Privacy Policy

---

Privacy Policy

Last updated: 11/11/24

Korey Ewen (“we,” “our,” or “us”) is committed to complying with UK privacy laws, including the UK GDPR and Data Protection Act 2018. This Privacy Policy outlines how we collect, use, and protect your personal data when you engage with our recruitment services.

1. Data Controller

Korey Ewen is the data controller responsible for ensuring that your data is processed in line with UK data protection laws.

2. Personal Data We Collect

We collect and process only the data that is necessary, relevant, and lawful for recruitment purposes and other related legal obligations. The types of personal data we may collect include:

• Identity Data: Full name, date of birth, gender, and government-issued ID details (e.g., passport, driving license).

• Contact Data: Email, phone numbers, address, and emergency contacts.

• Professional Data: CV, employment history, qualifications, professional certifications, references, salary history, and disciplinary records.

• Financial Data: Bank details, national insurance number, tax status, payroll information, and other compensation-related details for employment purposes.

• Health Data: Information on physical or mental health necessary for workplace accommodations, absence records, and occupational health and safety information.

• Diversity Data: Information voluntarily provided on race, ethnicity, gender, sexual orientation, and disability status, used only for lawful diversity and inclusion purposes.

• Technical Data: IP address, browser type, device information, and interaction data from our recruitment website.

• Location Data: Geolocation data from devices when required for security purposes.

• Background Data: Criminal records and background check data where required for the role and legally permissible.

3. How We Collect Your Data

We may collect personal data in various ways:

• Direct Interactions: Through forms, applications, emails, phone, or in person.

• Automated Technologies: Using cookies and similar technologies on our recruitment page.

• Third-party Sources: Information from recruitment agencies, background check providers, publicly available sources (e.g., LinkedIn), and government authorities for verification and compliance.

4. How We Use Your Data

We process your personal data only for legitimate, clearly specified purposes, including:

• Recruitment: Assessing qualifications, verifying information, and communicating during recruitment.

• Employment Screening: Conducting reference checks and verifying background information as legally required.

• Legal Compliance: Meeting legal and regulatory requirements, such as right-to-work checks, tax reporting, and health and safety obligations.

• Diversity and Inclusion: Using anonymized diversity data to support equal opportunity initiatives, in compliance with legal standards.

• Health and Safety: Ensuring workplace safety and facilitating necessary accommodations.

• Payroll and Benefits: Managing pay, benefits, and tax matters for successful applicants.

• IT and Security: Protecting our systems, managing user access, and ensuring network security.

• Analytics and Improvements: Analyzing recruitment data (in anonymized form) to improve our recruitment practices and website functionality.

5. Legal Basis for Processing

Our data processing is based on specific lawful grounds:

• Contractual Necessity: For actions related to your application and potential employment.

• Legal Obligation: To comply with UK laws (e.g., right-to-work verification).

• Legitimate Interests: For business operations, recruitment processes, IT security, and to protect our rights.

• Consent: For processing sensitive data, such as health information or diversity data, we obtain your explicit consent.

6. Data Sharing

We may share your data only with trusted parties necessary for recruitment and legal compliance:

• Service Providers: For IT and system administration, payroll processing, and background checks.

• Professional Advisors: Including auditors, lawyers, and insurers as required for business and legal purposes.

• Government Authorities: Such as HMRC, regulatory bodies, or law enforcement where required by law.

• Reference Checkers or Future Employers: Only with your consent, we may provide references for you.

We ensure that all third-party partners are legally obligated to process your data in compliance with UK laws.

7. International Transfers

If we transfer your data outside the UK, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the ICO or transfers to countries with adequate data protection.

8. Data Security

We implement industry-standard technical and organizational measures to secure your data from unauthorized access, loss, or alteration. We continuously review our security policies and systems to ensure data integrity.

9. Data Retention

We retain your personal data only for as long as necessary to meet our legal and operational requirements. For unsuccessful applications, we retain your data for up to [specify time period, e.g., 12 months] to consider you for future opportunities, unless you request otherwise.

10. Your Rights

Under UK law, you have the following rights regarding your data:

• Right to Access: Request a copy of the data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your data, where legally permissible.

• Right to Restrict Processing: Request limited processing of your data in certain cases.

• Right to Data Portability: Receive a copy of your data in a structured, commonly used format.

• Right to Object: Object to processing based on legitimate interests.

• Right to Withdraw Consent: Withdraw consent for data processing where consent is the basis.

To exercise any of these rights, please contact us at korey@koreyewen.com.

11. Cookies

Our recruitment page uses cookies to collect Technical Data about your browsing behavior. You may set your browser to block cookies; however, some parts of our recruitment page may not function properly if you choose to do so.

12. Changes to This Privacy Policy

We may update this policy periodically to ensure it complies with the latest legal requirements and best practices. Updates will be posted on this page, and significant changes will be communicated directly.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Korey Ewen

Email: korey@koreyewen.com