaints about the way we are collecting and using your personal data, you should raise this with us in the first instance or directly to the Information Commissioners Office at https://ico.org.uk/concerns/
Changes to our privacy notice
This Privacy Notice may be changed at any time by us.