Fabric Recruitment (“Fabric”) is a recruitment business which provides work-finding services to its clients and work-seekers. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, Fabric acts as a data controller.
Keeping your personal information safe and secure is our top priority. The changes under the new EU General Data Protection Regulation (“GDPR”) from 25th May 2018 don’t alter what we use your personal information for, but make it easier for you to find out how we use and protect your information.
Your personal information is a fundamental part of our service. Without it we would not be able to contact work-seekers with opportunities that might be of interest to them, nor contact clients to share the details of candidates who have given their consent for us to do so.
The fact that the law is changing only builds on what we already do today – and that is to give your personal information the respect and security it deserves. Quite simply, and as has always been the case for anyone working with Fabric, your personal information will never be shared with any third party, without your clear consent.
You may give your personal details to Fabric directly, such as on an application or registration form or via our website, or we may collect them from another source such as a jobs board. Fabric must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement.
1. Collection and use of personal data
a. Purpose of processing and legal basis
Fabric will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services. The legal bases we rely upon to offer these services to you are:
- Legitimate interest
b. Legitimate interest
Where Fabric has relied on a legitimate interest to process your personal data our legitimate interests is/are as follows:
Recruiters provide work finding services to both candidates and clients as part of their business. In order for us to provide work finding services, we need to be able to compare the experience of candidates (typically detailed in a CV) with the requirements of clients (typically outlined in a job description). We process personal data in order to be able to provide these services – we need to check the identity of candidates, their right to work and qualifications as well as process pay and manage entitlement to certain statutory rights. It is in the legitimate interests of all parties involved – the recruiter, the work seeker and the client – that the recruitment business can process personal data. Essentially, we have a legitimate interest in making existing candidates aware of potentially appropriate roles as this is likely to be mutually beneficial.
c. Recipient/s of data
Fabric will process your personal data and/or sensitive personal data with the following recipients:
- Companies we feel may potentially have an interest in recruiting you, either on a permanent or contractual basis and only then, with your express consent to do so.
d. Statutory/contractual requirement
Your personal data is required by law and/or a contractual requirement (e.g. our client may require this personal data), and/or a requirement necessary to enter into a contract. You are obliged to provide the personal data and if you do not the consequences of failure to provide the data are that we will not be able to provide a work finding service for you.
2. Overseas Transfers
Fabric may transfer only the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with work-finding services. We will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
3. Data retention
Fabric will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
We must also keep your payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
Any personal data we hold on you will be available to all internal employees and will be stored securely on our password protected, CRM database.
Where Fabric has obtained your consent to process your personal and sensitive personal data, we will do so in line with our retention policy. Upon expiry of that period Fabric will seek further consent from you. Where consent is not granted Fabric will cease to process your personal data.
The key here is that we do not retain your personal data for longer than we need to. We need your personal data in order to be able to provide you with work finding services. Personal data that we hold on you, will be securely retained for an initial period of three years. If we receive your express consent to hold it longer then we will do so. Similarly if we have a legitimate interest we will continue to retain your personal data. If there is a period of over three years where we have had no communication with you then we will securely delete all data that we hold on you (unless legally we have to retain it). In addition you can request to have your personal data removed at any time, by contacting our Data Protection Officer on firstname.lastname@example.org.
4. The website
Non-personal information collection & use
In common with many commercial organisations we monitor the use of our website by collecting aggregate information. We may automatically collect non-personal information about you such as the type of Internet browsers you use, the pages you visit or the website which directed you to our site. You cannot be identified from this information and it is used only to assist us in providing an effective service on this website. And continue to strengthen our site visits.
Cookies are small files, which are sent to your web browser and stored on your computer’s hard drive. This website uses ‘session cookies’ – temporary cookies that remain in your browser until you leave the website. These allow you to carry information across our site without having to re-enter it; it also enables us to analyse web traffic and improve our online services. These cookies cannot be used to identify you. You may set your web browser to notify you of cookie placement requests or to decline cookies completely. You can delete the files that contain cookies; those files are stored as part of your Internet browser.
Under 13 year olds
This website is not intended or designed to attract children under the age of 13. We do not knowingly collect personally identifiable data from or about any person under the age of 13. If you are under 13 years old and wish to ask a question or use this site in any way, which requires you to submit your personal information, please get your parent or guardian to do so on your behalf.
5. Your rights
Please be aware that you have the following data protection rights:
- The right to be informed about the personal data Fabric processes on you;
- The right of access to the personal data Fabric processes on you;
- The right to rectification of your personal data;
- The right to erasure of your personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time.
Where you have consented to Fabric processing your personal data and sensitive personal data you have the right to withdraw that consent at any time by contacting the Data Protection Officer.
6. Complaints or queries
If you wish to complain about this privacy notice or any of the procedures set out in it please contact our Data Protection Officer on .
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.