We are committed to protecting your personal information in accordance with the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).
Edwards Gibson is a specialist Legal Recruitment Consultancy specialising in Private Practice and in-house qualified lawyer moves.
The data controller
Our contact details are:
Address: 71-73 Carter Lane, London, EC4V 5EQ
Telephone Number: 020 7153 4903
Email Address: firstname.lastname@example.org
Information we collect
We may collect and process:
- personal and contact details (including name, address, e-mail addresses and contact phone numbers);
- details of current and previous employment history, education, training and your right to work documents; and
- relevant documents including your Curriculum Vitae.
There may be occasions when Edwards Gibson will source personal information from other available sources, such as corporate websites, professional networking sites (including LinkedIn), and other selected third parties.
How we use your information
First and foremost, we will use your personal data to provide you with the best service. We also require this information for the following reasons: –
- to maintain our business relationship with you;
- to contact you via email, SMS, phone or any other media;
- to provide you with information about relevant vacancies and to assist you in finding a suitable position by matching your skills, experience and education with a potential employer;
- to send your information to clients for potential roles. We will always obtain consent before presenting your details to any of our clients;
- to process and respond to enquiries;
- for internal record-keeping and fulfilling our obligations of best conduct;
- to fulfil contractual obligations with our clients;
- to comply with our legal obligations and rights, under contracts and at law, and to cooperate with authorities and investigations; and
- for other legitimate business purposes.
How we store your data
Any personal details which we may collect from you will be stored securely:
- on our server; and/or
- in the cloud.
These electronic databases are accessible by our staff and, where necessary, our IT support. In some instances, we may also print out such details and store them temporarily in hard copy form.
How long we keep your data for
We will only retain your data for as long as:
- you have consented to us retaining your data; and/or
- there is a legitimate interest for us to do so; and/or
- there is a statutory requirement for us to do so; and/or
- is necessary to be able to provide a service to you.
Please be advised that we may retain some of your information after any active business relationship has ended, for instance if this is necessary to meet our legal obligations, such as retaining the information for tax and accounting purposes.
In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes.
Where Edwards Gibson is the data controller you are entitled to the following, subject to some legal exemptions: –
- to request a copy of the personal information of which you are the data subject
- to have any inaccuracies corrected
- to have your personal data erased
- to place restrictions on us processing your data
- to object to processing
- to request your data to be ported (data portability)
- to withdraw consent (where applicable)
Where you decide to exercise your rights, for example your right to object to us processing your data, this will affect the services we are able to supply to you.
If you would like a copy of your personal data, please submit your request in writing to 73 Watling St, London, EC4M 9BJ.
For more information on your rights please visit the Information Commissioner’s Office (ICO) website: https://ico.org.uk/
What legal basis do we have for using your information?
Consent (GDPR, Article 6(1)(a))
In certain circumstances, we will ask for your consent to process your data. For example, we will always obtain consent before presenting your details to any of our clients.
Where consent is the lawful basis for our processing, you have the right to withdraw your consent to this particular processing at any time.
Legitimate Interest (Article 6(1)(f))
In some instances, we will process your data on the basis of legitimate interest.
As a recruitment business and recruitment agency we introduce candidates to clients for permanent employment, temporary worker placements or independent professional contracts. An essential part of this is processing personal information to assess suitability for potential roles, to find potential candidates and to contact clients.
In order to support our candidates’ career aspirations and our clients’ resourcing needs we require a database of candidate and client personal data containing historical information as well as current resourcing requirements.
To maintain, expand and develop our business we need to record the personal data of prospective candidates and client contacts.
Contract (Article 6(1)(b))
We will process your data on the basis of contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.
Legal obligation (Article 6(1)(c))
We will process your data on the basis of legal obligation if we are legally required to hold information on you to fulfil our legal and regulatory obligations, such as disclosure to public authorities, regulators and investigations.
How and when do we share information with third parties?
Your personal information may be shared with our clients in order to determine whether you are suitable for potential vacancies. We will always obtain consent before presenting your details to any of our clients.
Other third parties
We may employ third party companies or individuals to process Personal Information provided by us on our behalf for business functions, including (without limitation) IT support, hosting our data on cloud platforms, legal, accounting, audit, consulting and other professional service providers, and providers of other services related to our business.
We have carefully selected these third parties and taken steps to ensure that your Personal Information is adequately protected.
We may transfer your data outside the European Economic Area (EEA).
Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
- Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
What if I am unhappy with how my data has been handled?
If you have concerns about the way we are handling your personal information, you can raise them with the Information Commissioner’s Office via the ICO website: https://ico.org.uk/.
Changes to this policy
Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy notice.
Last updated: May 2018
© Edwards Gibson 2018