This Privacy & Cookies Policy explains how TrustedReviews Limited and its group companies, at any time, collect and use your information and how you can influence this. TrustedReviews Limited is a company established in England with its registered address at 44 Copperfield Street, London, SE10DY (company number 12539953). This Privacy & Cookies Policy relates to websites and apps (“sites”) operated from time to time by TrustedReviews Limited and its group companies. When we mention “we”, “us” or “our”, we are referring to the relevant group company responsible for processing your data. For the purposes of data protection law, the company operating the site on which you clicked on this Privacy & Cookies Policy will be the data controller of any personal data they collect about you. If you are unsure which company is the data controller, please get in touch using the details in the How to contact us section below.
This version was last updated on 13 November 2020. We have updated our Privacy & Cookies Policy in order to comply with new data protection laws in the UK which came into force on 25 May 2018. Please check back regularly as we will need to make periodic changes to this policy to reflect updated guidance and requirements when they become available.
What information do we collect about you?
Information you give to us: In order to process your requests and orders, it is necessary to collect personal data from you. This includes, but is not limited to: your name, address, e-mail address, telephone number, credit/debit card information. We are unable to provide you with products and services if you do not provide certain information to us. You will also be asked to provide additional (non-mandatory) pieces of information such as your interests, preferences, age, gender, feedback, and survey responses so that we can better understand our customers. You can also choose to provide such information by posting on a forum, filling out a web form or when you communicate with us. We also obtain information about you that you have provided to our group companies where we have the appropriate permissions to do so or as otherwise authorised by applicable law.
Information we collect automatically when you use our sites or services: We collect information about your interaction with our sites and services from the devices you use, such as your unique device ID, device type and advertising ID. We also collect information about your visits and activity on our sites (and sites operated by our group companies) including the content and any advertisements that you view and interact with, the address of the site from which you arrived and other technical data about your equipment, browsing actions and patterns (such as the pages you view, the links you click, the items you add to your shopping basket, the length of your internet session, your IP address and approximate location at the time of browsing). This information is collected using cookies or similar technologies. To learn more about these technologies and your choices, go to the section on Cookies and other technologies below.
Information collected from other sources: We will combine your information with information we collect from third parties or public sources, including analytics providers, advertising networks, and publicly available sources such as Companies House and the Electoral Register.
Social Media: Certain sites offer services that require you to set up an account prior to receiving such services. To create a secure account you can use your email address and a password or, if the site offers a Facebook single-sign-on service, you will be able to register for and log-in to your account using your Facebook account. If you choose to use the Facebook single-sign-on service, you are granting permission to Facebook to share certain profile information with us. This will include your name, profile picture and list of friends and any other information notified to you by Facebook prior to you completing the single-sign-on authorisation process. You control what social media information you allow us to have access to using the privacy settings on the applicable social media platform and any permissions you give as part of the single-sign-on authorisation process.
Our sites are not intended for children under the age of 13. If you are under 13, please do not provide any information to us and instead ask your parent or guardian to do this on your behalf. You must be at least 18 years of age to purchase products or services from us. If you are under the age of 18, you must ensure that your parent or guardian purchases the products or services on your behalf.
How will we use the information about you?
We will use your information for the following purposes:
Service Access and Registration: to register you as a new customer when you purchase a subscription, event ticket or other product or service from us or create an account on one of our sites in order to access one of our services.
Sales and Fulfilment: to process and deliver your order; to manage payments, fees and charges; to collect and recover money owed to us; to provide you with services you have requested from us when we collected the information from you.
Customer Relationship Management: to contact you about your account, subscription or other order; to provide you with customer service (such as responding to questions, concerns and feedback and contacting you via email, telephone, SMS/text, post, direct message or other similar communication method for this purpose); to notify you of material changes to our terms or this Privacy & Cookies Policy; to send you service related communications; to ask you to leave a review or take a survey.
Competitions, Awards, Events, Product Trials, Surveys: to enable you to participate in competitions, prize draws, product trials, events, awards, surveys, polls and quizzes and to provide you with any prizes, products or awards as applicable.
Business Administration, Systems and Security: to administer and protect our business and our sites such as troubleshooting, testing, system maintenance, support, reporting and hosting data; to ensure network and system security and prevent detect, mitigate and investigate fraud, security breaches and other prohibited or illegal activities; to verify your identity.
Data Analytics: to measure the performance of our marketing campaigns (for example, analysing open and click rates); to provide insight and analysis of our customers for ourselves and our business partners.
Marketing: to provide you with marketing via email, post, telephone, SMS/text, social media and other digital channels (including Facebook Custom Audiences and Google Custom Match); to make suggestions and recommendations to you about goods and services that could be of interest to you.
Advertising: to select and deliver advertising and content to you and measure the delivery and effectiveness of such advertising and content.
Personalisation: to personalise content, services and communications and target advertising, as further explained in Personalisation and Advertising below.
Aggregation and Anonymisation: to aggregate and anonymise your data, so that we can use it to enable us to sell advertising and monitor the efficacy of our business partnerships.
Personalisation and Advertising
We want the ads and content displayed on our sites to be relevant to you. Personalising and targeting advertising, content, services and communications allows us to provide you with much of our sought-after online content for free.
We will use your information to provide you with personalised content, services and communications as well as targeted advertising on our sites, sites operated by our group companies and selected partner sites. We do this by matching, combining or linking the different sources of information we hold about you (e.g. linking your contact or subscriber information with your activity across our sites or by linking your activity on our sites across all your devices using your email or social media log-in details) or by creating segments based on various factors such as your age and gender, your device details or your inferred interests. We work with data management platform providers to assist with this process.
We also use your information for retargeting (for example, you could see an advertisement on a partner site such as Facebook for a product that you have recently viewed on our sites).
Where we have the appropriate permissions or as otherwise authorised by applicable law, we will use your information to market and advertise our products and services, our group companies’ products and services, and occasionally third party products and services that could be of interest to you including third party offers, advertisements, competitions or commercial communications by telephone (mobile and landline when available), post, electronic messaging (including SMS and MMS), email, online or via applications. You could be contacted directly by our group companies for these purposes.
You can always tell us that you wish to stop receiving direct marketing communications from us. But remember, if you do not want us to get in touch, you will miss out on offers.
If you would prefer not to receive direct marketing communications, simply let us know at any time by writing to the Customer Services Manager at TrustedReviews Limited, New London House, 172 Drury Ln, London WC2B 5QR, UK or email@example.com with the subject line “Privacy”.
You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request. Remember, you can always stop direct marketing messages by clicking on an unsubscribe link in any of our emails or getting in touch with us. Please note that this will not stop you from receiving service messages from us.
What is our legal basis for processing your data?
We rely on the following legal basis when processing your data:
Fulfilling a contract with you and providing you with our services, or to comply with a legal obligation, including to: register you as a new customer when you purchase a subscription, event ticket or other product or service from us or create an account on one of our sites in order to access one of our services; process and deliver your order; manage payments, fees and charges; collect and recover money owed to us; contact you about your account, subscription or other order; provide you with customer service (such as responding to questions, concerns and feedback and contacting you via email, telephone, SMS/text, post, direct message or other similar communication method for this purpose); send you service related communications; provide you with services you have requested from us when we collected the information from you; enable you to participate in competitions, prize draws, product trials, events, awards, surveys polls and quizzes and provide you with any prizes, products or awards as applicable; notify you of material changes to our terms or this Privacy & Cookies Policy; administer and protect our business and our sites such as troubleshooting, testing, system maintenance, support, reporting and hosting data necessary to ensure network and system security and prevent detect, mitigate and investigate fraud, security breaches and other prohibited or illegal activities; verify your identity.
Our legitimate interests (to run an effective and successful business), or the legitimate interests of a third party, where not outweighed by your interests, including to: measure the performance of our marketing campaigns (for example, analysing open and click rates); provide you with marketing via post, telephone, social media and other digital channels (including Facebook Custom Audiences and Google Custom Match); provide you with marketing via email where you have purchased goods or services from us; ask you to leave a review or take a survey; administer and protect our business and our sites such as troubleshooting, testing, system maintenance, support, reporting and hosting data; use data analytics to provide insight and analysis of our customers for ourselves and our business partners; make suggestions and recommendations to you about goods and services that could be of interest to you; select and deliver advertising and content to you and measure the delivery and effectiveness of such advertising and content; personalise content, services and communications and target advertising; to aggregate and anonymise your data, so that we can use it to enable us to sell advertising and monitor the efficacy of our business partnerships. The legitimate interests we rely on for this processing are: to keep our records updated; to study how customers use our products and services; to improve the customer experience; to develop our products and services; to develop and grow our business; to run our business; to provide administration and IT services; for network security and fraud prevention; in the context of a business reorganisation or a group restricting exercise; to inform our marketing and content strategy; to keep our sites and content updated and relevant.
Your consent, including to: provide you with marketing via email, SMS/text, post and telephone, including from our group companies and from third parties. You can withdraw your consent at any time – see Marketing.
What will we disclose to third parties?
We share your personal data with our group companies for the purposes outlined in this Privacy & Cookies Policy.
We also pass your personal data to third parties to enable them to process a request, order or service; to supply you with a prize in the event you win a competition; or in order to obtain professional advice. We use a number of IT service providers inside and outside the European Union to store data and customer management information, provide disaster recovery services, and related IT services that we need to conduct our business and perform any contract we enter into with you. Any third parties employed by us to process your data on our behalf are subject to contractual obligations to protect the security of your data in accordance with the terms of this Privacy & Cookies Policy and, where your data is transferred outside of the European Union, we make sure there are adequate protections in place – see International Transfers for further information.
We share your information with advertisers, ad servers, ad networks and content recommendation services to select and deliver advertising and content, and target and personalise advertising and content both on our sites and on selected partner sites. This will not include any information which directly identifies you in the real world, such as your name, email address, address or phone number. However, by interacting with or viewing an advert or content, you should be aware that the third party could make the assumption that you meet the targeting criteria used to display the advert or content. We also share your information with analytics and search engine providers to assist us in the improvement and optimisation of our sites.
We could merge with or be acquired by another business. If this happens we share the information that relates to you. You will be sent notice of such an event.
We reserve the right to disclose your personal data in order to comply with the law, applicable regulations and government requests. We also reserve the right to use such information in order to protect our operating systems and integrity as well as other users.
How do we protect your information?
Once we have received your data we will take steps to ensure that it is treated in accordance with any applicable laws. Unfortunately the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
How long do we keep your information?
We are required by law to keep certain information about our customers (such as financial and transaction related data) for seven years after they cease being customers for tax purposes.
Our data retention periods vary depending on the context of the services that we provide to you and our legal obligations. To determine the appropriate period for which we keep your data, we consider the amount, nature and sensitivity of your data, the potential risk or harm from unauthorised use or disclosure of your personal data, the purposes for which we process that data (and whether we can achieve those purposes through other means), and applicable legal requirements.
We are based in the UK and seek to keep your data within the European Economic Area (EEA). However, many of our third party service providers and partners are based outside the EEA, or use servers located outside of the EEA for the purposes of storing and processing data, so their processing of your personal data will involve a transfer of data outside the EEA.
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it as to data that remains within the EEA. We do this by ensuring at least one of the following safeguards is implemented:
Adequacy decision: The data is transferred to a country that has been deemed to provide an adequate level of protection for personal data by the European Commission.
Model clauses: We have used specific contracts approved by the European Commission in our arrangement with the third party, which give personal data the same protection it has in Europe.
Privacy Shield: The third party is based in the US and is part of the Privacy Shield, which requires them to provide similar protection to personal data when it is shared between Europe and the US.
You have certain rights in relation to the personal data we hold about you, which we detail below. Certain rights only apply in specific circumstances as set out in more detail below. We also set out how to exercise those rights. When you exercise your rights, we need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will also contact you to ask you for further information in relation to your request to speed up our response.
You have the right to:
Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we could have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we are not always able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes (more information on your marketing choices can be found in the Marketing section above). In certain cases, we will demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Make a complaint at any time to the Information Commissioner’s Office, the supervisory authority for data protection issues in the UK. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance by contacting us using the details provided in the How to contact us section below.
No fee usually required, you will not usually have to pay a fee to access your personal data (or to exercise any of the rights), however, we may charge a reasonable fee if your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. If we choose not to action your request we will explain to you the reasons for our refusal.
If you wish to exercise any of the rights set out above, please contact us using the details provided in the How to contact us section below.
Changes to our Privacy & Cookies Policy
We keep this Privacy & Cookies Policy under review and will update it to reflect changes in our privacy practices. Any updates will be made on this page so that you can always find out what information we collect, how we use it and under what circumstances we will disclose it.
How to contact us
If you have any queries relating to this Privacy & Cookies Policy please contact us by writing to the Customer Services Manager at TrustedReviews Limited, New London House, 172 Drury Ln, London WC2B 5QR, UK or firstname.lastname@example.org with the subject line “Privacy”.
Cookies and other technologies
We use, and allow certain other companies to use, cookies, web beacons and other similar technologies on our sites, applications and communications. This is to understand your use of our services, improve your user experience, enable personalised features and content, optimise advertising and marketing and enable us and third party advertising companies to serve you advertisements specific to your interests across the internet. The technologies we use do not collect any information which directly identifies you in the real world, such as your name, email address, address or phone number.
What are ‘cookies’?
A cookie is a small text file that we, and in certain circumstances third parties, place on your browser (for example, Internet Explorer or Safari) when you visit our sites or open some of our emails. Cookies are useful because, amongst other things, they allow us to recognise you each time you re-visit one of our sites. The entity that places cookies on your browser can then read the information on the cookie that it set.
Cookies are typically classified as either “session cookies” which do not stay on your device after you close your browser or “persistent cookies” which will usually remain on your device until you delete them or they expire.
You can find more detailed information about these technologies at:
Different cookies are used to perform different functions which we explain below. A visit to any of our sites could generate the following types of cookie:
Site performance cookies
The information collected from these types of cookies can be used in conjunction with other information we or our third party partners hold in order to record specific browsing information (for example, regarding the way visitors arrive at our sites, pages viewed, options selected, information entered and the path taken through our sites). The data collected will generally be aggregated to provide trends and usage patterns for business analysis, site/platform improvement and performance metrics and to inform our advertising and marketing strategies. Our cookies, or the resulting analysis, can also be shared with our business partners. We also receive similar information about visitors to the sites of our group companies and other partners.
Cookies can also be linked with other information we hold or infer about you for these purposes. For example, if you are a registered user or provide us with your name, email address, social media log-in details or other contact information (e.g. by entering a competition or signing up to our newsletter) or interact with our email communications (e.g. by clicking on links within the emails), this information can be linked with your browsing activity across all your devices to tailor content, services, advertising and offers for you.
We also obtain information from third party service providers such as demographics and interest categories created from a combination of sources that permit us to provide you with more relevant and useful content, communications and advertising. This information does not identify you personally.
Third party advertising cookies
We partner with advertisers, ad network providers and ad serving companies to place cookies on our sites to allow them to show you advertisements both on and off our sites that are more relevant and useful to you, limit the number of times you see a particular ad and to customise ads. We do not share any information with these third parties that will directly identify you in the real world, such as your name, email address, address or phone number. However, these third parties can assume that users who interact with or click on a personalised advertisement or content are part of the group that the advertisement or content is directed towards. The third parties that generate these cookies have their own privacy policies and we have no access to read or write these cookies.
Social media cookies
How we and third parties use web beacons
We use and permit selected third parties to use web beacons (usually in combination with cookies) to compile aggregate information about your site usage and your interaction with email and other communications to measure performance and to provide content and advertisements that are more relevant to you. A web beacon (also called a web bug, clear GIF or pixel tag) can be embedded in online content, videos and emails, and allows a server to read certain types of information from your device, to know when you have viewed the beacon and the IP address of your device. The type of information collected includes, but is not limited to, information relating to advertising responses, page views, promotion views and purchases made. We will include web beacons in certain promotional email messages and newsletters to determine whether the messages have been opened or acted upon and whether our mailing tools are working correctly. The web beacons can be used to recognise cookies generated by third parties and inform us and third parties of which advertisement or link brought you to our site, allowing us to monitor the efficacy of our business relationships with third parties.
If you do not want your browser to accept cookies and use them in the ways described above, you can change your browser settings. You can also delete existing cookies from your browser. However, blocking all cookies will affect your web experience and can result in parts of our sites not functioning properly. Certain cookies are designed to help save you time by, for example, remembering your contact details when you place an order.
The procedure for modifying your privacy preferences is different for each internet browser and the following links will be helpful:
For general information about cookies and their use, please visit:
Alternatively, you can turn off third party cookies relating to interest based advertising by visiting www.youronlinechoices.eu. However, this will not opt you out of receiving adverts altogether – it simply means that the adverts will not be targeted to you. Please note that there are many more networks listed on this site than we use on our sites.
You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page. For Google Analytics Advertising Features, you can opt-out through Google Ads Settings or by visiting the Network Advertising Initiative opt out page. You can find more information about how Google uses information from our sites here.
You can find more information about how to opt-out of the cookies provided by some of our key partners here:
There maybe other providers used on our site that we do not have direct relationships with. For transparency these can be found in the for each domain:
As web beacons are the same as any other content request included in the recipe for a web page, you cannot opt out or refuse them. However, you are able to disable web beacons in email messages by not downloading images contained in messages you receive (this feature varies depending on the email software used on your personal computer). However, doing this will not always disable a web beacon or other tracking technologies in the email message due to specific email software capabilities. For more information about this, please refer to the information provided by your email software or service provider. Web beacons can also be rendered ineffective in certain circumstances by opting out of cookies or amending your cookie settings in your browser. Further details on web beacons, and how to manage them, can be found here:
Website notifications (pop ups).
We provide news and updates about our sites via push notification messages or ‘pop-ups’. This is a free service. The notifications are only sent to you if you have clicked on a button to allow it (you may have accidentally selected to receive notifications).
We have no control over your subscription to notifications as it is controlled by your browser and device. We do not store any recognisable data about you or your device in connection with the push notification service.
If you wish to unsubscribe from receiving notifications please follow the instructions here:
Important Information for California Residents
This section applies only to California residents. It describes how we collect, use and share Personal Information of California residents in operating our business, and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”) but does not include information exempted from the scope of the CCPA.
Your California privacy rights.
As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
- Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
- The categories of Personal Information that we have collected.
- The categories of sources from which we collected Personal Information.
- The business or commercial purpose for collecting and/or selling Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of third party recipient.
- Whether we’ve sold your Personal Information, and if so, the categories of Personal Information received by each category of third party recipient.
- Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
- Deletion. You can ask us to delete the Personal Information that we have collected from you.
- Opt-out of sales. If we sell your Personal Information, you can opt-out. In addition, if you direct us not to sell your Personal Information, we will consider it a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes. We share your Personal Information with third parties in the following circumstances, which California law classifies as a “sale” of your Personal Information:
- supplying your data to third parties with your express consent (e.g. where you opt in to receive third party marketing or where you have requested to be contacted by a third party);
- supplying your data to list brokers (but only where you have consented to be contacted by third parties);
- supplying attendee data to third parties who provide services in connection with our events, and sending your data to suppliers of certain products and services (where you have consented to hear from such third parties);
- like many companies, we use services that help deliver interest-based ads, content and services to you. California law classifies our use of these services as a “sale” of your Personal Information to the companies that provide the services. This is because we allow them to collect information from our website users (e.g., online identifiers and browsing activity) so they can help serve ads, content and services more likely to interest you.
- Opt-in. If we know that you are younger than 16 years old, we will ask for your permission (or if you are younger than 13 years old, your parent’s or guardian’s permission) to sell your Personal Information before we do so.
- Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as denying you services; increasing the price/rate of services; decreasing service quality; or suggesting that we may penalize you as described above for exercising your rights.
How to exercise your right to information, access, deletion or your right to opt-out of the “sale” of your Personal Information
You may exercise your California privacy rights by emailing email@example.com quoting ‘California Privacy Rights’ in the subject header.
We will need to confirm your identity and California residency to process your requests to exercise your information, access or deletion rights. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
Personal information that we collect, use and share
|Statutory category of personal information (PI)||Source of the PI||Purpose for collection||Categories of third parties to whom we “disclose” the PI for a business purpose||Categories of third parties to whom we “sell” the PI|
|Internet or Network Information||
- 1.1 TrustedReviews Ltd (the “Company”) is committed to respecting your privacy.
- 1.3 This Policy may change from time to time and, if it does, the up-to-date version will always be available on the Trusted Reviews Recruitment Portal and becomes effective immediately.
- 1.4 The data controller is the Company.
- 1.5 In this Policy, Data Protection Law means the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and any equivalent legislation amending, supplementing or replacing the GDPR.
- 2.1 This Policy applies to personal data relating to recruitment that the Company holds on the Trusted Reviews Recruitment Portal or which is otherwise collected by the Company during the process of recruitment.
- 2.2 The scope of this Policy also applies to where personal data is provided to the Company on behalf on an individual, such as through a job boarding company (for example, Indeed, Monster Job or LinkedIn), by a recruitment agency or other organisation acting on behalf of an individual.
- 2.3 Where you provide personal data about other people (for example, if you are a recruitment agent), you represent and warrant that you have the consent of the individual to do this and that the information is accurate and up-to-date. You will inform us if the wishes of the individual or any information changes.
- 2.4 The Company uses such personal data for the purposes of recruiting for roles including permanent or temporary roles, as well as consultancy, agency, casual and contract work.
- 2.5 Pages of the Trusted Reviews Recruitment Portal may, from time to time, contain links to and from the websites of advertisers and partners. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that the Company does not accept any responsibility or liability for these policies or use of the website. Please check these policies before you submit any personal data to these websites.
3. Collection and Use of Personal Data
- 3.1 Your personal data will only be processed for the purposes set out below and in accordance with Data Protection Law. The Company will not process your personal data in any manner incompatible with those purposes unless we are required by law to do so.
- 3.2 The Company may hold and process your personal data for the following purposes:
- (a) recruitment and on-boarding (personal contact details such as name, title, addresses, telephone numbers and personal email addresses, dates of birth, gender, national insurance number and bank account details, data relating to right to work checks, references, curriculum vitae, work history and other information included in as part of the application process);
- (b) for administration of remuneration payments including outstanding student loans, court orders and statutory payments;
- (c) pre-employment screening such as reference checks, right to work checks and criminal conviction checks;
- (d) equal opportunities monitoring (including information about your gender, race, ethnicity, sexual orientation and disabilities);
- (e) recording your attendance at our premises for the physical security of our business and administration purposes;
- (f) parking purposes whilst visiting our premises, your vehicle registration number is recorded; (f) health and safety compliance, to assess your working capacity and occupational health;
- (g) security and crime prevention including CCTV and photographic images;
- (h) to comply with any legal obligations which apply to us or policies that we have in place;
- (I) as we feel is necessary to prevent illegal activity or to protect the Company’s interests or the interests of a third party such as our clients; and
- (j) as we feel is necessary to provide our services or operate our business.
- 3.3 The information above will not be mandatory in some instances and you will be advised of this during the recruitment process.
- 3.4 Special categories of personal data (such as information about your health) will be processed where the Company needs to carry out its legal obligations; to run the business; where the processing is necessary for the assessment of your working capacity, occupational health or obtaining a medical diagnosis; or where it is needed in the public interest (such as equal opportunities monitoring).
- 3.5 The Company makes every effort to ensure that your personal data is accurate and, where necessary, kept up to date. It is your responsibility to ensure that your information you provide and is kept on the Trusted Reviews Recruitment Portal is accurate and kept up to date. You should access the Trusted Reviews Recruitment Portal regularly to ensure that your details including your curriculum vitae is up to date. In the absence of evidence to the contrary, the Company shall assume that the information provided by you is accurate.
- 3.6 We rely on one or more of the following legal basis for processing your personal data:
- (a) for the performance of, or entry into, a contract with you or a third party (for example, where you are a recruitment agent);
- (b) to comply with our legal and regulatory obligations;
- (c) we (or a third party such as our client) has a legitimate interest in doing so and where these legitimate interests are not overridden by your (or the relevant individual’s) interests. These legitimate interests will include our interests in managing our relationship with our clients, administering visits to our offices and projects and ascertaining achievement of proper standards/ compliance with policies, practices or procedures;
- (d) where processing of special category data is necessary in the context of the establishment, exercise or defence of legal claims or in the substantial public interest; and
- (e) where we have obtained your express consent to do so. As we will explain at the time we collect your consent, you may withdraw your consent at any time in accordance with the information we provide to you at that time. This is explained at paragraph 6 of this policy.
4. Sharing Your Data and Security
- 4.1 For the purposes set out above, the Company may transfer personal data to third parties. These include our clients; joint venture partners; sub-contractors or suppliers including our Trusted Reviews Recruitment Portal provider; our professional advisors, insurers and regulatory bodies. This will be for one of the following reasons: you specifically request that we do this; it is necessary to provide information or services to you; for our legitimate interests or the legitimate interests of a third party (such as our client); in the public interest; or to carry out our legal or regulatory obligations.
- 4.2 Personal data may be shared between the parties listed in paragraph 4.1 above and/or the relevant entities within the Company’s group. Where personal data is shared with other parties and/or outside the European Economic Area, the Company will ensure continued compliance with Data Protection Law.
- 4.3 We will not rent or sell your personal data to any other organisation or individual.
- 4.4 The Company has put in place measures to ensure the security of the information collected and its correct use. These are appropriate to the nature of the information and to prevent unauthorised access. All incoming emails are scanned using virus-checking software. The software will also block unsolicited marketing email (spam) and emails which have potentially inappropriate attachments. All personal data you register on the Trusted Reviews Recruitment Portal will be located behind a firewall. Once we have received your information, we follow strict security procedures as to how your personal data is stored and who sees it, to help stop any unauthorised person getting hold of it. Access to your personal data will only be given to those who strictly need such access.
- 5.2 If you are unsuccessful in the opportunity applied for, the Company will retain your personal data to notify you of other suitable opportunities. This will include your job preferences such as your job role, geographical areas, salary expectations, your curriculum vitae and other information you submitted during the recruitment process. You have the right to have your personal data deleted in accordance with paragraph 10.
- 5.3 Subject to paragraphs 5.1 and 5.2, we will keep your personal data stored on our systems for only as long as is necessary to achieve the objectives at paragraph 3 of this Policy, albeit we may keep your data for longer than this if we cannot delete it for legal, regulatory or technical reasons. We may also keep it for statistical purposes.
- 5.4 The third parties we engage to provide services on our behalf will keep your personal data stored on their systems for as long as is necessary to provide the services to you; for such purposes that the personal data was disclosed for; and for legal and regulatory reasons.
6. Withdrawing Consent
- 6.1 Where you have provided consent for us to process your personal data, you may withdraw your consent to this processing. Where you have submitted information via the Trusted Reviews Recruitment Portal, you can withdraw your consent through the Trusted Reviews Recruitment Portal. In all other circumstances that you have submitted your personal data, you can withdraw your consent by contacting us.
- 6.2 If you do withdraw your consent, we may still be able to process some of the data that you have provided to us on other grounds and will notify you of these at such time.
7. Data Portability
- 7.1 Where you have provided personal data to the Company, which is processed on the basis of consent and by automated means, you can ask to receive that personal data in a structured, commonly used and machine-readable format.
8. Access Your Personal Data
- 8.1 You can access and retrieve the information held about you on the Trusted Reviews Recruitment Portal directly.
- 8.2 You can also write to the company to request confirmation of whether we hold personal data about you, the details of the personal data and access to that personal data from us. Your request will be processed and the information to which you are entitled will be provided to you no later than one month (except in extenuating circumstances) from when we receive your request, subject to the requirements and exemptions of Data Protection Law. If such extenuating circumstances mean we are unable to comply with your request within one month, we will tell you as soon as possible about this delay. 8.2 Examples of exceptions, where the Company (by law) does not provide access to personal data include:
- (a) References written by the Company;
- (b) Any data from which a third party can be identified;
- (c) Any data held for the purposes of management forecasting or planning;
- (d) Any data prejudicing ongoing negotiations with the employee; and/or
- (e) Any data protected by legal privilege.
9. Request Your Data is Rectified
- 9.1 You can rectify the information held about you within the Trusted Reviews Recruitment Portal directly.
- 9.2 You can also write to the Company where personal data is inaccurate or where you would like us to complete any incomplete information. You should provide us with a statement that sets out the details of your request for rectification.
10. Request Your Data is Deleted
- 10.1 You can delete the information you wish to be removed from the Trusted Reviews Recruitment Portal directly. 10.2 You can also write to the Company to request that your personal data is deleted where we do not have grounds to continue processing your personal data. The Company will be unable to comply with your request in certain circumstances including, for example, if the Company has legal obligation to continue processing the data.
11. Object to Processing
- 11.1 You can object to the Company processing your personal data where (i) the Company is processing your personal data on the basis of its legitimate interests or (ii) you have grounds to believe that the have contested the accuracy of the personal data.
- 11.2 To exercise any of the above rights, you should make your request via email to firstname.lastname@example.org
- 12.1 If you have concerns around the use of your personal data in the context of this Policy, please address your concerns to email@example.com in the first instance.
- 12.2 If you are dissatisfied with the response of the Trusted Reviews HR Department, please address your concerns to the GDPR Project Manager, Incisive Media Ltd, New London House, 172 Drury Lane, London WC2B 5QR. Should you remain dissatisfied following the response you can address your concerns to the Information Commissioner’s Office.