Data Protection Policy
Stoneleigh Data Analytics is committed to protecting and respecting your privacy. This Data Protection Policy explains how we collect, use, store, and safeguard your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Effective Date: 1st January 2025
1. Data We Collect
We may collect the following personal data:
• Candidates: Name, contact details, CV, employment history, qualifications, right-to-work documentation, and other information relevant to recruitment.
• Clients: Contact names, job titles, business addresses, and other details necessary for our services.
• Website Users: IP addresses, browser information, and interactions with our site (via cookies and analytics tools).
2. How We Use Your Data
We use personal data to:
• Match candidates with suitable job opportunities.
• Facilitate the recruitment process, including communication between candidates and clients.
• Comply with legal and regulatory obligations.
• Improve our website and services through analytics.
3. Legal Basis for Processing
We process personal data based on the following lawful bases:
• Consent: When you provide data and agree to its use for recruitment purposes.
• Contract: To fulfill agreements between you and our agency.
• Legitimate Interests: To provide and improve our recruitment services.
• Legal Obligation: To comply with legal requirements (e.g., right-to-work checks).
4. Data Sharing
We may share personal data with:
• Employers and clients to facilitate the recruitment process.
• Service providers (e.g., cloud storage and software providers) under strict data protection agreements.
• Regulatory or legal authorities when required by law.
We will never sell your data to third parties.
5. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Typically, data is retained for:
• Candidates: Up to 5 years after last engagement.
• Clients: As required for ongoing business relationships.
You may request deletion of your data at any time, subject to our legal obligations.
6. Your Rights
Under the UK GDPR, you have the right to:
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing of your data.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights are being infringed.
7. Data Security
We implement robust technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, firewalls, and secure access controls.
8. Cookies and Website Data
Our website uses cookies to enhance user experience and analyse site traffic. For details, refer to our Cookie Policy [Insert Link].
9. Updates to this Policy
We may update this policy to reflect changes in our practices or legal requirements. The latest version will always be available on our website.
10. Contact Us
For questions, concerns, or to exercise your data rights, please contact us:
Stoneleigh Data Analytics
Email:
Address: Albatross, Stoneleigh House, 3 Thornbury Place, High Wycombe, HP11 1AY
By using our services, you acknowledge and agree to the terms of this Data Protection Policy.