Heavens Recruitment Ltd treats our candidates' and clients' data with utmost confidentiality and we take care to respect and comply with the data related rights of all individuals.
You are considered to be accepting the following terms and conditions every time you (as ‘the Candidate’) apply for one of Heavens Recruitment Ltd’s vacancies, or (as ‘the Client’) communicate with Heavens Recruitment Ltd regarding your hiring needs, or visit Heavens Recruitment Ltd’s website: http://www.heavensrecruitment.co.uk/
A cookie is a small piece of text used to track visitor use of our website, to compile statistical reports on activity on the website and to help make recommendations to improve our website services.
Website links provided by us
Users responsibilities whilst working with us
Users must ensure that all information supplied by you to us is correct, true, current and not deceptive (or likely to mislead) or ambiguous and that it is not defamatory, discriminatory, offensive, or in any way unlawful or in breach of legislation, regulations, guidelines or codes of practice or intellectual property rights of any person.
Our legal basis for collecting and processing personal data
Our legal basis for collecting and processing personal data is legitimate interest. Heavens Recruitment provides work finding services to both candidates and clients as a core part of our business. We process personal data to be able to provide these services – we need to check the identity of candidates, their right to work and qualifications as well as process pay for temporary staff and manage entitlement to certain statutory rights.
We need to understand a candidate’s criteria for the new work opportunities they are seeking in order to help candidates find suitable employment. We also need to understand our Client’s needs and criteria to support them with their hiring needs effectively. It is in the legitimate interests of all parties involved – the recruiter, the candidate and the client - that us as the recruitment business can process personal data.
What personal information do we collect?
The data that we collect includes your name, email address and telephone number. If you are seeking new employment opportunities we will also ask for a copy of your CV / resume, your location, salary details, details of the kind of work that interests you, and information regarding your professional experience, as well as information pertinent your candidacy.
If you represent a client company we will collect your name, work email address and work telephone number and any Company information pertinent to the provision of our lawful business purposes inclusive of hiring policies and job descriptions as well as other information relating to the recruitment services offered to you by us.
How will we use the information supplied by you?
We will hold and process any personal information which you provide to us via telephone or by submitting emails and / or online forms for our lawful business purposes relating to recruitment.
As a candidate, by supplying us with your information you are actively soliciting further contact from us regarding career opportunities. With your permission, we will therefore make your personal data available to our Clients as employers who use our services to find suitable employees for specific roles that they are seeking to fill.
We do not pass on or sell online personal information to any other third parties which are unrelated to our lawful business purposes relating to recruitment. Please note that by sending your personal information to us you are explicitly consenting to the processing and transfer of such information in this way.
How long will we retain your data for?
We will securely retain your information for as long as is reasonably necessary and in accordance with our lawful business purposes of recruitment.
We will retain candidate data for three years from the point of last contact.
We will retain client data for seven years from the point of last contact.
Our Marketing Activities
We will not send / email you any marketing material which is not directly related to our lawful business purposes of recruitment. We are not marketing any other products or services.
You can opt out of receiving e-mails from us at any time by contacting: email@example.com and requesting to unsubscribe in writing.
We will use your personal data to provide you with the recruitment services which may include emails to you about recruitment services which, for Candidates seeking new employment opportunities, will be regarding vacancies and news which are relevant to your fields of interest. For Clients, this may include information pertinent to your recruitment process or hiring needs.
Our Data Storage and Sharing
We only save data where it is necessary to do so to provide you with our recruitment services or to put you in touch with a third party as per your request (for example, prospective employers). We do not share your personal data with other third parties. If you are working for us on a temporary basis, your details will be shared with our external payroll service providers.
Where do we store your information?
Your personal data is stored on our servers which are in the European Economic Area. If we share your personal data with any third-party service provider in the course of providing you with our services, those third parties are required to process your data in accordance with contracts which comply with data protection legislation.
Do we transfer data outside the EEA?
If you apply for a vacancy where the employer is based outside the EEA we will share your personal data with that employer, therefore your personal information (including your CV) may be accessed by third parties outside the European Economic Area ("EEA") in line with our lawful business purposes relating to recruitment.
Our CRM System complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States, respectively. Our CRM System Provider has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
Third-party audits and certifications
We utilise a third-party data processor to supply our CRM System. This third-party data processor is compliant with all applicable GDPR regulations as a data processor and has worked extensively with local EU counsel to provide that their Master Subscription Agreement and related agreements contain appropriate provisions for the personal data stored.
Our CRM System supplier has the distinction of being one of the first applicant tracking systems (ATS) to be SOC 1 audited, and one of the first non-Financial industry-based software-as-a-service (SaaS) companies to utilise the SSAE 16/18 framework to provide security review. The CRM System provider undertakes an independent third party annual SOC 1, Type 2 audit that reviews certain aspects of its internal controls and processes.
The audit covers internal governance, production operations, change management, data backups, and software development processes. It evaluates that our CRM System has the appropriate controls and processes in place and that they are actively functioning appropriately in accordance with related standards.
We take the security of your personal information seriously. When you submit your information to us, we use encryption technology to guard your information. In addition, we have security procedures in place to protect our CRM System from loss and misuse, and only suitably qualified and authorised personnel are allowed access to our records; the only exception to this will be where processing is necessary for compliance with a legal obligation.
How can you contact us with regards to Data, Privacy or Security?
How can you correct or delete the data held by us?
We want to make sure that your information is accurate and current and will delete or amend any information which you think is incorrect. Should you wish for us to edit your record with us, please put your request in writing and send to: firstname.lastname@example.org
You have the right to close your record with us at any time. Upon request, we will erase all of your personal information (unless we are in the process of responding to any complaint that you make). To request that we erase your data please contact us with a written request via: email@example.com
How can you obtain your information from us?
You have the right to request a copy of the information which we hold concerning you. If you would like a copy of some or all of your personal information, please put your request in writing and send via email to firstname.lastname@example.org
Changes to this policy