In accordance with The Conduct of Employment Agencies and Employment Businesses (Amendment) Regulations 2010, GWR Legal Recruitment Ltd acts as an employment agency and employment business for the supply of permanent and temporary staff.

This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Privacy Notice

GWR Legal Recruitment Ltd (”We”) are committed to protecting and respecting your privacy.

Our Group means our subsidiaries, our ultimate holding company and its subsidiaries, our associated companies as defined in section 1159 of the UK Companies Act 2006 (our Group)

The data controller is GWR Legal Recruitment Ltd of registered office address 26 Rosslyn Road, Heald Green, Stockport, SK83DJ

Our nominated Data Protection Officer is Greg Whittaker

Who we are and what we do

We are a recruitment agency and recruitment business as defined in the Employment Agencies and Employment Businesses Regulations 2003 (our business). 

We collect the personal data of the following types of people to allow us to undertake our business activities;

Potential Candidates, Registered Candidates, Referred Candidates and Candidates placed into positions.

New, Existing or Proposed clients.

Providers of third party services to the business.

Employees and any other party engaged under a contract of service with the company.

How is your information collected?

GWR Legal Recruitment collect information about you to carry out our core business and ancillary activities.

This may include information you provide when you:

• Visit our website
• Register as a candidate on our company database
• Provide information via telephone or email or other communication means
• Apply for a job through us
• Request details of a vacancy
• Register for job alerts or express an interest in being notified of suitable positions
• Refer colleagues or friends as part of our referral program
• Take part in a survey
• Register to attend an event GWR organises
• Participate or communicate via social media functions or respond to marketing emails
• Report a problem with our Website
• Register a new vacancy with us or express an interest in our services
• Refer colleagues or friends as part of our referral program
• Take part in a survey
• Register to attend an event GWR organises
• Participate or communicate via social media functions or respond to marketing emails
• Report a problem with our Website

The information you give us or we collect about you may include:-

• Your name
• Your address
• Private and company address, email address and phone numbers
• Curriculum vitae and photograph
• Details of current or previous employment.
• Links and information contained within profiles available in the public domain e.g. LinkedIn and other social media platforms or company websites
• Contact, Identity, Profile and Financial Data from regulatory and professional bodies including, but not limited to, the Solicitors Regulation Authority, the Law Society and regional Law Societies, Chartered Institute of Legal Executives, the Council for Licensed Conveyancers.
• Compliance documentation.
• References verifying your qualifications and experience.
• Proof of your right to work in the United Kingdom.
• In respect of organisations – details of your business needs, turnover, billing targets, bonus structures, team structures and such other information relating to the organisation necessary to enable us and our candidates to fully understand your business.
• Other relevant Information given during communications with you both in writing and orally.

Information collected through our website.

Our website uses both essential and non-essential cookies for the purpose of providing a good user experience when visiting our website. Preferences with regards to cookies can be amended via your browser.

With regard to each of your visits to Our Sites we will collect the following information

• The Internet protocol (IP) address used to connect your computer to the Internet, your login information if applicable, browser type and version,
• Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site, products you viewed or searched for’ page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.

Information we obtain from other sources.

We may at times collect information about you from other sources such as LinkedIn, corporate websites, job board websites, online CV libraries, your business card, personal recommendations, The Law Society, SRA or other Professional Body.

In this case we will inform you, by sending you this privacy notice, within a maximum of 30 days of collecting the data of the fact we hold personal data about you, the source the personal data originates from and whether it came from publicly accessible sources, and for what purpose we intend to retain and process your personal data

Purposes for the use of your data and the legal basis.

The core service we offer to our candidates and clients is the introduction of candidates for the purpose of employment. 

We may also provide you with information about other services or jobs that may be of interest to you from time to time and provide general advice on the recruitment market to both prospective candidates and clients

Our legal basis for the processing of personal data is our legitimate business interests (explained in more detail below), although we will also  on contract, legal obligation and consent for specific uses of data.

Our Legitimate Business Interests

As a recruitment business we introduce candidates to clients for permanent or temporary employment.  The exchange of personal data of candidates and client Information is a fundamental and essential part of this service

To operate our business in the short, medium and longer terms we also need to keep a record of personal data and information of prospective candidates and clients on our internal database. This included both past and present information.

Consent

We will rely on your consent for particular uses of your data. You will be asked for your express consent, if legally required e.g. when we are processing sensitive personal data or when gaining  permission to introduce you to a client (if you are a candidate).

Should we want or need to rely on consent to lawfully process your data we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system.  Where consent is the lawful basis for our processing you have the right to withdraw your consent to this particular processing at any time.

Contract

We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.

Legal Obligation

We will rely on legal obligation if we are legally required to hold information on to you to fulfil our legal obligations.

Other Uses we will make of your data:

• Optimal Use of our website including to ensure that content is presented in the most effective way possible
• to notify you about changes to our service;

Disclosure of your information inside and outside of the EEA

There will be times when it is necessary to share data with third parties. These may include the following:-

• Disclosing candidate data for the purposes of making an introduction to a client;
• Sharing client data with candidates for the purpose of arranging interviews and other engagements;
• Sharing data with clients, business partners, suppliers and sub-contractors for the performance and compliance obligations of any contract we enter into with them or you;
• Sharing data with analytics and/or search engine providers that assist us in the improvement and optimisation of our sites;
• Sharing data with credit reference agencies, our insurance broker, compliance partners and other sub-contractors for the purpose of assessing your suitability for a role where this is a condition of us entering into a contract with you.

We will disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation; or to protect the rights, property, or safety of GWR Legal, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

The lawful basis for the third party processing will include their own legitimate business interests in processing your personal data, in most cases to fulfil their internal resourcing needs, satisfaction of their contractual obligations to us as our data processor for the purpose of a contract in place or in contemplation to fulfil their legal obligations

Storage of personal date and data security

Your data will be stored on our internal case management system and servers.

We will do our best to protect your personal data. We have in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. 

Retention of your data

GWR will retain you personal data for as long as we need it for our legitimate business interests and for the purposes of satisfying any legal, accounting, regulatory or reporting requirements.

Your rights

The GDPR provides you with the certain rights. These include:-

• The right to request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• The right to request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• The right to request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• The right to object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• The right to request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• The right to request the transfer of your personal information to another party in certain formats
• The right to make a complaint to a supervisory body which in the United Kingdom is the Information Commissioner’s Office. The ICO can be contacted through this link:  https://ico.org.uk/concerns/

Changes to our privacy notice  

Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy notice.

Contact

If you have any questions or would like to exercise any of your rights please feel free to contact Greg Whittaker at GWR Legal Recruitment who will endeavour to respond within 30 days

If you are not satisfied with the way in which your query has been handled then you may refer your complaint to the Information Commissioner’s Office (ICO). Their address is Head Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.