Our commitment to privacy
At Hall & Kay we take our responsibility to process the personal information provided to us seriously. This privacy notice explains how we do that. It sets out how and why we collect and use your personal information, what information we collect, and explains your rights. We are required under the General Data Protection Regulations (GDPR) to notify you of the information contained in this privacy notice.
Purpose of collecting your information and legal basis
We process personal information to:
We rely upon a number of different legal bases for processing personal information and sensitive information, these include:
What personal information do we collect?
We collect the following personal information (as applicable):
H&K only collects and processes the sensitive information of its employees for recruitment and diversity purposes. This includes categories such as sexual orientation, religious beliefs, ethnicity, disability information and copies of passports. This information is voluntarily given by employees and available to view privately, it can be deleted or amended by the employee at any time via our iTrent – Employee Self Service (ESS) system.
Who do we share your personal information with?
We sometimes need to share the personal information we process with the individual themselves and also with other organisations.
We may share your personal information with:
We will never sell your personal information and we take steps to keep your details safe and secure.
How long do we hold on to your information for?
H&K will retain your personal information only for as long as is necessary for the purpose we collect it. Different laws may also require us to keep different data for different periods of time.
What are your rights over your personal information?
Where applicable, you have the following rights over your personal information:
To restrict the processing of your personal information.
In the event of a data breach H&K will establish the likelihood and severity of the breach and ensure we notify those of which the data breach has affected. If it’s likely there will be a risk from the resulting breach, we will also notify the Information Commissioners Office (ICO) who is the UK regulatory body for data protection.
Updates to this Privacy Notice
H&K reserve the right to update this Privacy Notice at any time. When we have to do this the revised notice will be posted on this page. Please check this page to review any changes we have made.
If you require any further information regarding this Privacy Notice please contact: firstname.lastname@example.org
This website uses things called “Cookies” to ensure your experience of the site, and our ability to improve it is enhanced. Specifically, the following Cookies are in use: