Talent Lift Ltd is committed to protecting your privacy and safeguarding the security of any personal information provided to us by you. We adhere to relevant UK legislation and ensure your information is only used for the purposes set out in this policy.

This Privacy Policy explains what we do with your personal data: how we collect, use and process your data and, in doing so, how we comply with our legal obligations. It applies to everyone whose data we come into possession of including candidates, clients, website users, suppliers, staff and referees.

For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”), the company responsible for your personal data (the data controller) is Talent Lift Ltd (registered company no 12033481) of St Johns Court, Wiltell Road, Lichfield, Staffordshire WS14 9DS.

What personal data do we collect? Your name, contact details, education and employment history, proofs of professional qualification, National Insurance number, right to work documentation, financial information, your referees, social media profiles and any additional information that you choose to provide us with. We may also collect, where appropriate or required, sensitive personal data related to diversity information and/or criminal convictions – for us to do this, we will require your consent.

Legal bases for processing your data: Article 6(1)(f) of the GDPR states that we can process your data where it is the legitimate interest of you and / or us or a third party – except where such interests are overridden by the interests or fundamental rights or freedoms of you which require protection of personal data. You may object to our processing your personal data on this basis by emailing gdpr@talentlift.co.uk stating your objection.

Our legitimate business interests: We believe that if you are looking for employment or have posted your professional CV information on a job board or professional networking site, you are happy for us to collect and otherwise use your personal data to offer or provide our recruitment services to you and share that information with prospective employers and assess your skills and experience against our current / future vacancies. By doing so, we are acting in your, our and our clients’ legitimate interests. Should we need to share your details in connection with crime detection, tax collection or actual / anticipated litigation, we would do so in our legitimate interests and good faith, notwithstanding our legal obligations.

Consent: When processing your sensitive personal information, we will obtain your specific opt-in consent outlined in Article 4(11) of the GDPR. You have to give us your consent freely, with knowledge of how your data may be processed. We will keep records of the consents that you have given. You may withdraw your consent at any time by emailing gdpr@talentlift.co.uk, asking to retract your consent for processing.

How do we collect your personal data? Directly from you and / or from third parties. You may fill in our forms, register or apply to vacancies via our website or other job boards and through correspondence, oral, email or otherwise. It may also come from interaction with us on social media platforms.

How do we use your personal data? To help find you employment or other work roles that might be suitable for you. Where appropriate and in accordance with local laws and requirements, we may also use your personal data for marketing, profiling and diversity monitoring. We will occasionally send you job information where we have assessed that it is beneficial to you as a candidate and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interests.

Who do we share your personal data with? We may share your information with prospective employers. We may also share your personal data with third parties assuming it is in your/our/their legitimate interest or we have obtained your specific consent for doing so.

How do we safeguard your personal data? We and our IT partners have put in place appropriate measures to prevent unauthorised access to and misuse of your personal data. For further information email gdpr@talentlift.co.uk

How long do we keep your personal data for? We only retain your personal data for as long as we need it for our legitimate business interests. Our current retention notice based on this is 2 years after we have ceased having meaningful contact with you or, where appropriate, the company you are working for, unless we have reason to believe that the law or other regulation requires us to retain it for longer.

Where do we store and process our personal data? Our IT partners may have secure servers based outside the EEA, however any processing of your data will be carried out locally in the UK. We take all reasonable steps to ensure that this data is handled securely and in accordance with this privacy policy.

Your right to lodge a complaint with the supervisory authority: You may register a complaint with the Information Commissioner’s Office either by calling them on 0303 123 1113 or email casework@ico.org.uk

You have the right to access any personal information that Talent Lift Ltd processes about you and to request information including; the personal data we hold about you; the purposes of the processing; the categories of personal data concerned; the recipients to whom the personal data has/will be disclosed; how long we intend to store your personal data for. If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified. You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use. If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.