We are a recruitment business (company number 10015581) and we provide work-finding services to our clients and work-seekers. As a company, in order to provide these services, we must process personal data (including sensitive personal data). In doing so, the company acts as a data controller.
You may give your personal details to the company directly, such as on an application or registration form or via our website. Or we may collect data from another source, such as a job board onto which you have uploaded your CV. The company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you, we will only use your personal data in accordance with this privacy statement. At all times we will strive to comply with current data protection laws.
Typically, most of your personal data will come to us in the form of your CV, which will include but is not limited to your name, contact details (such as phone numbers, e-mail addresses and home address) plus details of your current salary and package. Occasionally we may be provided with sensitive personal information such as ethnicity, date of birth or even information regarding criminal convictions. We have processes in place to limit our use and disclosure of such sensitive data, other than where permitted by law.
We will normally receive your CV electronically via email or via an application to a job advertised on our website or a third-party job board. As our relationship with you progresses, we will likely obtain further personal information about you, which could come directly from you or may be obtained from third parties, such as organisations to whom we have provided your CV to and who have engaged with you as part of a job application (e.g., our clients or other recruitment agencies along the chain).
You are welcome to unsubscribe from our mailing lists at any time. If so, or you wish for your data to be permanently removed from our database please email candidate@cassonx.com
The following is a list of ways in which we might process your personal information:
To provide our recruitment services to you; To communicate and maintain our business relationship with you, where you are a client, candidate or user of our website; To enable you to submit your CV for general applications, to apply for specific jobs or to subscribe to our newsletters or job alerts; To match your details and requirement with job vacancies. This will help us in finding a position that is most suitable for you and to send your personal information to clients in order to apply for jobs; To notify you about future job opportunities (based on your requirements) other than the specific role for which you have contacted us; To answer your enquiries effectively; To advise you of news, industry updates, events, promotions and competitions, reports and other information. Before we do so, you will be given an option to opt-out of such communications and an option to unsubscribe will also be provided with each communication; To fulfil contractual obligations with our clients; To provide regulatory or law enforcement agencies with personal information, if ever requested to do so;
We must have a legal basis to process your personal data. In line with GDPR the legal bases we rely upon to offer our work-finding services to you are:
1. Contractual – we may need certain data to enter into a contract with you in order to effectively provide a service to you;
2. Compliance – certain legal obligations may require us to process certain personal data. We may be obliged by law to disclose your personal data to a regulatory body or law enforcement agency;
3. Legitimate interests – either we, or a third party, may need to process your personal data for the purposes of our legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected.
4. Consent – in some circumstances, we may ask for your consent to process your personal data in a particular way.
In order for us at CassonX to carry out work on your behalf in an effective manner, it is reasonable for us to need to store certain elements of your personal data. As a Recruitment Consultancy who submit candidates to permanent and contract assignments, the exchange of candidate and client data is essential.
Having a database of candidates and clients with certain elements of personal data is needed to support individual career aspirations and to fulfil client’s resourcing requirements. We also feel it’s reasonable for us to hold data on prospective candidates and clients in order for us to grow our business.
If you are looking for new employment or have uploaded your CV or similar information to a job board or professional networking site, we’d reasonably assume that you are happy for us to collect this data and to contact you to support you in that objective. Prior to us sending any of your data to our clients or any other trusted party, we will first seek your consent.
Potential employers may want to confirm your qualifications or references at some point in the process, so again we feel it is necessary for us to hold your data to fulfil these obligations and to help you land that dream job. Providing you with tailored job alerts also requires us to process your data to ensure the content is appropriate to your needs. And we may also need to use your data for internal administrative activities, like payroll and invoicing.
In order to fulfil our obligations and provide a service to you, we will share your personal information with other trusted parties. The following is a list of some possible recipients whom the company may process your personal data with:
The company may transfer your data to countries outside the European Economic Area (‘EEA’) for the purpose of providing you with work-finding services. We will take steps to ensure adequate protections are in place to ensure the security of your information.
Any personal data held is stored on our secure recruitment database which is password protected and accessible only by our professional and qualified consultants for the purposes of finding you work finding services or supporting our clients to identify suitable applicants for the vacancies which we are supporting them with. We also have a confidential waste facility in place to safely discard any printed CVs we are working with.
The Company will retain your personal data only for as long as is necessary for the purpose we collect it. Different laws may also require us to keep different data for different periods of time. For example, the Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
We must also keep your payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation. This is currently 3 to 6 years.
We typically support candidates throughout their careers and so may often hold their data for lengthy periods. We do, however, proactively communicate with everyone whom we hold data for once per year to remind them of our privacy policy, remind them of their data rights and ensure they are still happy for us to continue to hold their data.
CassonX would like to declare that our chosen database is Bullhorn. Should it be required, then the link to their Data and Privacy Policy is https://www.bullhorn.com/privacy/
Please be aware that you have the following data protection rights. You have the right:
Where you have consented to the company processing your personal data, you have the right to withdraw that consent at any time by contacting us via candidate@cassonx.com. Please note that if you withdraw your consent to further processing, that will not affect any processing done prior to the withdrawal of that consent, or which is done according to another legal basis.
There may be circumstances where the company will still need to process your data for legal or official reasons. Where this is the case, we will tell you and we will restrict the data to only what is necessary for those specific reasons.
If you believe that any of your data that the company processes is incorrect or incomplete, please contact us using the email address above and we will take reasonable steps to check its accuracy and correct it where necessary. You can also contact us using the above details if you want us to restrict the type or amount of data that we process for you, access your personal data or exercise any of the other rights listed above.
