Privacy Notice: Candidates
9-2-3 Jobs Limited (“9-2-3” or “we”) considers the privacy and security of your personal information to be very important. We are committed to protecting your privacy; we’ll only process your personal data where it is fair to do so, and to the extent that it is necessary for us to carry out our lawful business activities. If you would like to discuss this further, or have any questions, please don’t hesitate to contact us using the contact details set out at the bottom of this privacy notice.
In Annex 1 to this privacy notice, we explain what we mean by “personal data”, “processing”, “special category personal data” and other terms used in the notice.
What personal data do we process?
The personal data we process may include:
Basic details. This may include your name, date of birth, home address, telephone number and email address;
Information about your training, suitability for particular roles, qualifications and experience. This may include any personal data provided by you as part of your curriculum vitae, any registration data or certificate issued or published by a professional regulatory body, documentary evidence of your training, qualifications, experience and/or authority to undertake particular work, details of the ways in which you fulfil any legal, regulatory or client requirements for the performance of a particular role, and copies of references provided to us concerning you;
Records of conversations with you. These may include, for example, records of our conversations with you about your work preferences and/or requirements and any other information you mention to us relating to your search for employment;
Information relating to your right to work in the UK. This may include but isn’t limited to a copy of your passport and notes of our interview with you concerning this passport;
Records of introductions and engagements. This may include records of any introduction/s we have made of you to any client/s of 9-2-3, records of any engagement/s of you by any client/s of 9-2-3, records of the information which we have considered and/or provided to any client/s of 9-2-3 in connection with such introductions or engagements, and the terms of such engagement/s, including details of your pay, benefits, pension entitlements and pension contributions;
Special category personal data. Whilst relatively rare, it is possible that we may from time to time need to process special category data including but not limited to information concerning your health or any disability you experience.
From where do we source this personal data?
The personal data which we process is obtained:
From you. We may obtain your personal data from telephone calls and other conversations between you and our team members, from emails, letters or other documents which you send to us, and from details which you submit to us via the candidate registration page on our website, at www.923jobs.com/candidates;
From third parties. We may, for example, obtain your personal data from the providers of references concerning you, and/or from professional or regulatory bodies who may provide details of your professional qualifications or registrations, or of your authorisation to undertake particular types of work; and
Online. We may also obtain your personal data from employment-related websites on which you may have specified that you are seeking work (including but not limited to LinkedIn).
For what purposes will we process your personal data?
We may process your personal data for the purposes of:
1. Finding you new roles. We may process your personal data for the purpose of matching you with and introducing you to potentially suitable employers who are seeking to fill vacancies, storing your personal data on our database to enable us to match you with and introduce you to potentially suitable employers who may be seeking to fill vacancies in the future, and making arrangements for interviews or for you to take up a new role;
2. Communicating with you. We may process your personal data for the purpose of ensuring the proper and efficient operation and maintenance of our business relationship, and of communicating with you and answering enquiries. In practice, this may include but is not limited to discussing particular vacancies as and when they arise, arranging interviews, discussing the terms of any employment offer, confirming arrangements for you to start work pursuant to an acceptable offer, checking that the placement is progressing well at appropriate intervals after you have commenced working for a new employer, and checking at appropriate intervals whether you want to remain on our database as an individual seeking work and whether you want to receive emails about our vacancies and services;
3. Keeping you updated. We may process your personal data for the purpose of sending to you our electronic newsletter, and/or other emails, containing information about our services, the vacancies we are seeking to fill, flexible working and employment-related matters, and/or news and industry updates. Such newsletters may also contain information about events, courses, activities and/or other services offered by third parties. Each such communication will include an option for you to stop receiving future newsletters or emails about the services we offer. You can of course also ask us to stop sending you such newsletters and emails at any time by using the contact details set out at the bottom of this notice;
4. Complying with legal obligations. We may process your personal data for the purpose of complying with our legal obligations under, for example, The Conduct of Employment Agencies and Employment Businesses Regulations 2003 and/or the Equality Act 2010, and where we are legally required to do so, disclosing your personal data to law enforcement or regulatory agencies;
5. Demonstrating that we have complied with our legal obligations and our contract with your new employer, and ensuring that we have access to any relevant documentation in the event of a legal claim. If we find you a new job then we will also retain, and may use and/or disclose, copies of records, emails and documents relating to that placement to ensure that we are able to demonstrate that we have complied with our legal obligations and the terms of the contract between 9-2-3 and your new employer. We also need to retain these records, emails and documents to ensure that in the event of any legal claim, we have access to copies of relevant documentation; and
6. Establishing, bringing or defending any legal claims. We may process your personal data for the purpose of establishing, bringing or defending any legal claims.
Who is the data controller in respect of the personal data processed by 9-2-3?
9-2-3 is the ‘data controller’ of this information; we decide what your personal information is used for, and the ways in which it is processed. Our contact details are set out at the bottom of this privacy notice.
On what legal basis does 9-2-3 process my personal data?
The legal bases on which 9-2-3 processes your personal information are:
1.The fulfilment of our legal obligations. The circumstances in which this legal basis will apply include, but are not limited to, the following:
(i) Collection and retention of your personal data
We are legally obliged to collect and hold certain information on you and to retain copies of relevant documents, which may include your personal data, for 12 months each time we provide services to you;
(ii) Disclosure to employers
We may be legally obliged to process and disclose to a new employer personal information concerning your suitability for a particular role. In such cases, our legal obligations will form the legal basis of such processing and disclosure; and
(iii) Equality Act 2010
When we provide services to you, we may need to process your personal data to ensure that we are complying with the Equality Act 2010;
(iv) Considering whether there would be any detriment in placing you in a particular role
The law requires us to consider whether it would be detrimental to you or to a potential employer if we were to introduce you to one another in order to fill a particular role. One example of such a detriment might be a situation where you had a health condition which could be made worse by a particular workplace environment, such that it could cause a health and safety risk.
(v) Regulatory/law enforcement agencies
We may also under certain circumstances be obliged to disclose your personal data to a regulatory body or law enforcement agency;
2. Consent.
Specifically, we use consent as the legal basis for:
(i) Seeking new roles for you, and communicating with you
We will store and/or use personal data, and potentially any special category personal data, which you have provided to us, in order to match you with potentially suitable vacancies at the time of your initial registration with us or in the future and in order to communicate with you about such vacancies. The legal basis for such processing will be your consent. We have to explain to you, however, that any processing of your personal data which we are required to undertake by law, such as the collection and retention of certain personal information about you for 12 months each time we provide services to you, will not be carried out on the basis of your consent. Such processing will fall outside the scope of the consent we request from you to process your personal information and will instead be carried out on the basis of our legal obligations;
(ii) Introducing you to potential employers and making interview arrangements
We will pass your personal data, and potentially some types of special category personal data, to potential employers; we will only usually do this with your explicit consent in relation to each individual vacancy. However, please note that:
A. if we introduce you to a potential employer then whether or not the introduction is successful, we will be legally required to hold certain personal information about you for at least 12 months after the last date we provided services to you; the legal basis on which we will process your personal data for these purposes will be our legal obligations;
B. if we find you a new job then we will also retain (and may use and/or disclose) copies of records, emails and documents relating to this placement in order to demonstrate that we have complied with our legal obligations and our contractual obligations to your new employer, and in order to ensure that we are able to bring or defend any legal claims. Any personal data held within these records, emails and documents and processed for these purposes will not be processed on the basis of your consent, but instead on the basis of our legitimate interests;
C. we may be legally required to share information about your suitability for a new role with your new employer. Such processing would be carried out not on the basis of your consent but on the basis of our legal obligations.
(iii) Keeping you up to date
We will send you our electronic newsletters, and/or other emails, containing information about our services, the vacancies we are seeking to fill, flexible working and employment-related matters, and/or news and industry updates, on the basis of your consent. Such newsletters may also contain information about events, courses and/or other services offered by third parties.
If we need to rely on consent as the legal basis for processing any other categories of your personal data, we will very clearly ask for your permission.
3. Our legitimate interests. This will form the legal basis of our processing of your personal data in order to:
(i) contact you at appropriate intervals to check whether you wish to remain on our database as an individual seeking work, and whether you wish to continue receiving emails about our vacancies, services, flexible working and employment-related matters, and/or news and industry updates;
(ii) retain (and potentially use and/or disclose) copies of records, emails and documents relating to a placement, to enable us to demonstrate that we have complied with our legal obligations and the contract between 9-2-3 and your new employer, and to ensure that we have access to any relevant documentation in the event of any legal claim;
(iii) establish, bring or defend any legal claims as necessary from time to time.
On what legal basis does 9-2-3 process sensitive personal data about you?
If we process sensitive personal data about you, as well as ensuring that one of the grounds for processing mentioned above applies, we will make sure that one or more of the grounds for processing sensitive personal data applies. In outline, these include:
Processing being carried out because you have given your consent to such processing for a specified purpose;
Processing being necessary for the purposes of your or our obligations and rights in relation to employment or social protection in so far as it is authorised by law; and
Processing being necessary for the purpose of establishing, making or defending legal claims.
What is our legitimate interest in processing this personal data?
We consider that we have a legitimate interest in processing your personal data in order to contact you at appropriate intervals to check whether you still wish to remain on our database as a candidate seeking work, and whether you wish to continue receiving emails about our vacancies, services, flexible working and employment-related matters, and/or news and industry updates.
We also consider that we have a legitimate interest in retaining (and potentially using and/or disclosing) copies of records, emails and documents relating to a placement to allow us to demonstrate that we have complied with our legal obligations and the contract between 9-2-3 and your new employer, and to ensure that we have access to relevant documentation in the event of any legal dispute.
We also consider that we have a legitimate interest in processing any data necessary to bring, establish or defend any legal claims as necessary from time to time.
We will only use your personal data for our legitimate interests in circumstances where we have established that those legitimate interests are not overridden by your rights and freedoms.
For how long will we retain your personal data?
1. Processing carried out in order to find you a new role
In general, we will keep your personal data and any special category personal data we hold about you until the date which falls 30 months after we last received a communication from you. If we have not received a communication from you for 30 months, we will contact you to ask whether you are still looking for work and asking whether you would like us to remove you from our list of candidates seeking new roles, and from our email newsletter mailing list. We will repeat this process until such time as you confirm that you do not wish to remain on our database of candidates actively seeking work / our email newsletter mailing list, or we do not receive a response from you. At this point we will remove you from our pool of candidates seeking work and/or stop sending you our newsletters and emails about our services, as appropriate.
As we’ve mentioned above, we have a legal obligation to retain certain items of your personal data until 12 months have passed since we last helped you. As a result, if we’ve introduced you to a potential employer in the 12 months before we remove you from our pool of candidates seeking work, we will need to continue to process some of your personal data for the purpose of complying with our legal obligations for a further short period.
2. Records of placements
However, please note that if we find you a new job then we will retain, and may use and/or disclose, records, emails and documents relating to that placement, which may contain your personal data and potentially your special category personal data, for a period of 6.5 years from the date on which you start that new job. In addition to our legal obligations to hold on to certain items of your personal data until 12 months have passed since we last helped you, we also process these records, emails and documents to enable us to demonstrate that we have complied with our legal obligations and our contractual obligations to your new employer and to ensure that we have access to any documentation necessary for us to bring or defend any legal claims. If you’d like to know more about why we have chosen this period of 6.5 years, please don’t hesitate to contact us on louise@923jobs.com.
3. Legal claims
If a legal claim were to arise, then we would continue to process your personal data, and potentially your special category personal data, until the later of:
1. 6.5 years from the date you started your new job; and
2. the date on which all matters relating to that legal claim had been finalised.
With whom will your personal data be shared?
Your personal data may be shared with:
Clients. We may share your personal data, and potentially your special category personal data, with clients who have vacancies in which you are interested, for the purpose of seeking to find you new employment. If we find you a new job, and any dispute later takes place between 9-2-3 and your new employer, then it is possible that we may need to disclose records, emails and/or documents containing your personal data and/or your special category personal data to your new employer in connection with that dispute. We may also be legally required to share information relating to your suitability for the role with your new employer;
Other consented parties. We may also share your personal information in any other circumstances where you have given your consent to such disclosure;
Law enforcement or regulatory bodies or agencies, or courts. If we receive a request from a regulatory or law enforcement body or agency, and if permitted by UK data protection laws, we may disclose certain personal information to such bodies or agencies. In the event of any legal dispute, we may also need to share your personal information with the court;
Government bodies and agencies. This may include HMRC and the Employment Agency Standards Inspectorate;
New business owners. If at any point in the future, 9-2-3 were to merge with or be acquired by another business or company, we may share your personal information with the new owners of the business or company and their advisors;
Third party suppliers of services to 9-2-3. These may include but are not limited to:
Software, database and cloud storage suppliers, including companies trading as Zoho, Google and Microsoft;
Squarespace Ireland Limited, our website host and data analytics provider;
IT support providers; and
Professional advisors including but not limited to lawyers and accountants.
We require minimum standards of confidentiality and data protection from these third party suppliers. The personal information which we collect may be transferred to and stored and processed in countries outside the UK where our third party service providers have operations, including the EEA and the United States. Where this is required by law, any international transfers of your personal information will be made pursuant to appropriate safeguards, such as the approved Standard Contractual Clauses.
What happens if you visit our website?
Please note that if you visit our website, www.923jobs.com, then we will collect and process additional personal data relating to you. For further details, including information about what personal data we collect from visitors to our website and the purposes for which we process it, please see our web visitors’ privacy notice (https://www.923jobs.com/privacy).
What rights do you have in relation to this processing of your personal data?
Your data protection rights include:
The right to be informed about the collection and use of your personal data;
The right of access to your personal data and the right to request a copy of the information we hold about you and supplementary details about it;
The right to have corrected any inaccuracies in the personal data we hold about you, including the right to update or add to the information we hold about you if you consider that it is incomplete;
The right to have personal data blocked, erased or destroyed in certain circumstances. For example, you might seek to exercise this right if we no longer needed to process your personal data for the purposes for which it was provided. This right is not absolute and we may not always be able to comply with your request, but please be assured that we will consider your request and our legal obligations in relation to it very seriously. More information about your right to have your personal data erased can be found here: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/;
The right to object to, or to restrict, the processing of personal data under certain circumstances. For example, you might seek to exercise this right if any of the information we hold about you is inaccurate. This right is not absolute and we may not always be able to comply with your request, but please be assured that we will consider your request and our legal obligations in relation to it very seriously. More information about your right to object to our processing of your personal data can be found here: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/;
The right to object to the use of your personal data for direct marketing purposes; if you let us know that you object to this use of your personal data, then we will of course stop using it for this purpose immediately. You can exercise this right using the contact details set out below, but each direct marketing email which we send to you will also contain a link to enable you to stop receiving such communications;
The right to receive any information we hold about you in a machine-readable, structured, and commonly-used format. You can also ask us to send this information directly to a third party organisation if you would prefer to do so. This right only applies in certain circumstances; for example, it will only apply to personal data in relation to which we have clearly requested, and you have given, your consent for processing;
The right to withdraw consent. Where we have requested your consent to carry out any processing of your data, you can of course withdraw your consent at any time;
The right to complain to the Information Commissioner’s Office (the “ICO”). If you have a concern about the way 9-2-3 has processed your personal data, you are entitled to lodge a complaint with a supervisory authority. In the UK, the supervisory authority is the ICO, which can be contacted at: https://ico.org.uk/concerns/.
Further information about these rights generally is available at: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
We’re sure that you will understand that we may require evidence of your identity before we are able to act on any request made in relation to the above rights.
Who should you contact if you wish to exercise your rights in relation to, or for further information about, this processing of your personal data?
If you would like to proceed in exercising these rights, or for further information about our processing of your personal data, please contact Louise Arnold on 07967 205099 or louise@923jobs.com.
Updates to the 9-2-3 privacy policy
This privacy policy may be changed by 9-2-3 at any time. If from time to time we make any changes to this privacy notice which will affect our processing of your personal data, we will notify you by email.
9-2-3 Jobs Limited
07967 205099/louise@923jobs.com
Annex 1: Meaning of Terms used in the Privacy Notice
“Personal data” is information relating to you, and from which you may be identified, which is processed by automatic means or which is (or is intended to be) part of a structured manual filing system. It includes not only facts about you, but also intentions and opinions about you.
Data “processed automatically” includes information held on, or relating to use of, a computer, laptop, mobile phone or similar device. It could include sound and image data such as video recordings or photographs.
"Processing" means doing anything with the data. For example, it includes collecting it, holding it, disclosing it and deleting it.
“Special category personal data” means personal data revealing or concerning an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership, genetic and biometric data.